Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File:                     35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier:          s/X0d6fFzB9JznANa5WDtoCK5mgbw/wqA6dFigq8tM8=
Subject key identifier:   10:79:8D:C9:F1:DB:D9:A7:BB:8B:2F:03:0B:48:0C:46:19:3F:8E:D0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B5FE9004526E53763E0C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:5f:e9:00:45:26:e5:37:63:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0a0d166b-efc9-4019-9649-84275e54077a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:02:7e:ff:01:ce:1a:30:66:c0:8a:a9:58:
                    f1:cf:98:92:f5:ae:aa:b4:e4:a5:6e:6a:75:2a:31:
                    18:56:eb:7b:8c:f2:7b:cf:1a:ce:03:c5:4a:f9:da:
                    b9:ae:78:1d:91:a5:5a:35:4d:60:c3:5f:6f:4e:cc:
                    a8:8e:b5:9c:7d:58:08:3e:09:0f:05:32:1c:67:59:
                    cb:8a:00:64:50:07:c1:88:ca:6f:d5:ac:bb:c1:08:
                    93:15:3f:71:67:30:17:c1:e2:92:b8:43:b7:f8:e2:
                    12:d7:7d:c3:9e:42:e2:20:17:41:c9:dd:57:86:3b:
                    fa:35:d3:14:8c:69:44:ba:e0:7c:15:ca:7c:92:26:
                    cd:a2:22:da:6f:72:80:92:e4:fb:0a:30:6e:46:37:
                    63:2c:e5:8a:e7:4b:9b:f4:b5:3e:0f:6e:d1:5b:d2:
                    62:e0:04:9f:6d:a7:b3:7e:9d:ab:75:40:2c:36:64:
                    74:59:c7:e6:4c:8f:0f:18:e4:16:44:96:b0:09:fe:
                    78:0d:67:79:17:7a:a5:bd:e3:8b:a3:53:c0:8e:21:
                    cb:13:32:e0:1d:61:96:5f:98:dc:eb:fe:fd:43:b6:
                    2d:9f:a7:57:bf:90:40:cf:fa:95:7e:d8:24:9b:1d:
                    cf:17:00:6b:ec:01:65:b4:ef:e2:c3:be:8a:d4:c0:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:8D:C9:F1:DB:D9:A7:BB:8B:2F:03:0B:48:0C:46:19:3F:8E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:81:66:57:98:da:aa:2d:7d:50:68:92:02:a6:53:a5:f3:
         63:d7:cb:18:15:a7:fe:28:ba:e8:ad:c8:f1:87:36:64:ea:3f:
         a6:5f:f1:fd:d9:07:4b:27:75:c3:34:4a:d1:e1:68:34:25:db:
         f3:64:8d:05:75:09:3f:1b:1b:06:0c:b7:ec:f6:74:ac:41:9f:
         f3:c5:9a:3e:eb:85:d9:78:96:43:38:1e:60:4b:f6:5d:60:b6:
         7c:99:d8:da:78:01:04:f6:bc:f5:67:3c:00:9d:8b:4a:cd:32:
         e6:b1:2f:36:59:c4:af:9c:47:95:13:27:fa:ad:9e:51:66:46:
         49:92:20:7d:d0:80:0d:41:9e:c5:12:cf:e5:9b:37:9b:b9:fa:
         7a:5e:6c:e1:f6:bb:83:1b:5e:25:78:52:87:63:cc:36:a3:d5:
         a2:1f:a2:1f:0d:47:ab:d9:3e:26:20:cc:b8:9e:01:0c:40:96:
         69:6b:ac:14:23:3e:85:ad:13:c0:f9:24:2d:8d:26:3d:db:82:
         71:bd:94:f4:8a:73:55:88:83:f8:54:17:2f:09:94:f0:ec:c5:
         48:4d:59:d9:b1:34:6b:df:e9:cc:8a:77:3f:45:18:26:a1:63:
         f7:bd:81:57:af:1e:e4:b3:af:c5:c1:b5:c9:1e:ed:a1:86:0e:
         0d:7d:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:18:06 2024 by rpki-client on console-ams.rpki-client.org