Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa
File:                     38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa (raw, json)
Hash identifier:          anc9BSVjY/rLfFWV8DW+k4G36GvM+UyNLyO2HHLTdGM=
Subject key identifier:   3A:77:71:2F:4E:8F:EC:15:C4:42:C8:63:8F:98:81:A7:E8:42:7B:D7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B401B2DE5D897D251F070
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:40:1b:2d:e5:d8:97:d2:51:f0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=92271441-9ead-497b-b010-d12e3b91e961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:41:d8:46:4a:89:51:be:dc:71:07:0f:86:
                    e8:7a:65:53:10:5a:6a:80:2e:d5:e8:f9:50:f4:41:
                    f4:83:c8:c9:7e:6b:01:df:a0:a4:cc:5f:bc:7d:ab:
                    65:f7:f6:11:a7:1d:84:1e:68:6a:a2:e8:a2:6c:25:
                    ab:70:ac:f0:3f:50:ac:ee:c8:23:22:12:d7:7f:51:
                    02:c4:2b:7a:c1:52:6e:8f:02:a1:66:49:3e:52:d3:
                    9e:b0:60:13:9b:8e:af:65:de:c1:f2:9c:da:54:0b:
                    d4:ec:28:9b:d1:47:89:05:17:c4:8f:03:57:df:a4:
                    1d:40:a1:d9:f6:30:7b:a9:ab:da:41:74:d0:bd:3c:
                    f2:59:21:b5:4e:15:4f:56:92:7b:83:1f:7d:58:bf:
                    71:f1:d1:93:55:e8:c5:f8:36:f7:6d:98:6e:6e:aa:
                    9b:4d:ad:08:3b:52:58:18:9b:cf:e9:5b:34:ba:27:
                    5c:c9:f8:e2:0a:fd:08:85:b7:db:a3:fc:9e:9e:63:
                    df:6c:39:e6:df:b2:80:f6:04:65:1f:29:30:64:e0:
                    de:45:d1:c2:b1:f4:17:ce:5e:f4:25:34:81:15:92:
                    30:83:04:4e:c0:97:fd:f6:27:4b:53:df:a5:ae:3a:
                    e0:66:8d:3a:8c:ec:e7:66:eb:86:01:70:34:ac:87:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:71:2F:4E:8F:EC:15:C4:42:C8:63:8F:98:81:A7:E8:42:7B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38a04656-bcbe-3e40-a1c9-bbdb1ae37a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:5d:e5:e1:f5:b0:a4:07:e2:37:73:de:45:0b:3e:7f:1d:
         a0:b9:58:0b:e8:14:de:24:ed:33:3a:33:33:5d:86:a6:7a:95:
         57:e3:4b:8e:65:de:5e:32:7a:c1:cd:db:e1:0d:d5:cc:ed:e9:
         aa:26:8e:38:5d:ae:98:1b:75:54:0a:73:cb:a3:ea:58:ac:cf:
         ee:29:ea:a5:62:e3:77:8f:60:18:07:cf:c2:00:31:8b:2b:5f:
         14:3e:33:60:e8:eb:64:d3:1e:b1:3e:2f:d7:1a:9a:eb:11:ef:
         90:bb:64:15:9f:e5:af:eb:1d:08:4a:47:a1:33:76:93:d0:41:
         ac:e8:a4:cb:ce:7e:9e:dc:37:13:71:a5:1d:c1:93:1a:2a:a8:
         18:e8:ba:68:b4:9e:9d:a5:88:6c:af:b5:45:0f:0f:7b:d0:74:
         b8:59:64:76:e3:93:51:17:38:5d:ed:a6:a1:fb:53:6d:ce:a8:
         ac:21:b9:5a:90:4d:43:48:db:80:cc:28:79:aa:7a:b2:5f:79:
         3e:96:77:57:51:81:ca:68:42:e7:2b:e3:0e:58:80:e3:a5:60:
         0b:10:f8:55:81:a2:c0:92:ec:35:ab:bd:6c:a1:fb:11:92:49:
         be:c2:f0:f6:af:bf:aa:b1:20:8e:e4:2d:1d:21:1e:03:b8:90:
         ab:1f:c3:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0AbLeXYl9JR8HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTIyNzE0NDEtOWVhZC00OTdiLWIwMTAtZDEyZTNiOTFlOTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXRB2EZKiVG+3HEHD4boemVTEFpqgC7V6PlQ
9EH0g8jJfmsB36CkzF+8fatl9/YRpx2EHmhqouiibCWrcKzwP1Cs7sgjIhLXf1EC
xCt6wVJujwKhZkk+UtOesGATm46vZd7B8pzaVAvU7Cib0UeJBRfEjwNX36QdQKHZ
9jB7qavaQXTQvTzyWSG1ThVPVpJ7gx99WL9x8dGTVejF+Db3bZhubqqbTa0IO1JY
GJvP6Vs0uidcyfjiCv0Ihbfbo/yenmPfbDnm37KA9gRlHykwZODeRdHCsfQXzl70
JTSBFZIwgwROwJf99idLU9+lrjrgZo06jOznZuuGAXA0rIcz3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDp3cS9Oj+wVxELIY4+YgafoQnvXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzhhMDQ2NTYtYmNiZS0z
ZTQwLWExYzktYmJkYjFhZTM3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxsXeXh9bCkB+I3c95FCz5/HaC5WAvoFN4k7TM6MzNdhqZ6lVfjS45l
3l4yesHN2+EN1czt6aomjjhdrpgbdVQKc8uj6lisz+4p6qVi43ePYBgHz8IAMYsr
XxQ+M2Do62TTHrE+L9camusR75C7ZBWf5a/rHQhKR6EzdpPQQazopMvOfp7cNxNx
pR3BkxoqqBjoumi0np2liGyvtUUPD3vQdLhZZHbjk1EXOF3tpqH7U23OqKwhuVqQ
TUNI24DMKHmqerJfeT6Wd1dRgcpoQucr4w5YgOOlYAsQ+FWBosCS7DWrvWyh+xGS
Sb7C8Pavv6qxII7kLR0hHgO4kKsfw/c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:49 2024 by rpki-client on console-fra.rpki-client.org