Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa
File:                     4134f950-28af-3072-bb21-219f9bd36984.roa (raw, json)
Hash identifier:          0/t37ygpOL8oqHNYr5Fljyo2LyICKefhRyTVTeSCMT8=
Subject key identifier:   C8:EA:9F:5A:DF:1F:40:94:BB:7F:77:40:2E:B6:13:89:07:DB:24:EA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094D28621C752E3E75D3B80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d2:86:21:c7:52:e3:e7:5d:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=dde80ad3-2d60-4775-b80b-5e68b8b57336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:25:26:68:08:1d:0f:15:77:94:71:d3:80:
                    b4:fe:44:1f:25:86:53:4f:78:f7:c8:0f:9e:43:b6:
                    2e:b1:40:40:2b:6a:74:99:9b:41:21:2c:eb:d2:06:
                    16:dc:de:92:c6:1d:0e:95:42:1a:70:0c:3b:ee:bd:
                    f0:ca:cd:cc:ce:3e:96:2d:bc:4f:1c:b2:58:94:45:
                    64:56:75:20:d0:fa:03:c0:66:54:71:34:26:70:99:
                    3e:87:ba:d9:68:fc:83:0a:00:d7:04:a1:ee:f6:7c:
                    2e:a0:89:78:d3:ca:2c:26:d8:89:b5:ea:a9:78:77:
                    a1:a4:71:7a:bd:52:e2:80:cb:68:49:0c:a1:1e:8e:
                    a5:16:c2:40:26:60:22:09:17:0e:4a:5a:78:eb:85:
                    4d:7d:75:b3:5f:9d:ef:22:c0:dc:fe:63:a8:37:1e:
                    ba:18:41:cf:73:c8:c8:8b:4b:c3:60:c6:63:5b:11:
                    73:44:2a:a9:99:ca:96:f4:cf:08:e3:45:c9:e5:8e:
                    72:23:6c:74:4d:2f:99:c5:60:7f:14:94:3d:4c:00:
                    73:5c:1f:df:f2:18:58:d9:7c:99:5b:af:24:15:f4:
                    00:38:8f:3f:7f:36:30:16:6b:c4:1d:3f:ca:d5:08:
                    50:65:53:35:2d:35:15:4c:5c:16:2d:51:f7:84:c7:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:9F:5A:DF:1F:40:94:BB:7F:77:40:2E:B6:13:89:07:DB:24:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:42:3f:c5:37:bf:52:d2:04:0d:9a:af:ab:3d:93:d2:5d:db:
         53:b8:8e:ba:5a:4c:ad:fc:bc:ca:5f:9d:0c:35:10:0a:4e:66:
         d0:53:1b:f9:64:73:ae:8b:63:9c:b6:d6:b1:78:81:67:62:e5:
         49:0a:89:e4:b7:8e:68:84:2b:db:e6:b2:da:62:a3:69:df:d9:
         89:58:77:29:8e:3b:5e:54:e0:cf:ee:15:b8:a5:2f:db:ba:2f:
         3a:98:b8:5d:a2:97:f4:ce:2f:e4:1b:f5:d6:4f:9e:a2:8e:f4:
         f2:29:f7:ff:0e:38:22:3a:ea:31:29:d8:3b:d7:ed:4e:a9:62:
         72:ab:8c:92:b6:b1:35:1d:ac:e9:d0:cb:ea:79:86:d2:39:d8:
         e1:83:a5:80:11:78:87:57:bd:f9:5b:f6:19:41:da:59:f0:23:
         49:f8:f5:b7:f3:c9:34:3c:02:34:e6:ce:c8:ff:f5:1d:92:cd:
         b8:fd:3e:1e:e5:8b:06:2c:f7:a4:06:b8:e4:6d:58:b9:28:92:
         e5:60:83:f0:af:2d:39:52:81:78:7e:ad:26:0e:4c:92:42:79:
         aa:f6:3c:76:ff:92:f5:82:45:9d:4a:62:24:6e:fd:28:43:1a:
         6d:56:13:bf:fb:df:1a:aa:4a:d3:cd:ba:63:de:3a:fd:7d:f1:
         28:ad:ce:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:13 2024 by rpki-client on console-ams.rpki-client.org