Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43a28b88-8dfe-3e70-b34f-ed1eef378768.roa
File:                     43a28b88-8dfe-3e70-b34f-ed1eef378768.roa (raw, json)
Hash identifier:          JPaWjsk4ldyLMVg65H9e9s8EjCUyCAxfZxnWBRA/M1w=
Subject key identifier:   94:9C:A4:1E:3D:7E:82:CA:B2:BD:63:D1:EC:92:06:6A:79:AA:96:ED
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584546276D606E8A6E94A6050880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43a28b88-8dfe-3e70-b34f-ed1eef378768.roa
Signing time:             Wed 20 Mar 2024 20:52:06 +0000
ROA not before:           Wed 20 Mar 2024 20:52:06 +0000
ROA not after:            Tue 18 Jun 2024 20:52:06 +0000
asID:                     36492
IP address blocks:        136.22.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:6d:60:6e:8a:6e:94:a6:05:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:52:06 2024 GMT
            Not After : Jun 18 20:52:06 2024 GMT
        Subject: CN=9f063a90-c403-4d02-8f9b-252276cfb242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:ab:0f:d0:ef:82:c7:32:b8:72:ab:2c:cd:
                    01:fa:c2:99:a7:a0:7e:2d:9b:a0:7b:63:e1:56:79:
                    70:7b:56:88:2e:14:c6:e2:db:39:17:93:50:8e:23:
                    f2:fa:e7:b3:a8:92:7a:97:26:30:b9:97:b7:07:f9:
                    73:c4:64:c5:42:01:d9:c7:ac:d3:69:50:d5:86:ab:
                    f7:6f:0a:61:c1:a6:3c:13:f9:20:cc:92:bb:f7:14:
                    b9:5c:46:0e:0e:50:60:5d:ee:50:b7:a8:44:5e:2a:
                    e8:7b:9f:62:8a:02:b9:7a:81:ce:2f:3f:99:66:8f:
                    b3:34:9b:10:a9:51:3e:00:89:b6:7f:84:c4:ce:f9:
                    c3:e1:ab:69:8b:85:6d:ad:cb:45:d8:72:23:07:07:
                    f2:34:54:77:13:62:fe:80:7b:36:be:5f:30:ca:62:
                    70:33:65:df:23:a2:32:a4:4c:3b:3f:fa:cf:d5:b7:
                    7a:87:fa:e7:6c:48:85:3e:a4:a2:45:d8:e1:73:10:
                    5c:19:b8:06:59:89:b9:1f:ff:b0:31:93:e8:3f:d5:
                    c5:1b:d8:86:b3:43:34:01:e6:22:f0:5d:d9:50:f8:
                    cc:f1:e5:f4:3c:9d:90:77:6b:18:4d:fe:57:a2:53:
                    b8:e7:6c:04:fb:2e:83:37:fa:02:27:91:82:73:17:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:A4:1E:3D:7E:82:CA:B2:BD:63:D1:EC:92:06:6A:79:AA:96:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43a28b88-8dfe-3e70-b34f-ed1eef378768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:05:af:d4:e7:22:fc:52:e0:fb:37:f2:4e:4c:d0:d5:eb:0a:
         57:73:70:c0:20:68:b7:c5:b7:0a:88:c1:28:0f:1e:d3:d8:e5:
         0b:22:17:67:ce:d4:eb:0b:15:4c:51:ad:a4:09:85:0d:21:da:
         9e:38:ea:9f:07:d6:52:c4:3e:b0:72:cb:b3:1a:3f:32:bc:98:
         33:73:40:6b:53:6a:b9:fb:de:c5:cd:37:2c:9e:7d:e0:8e:34:
         9c:46:6e:b4:68:46:77:6b:1d:a1:1b:fc:ed:ff:ff:34:7a:e1:
         4c:1a:49:7a:f4:8f:f5:06:9f:bb:da:db:fb:b0:cc:f9:12:be:
         00:e7:6c:03:64:6a:7f:7e:d0:03:ce:ae:a1:b6:ba:9b:cc:75:
         2b:d9:cd:da:ac:c0:bf:76:e5:d2:f4:e9:3a:30:a7:16:ef:86:
         c8:d1:50:b8:f9:4c:fc:65:91:6c:b1:7d:ab:f1:2e:98:ca:f4:
         bf:59:b2:59:f8:df:c6:fe:d0:23:5d:5a:41:6e:70:93:e3:67:
         d3:98:15:bd:32:b7:da:58:46:a4:18:24:ea:94:b5:36:b1:30:
         1b:f7:de:e1:f3:8d:b0:dd:15:0b:99:6a:23:eb:9c:78:e1:ee:
         69:80:72:27:f0:0c:8f:c7:87:24:27:64:b8:b5:a4:58:50:48:
         56:6f:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:55 2024 by rpki-client on console-ams.rpki-client.org