Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa
File:                     3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa (raw, json)
Hash identifier:          oHwtedK2bC22tyHGv5TFmrTTl/LVgMnV10OYcI38Tic=
Subject key identifier:   E7:BB:83:6B:A6:8E:72:FD:C3:8C:7D:DE:51:9E:07:EC:7E:50:51:1F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094D7528325393486277E00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d7:52:83:25:39:34:86:27:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=138d4f66-2b33-4a16-b0e0-3e42bb65d5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:cc:71:ae:b4:5c:87:6f:e1:0c:1c:9e:27:
                    15:a5:3a:d5:c7:a6:ed:b7:4b:8a:5e:78:a5:39:8c:
                    05:fe:84:7a:ae:60:62:30:91:cd:af:6e:ba:fc:7c:
                    4b:44:ba:94:5f:0a:ff:55:cd:39:a1:0a:04:b8:d1:
                    bf:dc:ec:c7:0c:9b:d6:83:a1:27:e3:6e:98:2e:f4:
                    13:e6:52:77:9d:a8:8e:ea:79:0d:ee:72:61:5c:70:
                    9c:54:d4:f7:39:e8:6d:13:b3:cb:19:08:34:a1:e9:
                    b4:11:b5:57:6c:49:53:b7:99:d6:39:69:56:a0:34:
                    84:0d:d3:19:bb:4a:4a:a6:f6:86:f8:17:ca:95:81:
                    ff:45:0d:38:58:55:0f:4b:f3:9c:51:ec:d5:48:99:
                    1a:c0:ac:a2:fd:86:11:d6:00:62:01:11:b5:ae:76:
                    6f:0a:64:24:92:50:3e:8e:25:d4:cc:26:c7:f0:14:
                    73:6d:fb:69:2c:d2:b2:bc:75:d0:38:5c:98:19:3e:
                    7a:21:f8:3a:98:a3:50:cd:14:cf:ce:cd:ff:b4:6e:
                    b9:c2:29:67:df:f5:7f:9e:d5:45:bf:76:80:0c:b1:
                    7f:a1:23:ff:c5:18:4c:03:78:43:ef:d9:ad:24:46:
                    44:97:1c:1e:34:ab:84:5b:a9:5c:88:96:ff:06:6d:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:83:6B:A6:8E:72:FD:C3:8C:7D:DE:51:9E:07:EC:7E:50:51:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ce62ad0-5b1e-3d8e-98a6-50fd141cdd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:51:f3:eb:3e:ff:f2:17:be:91:15:6f:91:ff:c0:12:89:
         8d:85:2d:14:52:48:2f:57:0e:57:27:d0:a7:0b:03:e1:b4:a3:
         35:ec:38:89:0f:64:24:63:a9:cf:7a:6e:5d:e7:b7:f5:24:25:
         a5:ee:8d:77:4d:88:8d:b0:02:d0:c3:e6:19:45:30:0e:9a:e7:
         9b:8d:d2:fa:2d:26:dc:7b:6b:90:9f:fa:d2:3c:6b:79:33:86:
         99:98:ca:3c:47:3f:f6:4d:2d:d4:75:98:a2:96:b7:af:b5:be:
         18:82:da:08:dc:43:03:ff:77:9c:19:68:d9:19:c3:11:6c:84:
         19:4f:66:b2:c2:e5:e8:91:ff:e4:f2:49:86:92:62:a3:61:46:
         8b:8c:62:e0:4b:b7:ab:9f:db:1d:f3:55:83:5b:83:31:04:37:
         b2:22:53:07:8b:8d:11:6c:a8:f9:bd:fe:f9:89:c7:41:4a:14:
         1d:4d:93:a6:4d:d0:29:f9:2d:ec:a5:62:2b:60:db:9c:0e:f1:
         b3:06:0a:4a:b2:50:99:89:71:5a:41:93:ce:34:9b:68:4f:65:
         e9:b5:e0:bf:96:8b:61:5c:d4:a1:4d:63:ae:8f:d7:c2:6d:07:
         e8:bf:d9:e7:6b:93:ac:f3:d4:cb:44:f5:10:63:7d:88:3e:60:
         87:a6:90:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:32 2024 by rpki-client on console-ams.rpki-client.org