Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File:                     35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier:          hgDbvDtZNZDSAcwWAtEJCHUf0KxzgZKKd1+Q93YKTjQ=
Subject key identifier:   52:85:85:C2:4C:59:68:AA:FE:8C:FB:44:14:EA:4F:56:23:F5:69:C1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462CD9E6146AE5E71A864900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time:             Wed 20 Mar 2024 21:03:02 +0000
ROA not before:           Wed 20 Mar 2024 21:03:02 +0000
ROA not after:            Tue 18 Jun 2024 21:03:02 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:d9:e6:14:6a:e5:e7:1a:86:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:03:02 2024 GMT
            Not After : Jun 18 21:03:02 2024 GMT
        Subject: CN=b599e2aa-0bc9-419f-bafe-a102a393de04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:d7:76:37:cb:a3:dd:7e:41:e1:64:1f:01:
                    ea:df:64:19:26:8c:36:67:ec:fb:8b:49:9c:e1:c8:
                    96:4e:03:62:26:36:69:d2:36:d4:08:df:d5:88:08:
                    c0:ef:07:7c:5f:88:aa:df:ce:55:db:b0:03:2f:de:
                    8b:8e:af:74:3e:63:e8:96:9b:33:c5:7b:bd:48:33:
                    3c:65:26:85:25:bb:8d:76:c9:9f:12:ca:dc:2c:c7:
                    fa:f1:fe:c1:22:0f:21:24:e5:7c:b8:a7:75:6c:05:
                    ec:34:63:ba:96:62:08:e6:e3:99:e4:78:4f:68:af:
                    30:25:be:54:2f:26:05:66:58:80:4e:13:5c:d3:93:
                    62:67:34:a7:e8:08:b0:47:52:fa:31:f5:80:34:c5:
                    78:88:4d:06:b9:4c:5e:fa:c3:b9:18:9f:56:46:fb:
                    49:e3:3a:c8:7c:a2:ff:64:d4:6e:d5:25:01:a5:6e:
                    5c:0c:a7:d4:63:b0:4e:0f:69:b2:6f:5e:a7:57:de:
                    1f:a6:ed:68:46:b4:d4:16:56:20:6c:43:ea:a0:bf:
                    77:34:8b:a3:3c:97:66:20:c1:38:5f:c0:bb:38:0c:
                    7a:85:29:ca:a1:00:78:6b:f6:be:de:b4:33:bb:b2:
                    21:e9:00:72:42:93:3c:e1:16:2d:2b:94:2e:74:db:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:85:C2:4C:59:68:AA:FE:8C:FB:44:14:EA:4F:56:23:F5:69:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b2:0c:38:10:62:47:17:16:08:55:31:74:8b:06:fe:82:08:
         e0:05:57:87:31:c8:26:10:4d:ab:f0:5a:e9:fd:4d:c4:b6:bd:
         d7:00:9b:2e:47:09:58:51:d3:1a:23:01:19:89:a8:05:71:2c:
         53:5f:6c:64:d0:79:3f:a6:1f:29:49:d2:67:56:a6:ab:4d:f5:
         80:47:99:bf:be:35:37:99:55:d8:99:40:fc:59:6a:0a:4e:57:
         8f:fe:77:2e:a4:66:4b:a8:96:0a:8c:e5:0d:5a:cc:9c:a9:21:
         1e:f2:6d:3b:94:96:84:57:19:f5:cc:fe:55:7f:a0:8a:cd:6f:
         c7:e4:6c:00:e8:15:2a:f7:70:29:63:df:1a:cc:01:ae:f1:c3:
         b2:43:81:27:96:30:c8:ca:9a:4f:02:19:54:89:cf:73:ef:bb:
         a2:ad:21:6b:3f:ed:32:95:5c:c7:03:bf:4c:d0:0c:81:91:8a:
         da:70:cf:05:bb:f2:67:8d:84:70:f6:db:a1:87:e5:e9:f6:40:
         91:61:89:02:51:20:82:b9:78:2b:4e:be:a9:e6:e6:31:d3:b5:
         0d:61:57:c6:90:67:b8:66:01:bb:01:7c:42:f2:6a:76:c1:61:
         5f:c8:b6:21:88:f2:9b:cb:17:2f:b5:97:9f:35:e5:42:9d:9f:
         76:bf:2a:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLNnmFGrl5xqGSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMDIxMDMwMloXDTI0MDYxODIxMDMwMlowLzEtMCsGA1UEAxMk
YjU5OWUyYWEtMGJjOS00MTlmLWJhZmUtYTEwMmEzOTNkZTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidDXdjfLo91+QeFkHwHq32QZJow2Z+z7i0mc
4ciWTgNiJjZp0jbUCN/ViAjA7wd8X4iq385V27ADL96Ljq90PmPolpszxXu9SDM8
ZSaFJbuNdsmfEsrcLMf68f7BIg8hJOV8uKd1bAXsNGO6lmII5uOZ5HhPaK8wJb5U
LyYFZliAThNc05NiZzSn6AiwR1L6MfWANMV4iE0GuUxe+sO5GJ9WRvtJ4zrIfKL/
ZNRu1SUBpW5cDKfUY7BOD2myb16nV94fpu1oRrTUFlYgbEPqoL93NIujPJdmIME4
X8C7OAx6hSnKoQB4a/a+3rQzu7Ih6QByQpM84RYtK5QudNtJ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKFhcJMWWiq/oz7RBTqT1Yj9WnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzU0MDdkMTEtNjUwMi0z
NWQ4LWI4ZjAtNmVlY2ZlYTA2NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeyDDgQYkcXFghVMXSLBv6CCOAFV4cxyCYQTavwWun9TcS2vdcAmy5H
CVhR0xojARmJqAVxLFNfbGTQeT+mHylJ0mdWpqtN9YBHmb++NTeZVdiZQPxZagpO
V4/+dy6kZkuolgqM5Q1azJypIR7ybTuUloRXGfXM/lV/oIrNb8fkbADoFSr3cClj
3xrMAa7xw7JDgSeWMMjKmk8CGVSJz3Pvu6KtIWs/7TKVXMcDv0zQDIGRitpwzwW7
8meNhHD226GH5en2QJFhiQJRIIK5eCtOvqnm5jHTtQ1hV8aQZ7hmAbsBfELyanbB
YV/ItiGI8pvLFy+1l5815UKdn3a/Kso=
-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org