Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa
File:                     38637c89-cc87-3358-8ba2-8284fe77e03e.roa (raw, json)
Hash identifier:          FSTnU6w0Ofvy6nULtmV5TY0xfUyECoSX94jUgPNFSe4=
Subject key identifier:   9A:7B:A0:45:99:0F:39:19:A3:9A:47:60:82:03:2C:B5:B8:A1:67:04
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462604131B39C143FCC693E0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa
Signing time:             Wed 20 Mar 2024 20:49:15 +0000
ROA not before:           Wed 20 Mar 2024 20:49:15 +0000
ROA not after:            Tue 18 Jun 2024 20:49:15 +0000
asID:                     36492
IP address blocks:        136.22.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:04:13:1b:39:c1:43:fc:c6:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:49:15 2024 GMT
            Not After : Jun 18 20:49:15 2024 GMT
        Subject: CN=fbaa3155-a247-4a6f-b4f0-1ef08a086db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:1b:a8:c6:1c:60:85:e3:cf:39:a5:fe:28:
                    77:dd:76:a1:f5:84:8b:9c:5d:62:3b:65:05:99:43:
                    07:61:02:3a:bf:e0:fd:89:db:9c:9e:1c:9c:86:94:
                    be:0a:8d:d1:d0:8a:d2:83:9a:3c:2f:e3:fb:a7:a6:
                    65:69:e4:e7:39:80:0e:e3:8e:b1:86:80:52:91:0a:
                    ec:96:bd:43:85:b8:0f:69:13:7e:7b:34:72:94:c4:
                    8f:4d:f7:0e:8d:6d:c5:d3:b8:3c:09:7a:b7:25:58:
                    58:10:1c:72:a2:ca:57:45:e1:9a:ce:ab:06:0f:81:
                    26:e9:24:a0:9c:9f:56:94:5f:f1:4d:80:d2:df:14:
                    2f:5c:0d:8a:39:9e:44:a0:aa:b0:e8:0f:74:0c:f8:
                    89:d4:f6:1f:6f:72:6e:82:8e:6a:85:d0:bf:7c:e2:
                    e8:ae:5a:0a:5d:f1:ab:7c:a2:e5:9f:44:37:06:9c:
                    46:c7:a8:1e:86:8b:51:a7:c8:d8:d2:8a:2b:ff:73:
                    54:5d:3e:2b:96:07:0b:1b:0b:6c:40:63:66:4c:06:
                    63:9b:05:a4:ff:bb:02:29:62:90:08:21:35:68:cc:
                    46:68:35:06:b4:a4:d9:8d:4c:03:bb:4a:9b:22:f1:
                    26:0a:46:4d:1f:4a:b0:89:08:df:96:ca:9c:c6:eb:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7B:A0:45:99:0F:39:19:A3:9A:47:60:82:03:2C:B5:B8:A1:67:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:c5:5a:0a:3a:73:73:c8:32:0a:70:fb:fc:d7:c2:25:3f:
         6d:7d:bb:ef:e8:25:b7:f9:1f:f1:6d:50:81:a7:24:23:97:89:
         b2:fc:c2:a5:72:4d:1b:d1:ee:ce:67:67:8e:ae:b7:7d:03:22:
         09:ef:02:e5:06:b1:d1:d1:13:fd:71:0a:e7:57:00:92:3a:04:
         53:54:b1:c9:9c:17:84:f0:4d:e5:57:af:35:9a:ae:60:c6:bf:
         10:bf:f4:64:97:7e:5a:56:b3:3f:3b:3d:aa:e7:5e:4d:ae:b4:
         a9:f5:f4:2b:26:c1:71:ba:40:8c:44:13:f8:54:1b:f9:d6:1a:
         80:09:15:cf:c0:63:77:41:a5:2d:5c:cd:17:ea:34:17:43:12:
         4a:99:a2:cc:30:b1:45:5b:b6:0c:9a:a0:6b:0a:26:7b:aa:69:
         5f:bf:a7:4d:42:0d:d2:0e:a8:65:b5:bf:7d:51:66:2a:f7:5c:
         d4:19:a1:6f:47:bd:4f:25:1d:f8:58:e1:fc:88:72:1a:9d:5e:
         91:f1:f4:2d:e6:5b:7e:c3:91:67:bb:a5:51:8f:15:7f:94:73:
         e0:b8:cb:94:29:90:20:40:ae:af:56:dc:78:d3:9e:8d:a6:64:
         5d:db:20:46:f2:5d:1b:72:63:09:c0:a5:5c:c3:a0:ff:45:61:
         6b:90:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org