Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
File:                     4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa (raw, json)
Hash identifier:          Z1pjk5q5ijD37F5Jsy8EK9zmjLZPxJcfcWtA6/PDOf4=
Subject key identifier:   BF:79:09:60:3D:A2:25:29:74:C4:D4:DA:EA:A4:E6:D2:95:3F:8A:5E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094EE4E7C9A5C8AA790FE00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ee:4e:7c:9a:5c:8a:a7:90:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9b2d443d-3ba5-4a36-8560-310b3fa79e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:10:28:b3:26:d1:fa:b7:63:f1:81:62:05:
                    e6:6f:8e:09:33:49:b0:40:3b:60:93:08:bc:52:93:
                    0a:a5:16:65:31:c7:d0:be:e2:83:9e:29:8a:d5:94:
                    2e:ac:28:1a:9a:a8:43:55:71:37:1f:2b:d0:6e:ce:
                    ab:2b:be:2a:28:2c:22:4c:18:6c:72:43:4e:b6:1f:
                    f2:2b:39:1f:cd:90:a3:d9:a8:ba:1e:84:77:45:21:
                    a6:00:a3:87:df:13:84:d1:e1:37:28:06:b6:d6:64:
                    0b:a2:ac:24:b9:14:6d:f9:51:7b:15:42:c6:f4:2c:
                    5c:37:a3:5f:c8:27:dc:8f:d9:15:9b:ae:7e:fe:d2:
                    9f:56:3e:eb:58:fc:4a:62:02:05:1c:d8:aa:a3:13:
                    43:40:fb:73:a5:a8:06:0f:df:95:52:93:73:d2:84:
                    65:c9:a4:24:28:a7:04:02:97:32:91:05:27:e3:47:
                    b0:5b:f3:55:b2:a1:ca:1a:23:40:c5:c1:61:ab:a8:
                    0e:53:29:4d:5d:34:4c:20:b3:4a:62:db:53:a3:4e:
                    7d:ea:c6:c6:18:26:f0:af:ed:92:d1:12:93:3d:56:
                    aa:09:43:56:8b:d6:ba:7d:db:3c:98:6f:9c:9b:ad:
                    ab:ce:3c:72:81:ad:22:e2:7c:12:6a:14:97:a7:f8:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:09:60:3D:A2:25:29:74:C4:D4:DA:EA:A4:E6:D2:95:3F:8A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:24:cb:04:75:aa:de:29:dc:d4:ad:37:5b:3a:b5:2a:2b:
         8c:a1:8d:45:e7:4d:34:fc:7d:49:90:61:54:72:4c:b5:01:1f:
         c3:68:3c:b7:74:e3:c5:01:77:2d:d1:64:73:e8:b9:09:b1:6a:
         59:e3:15:23:fa:55:2a:55:3d:dc:35:40:e4:9f:1b:7b:58:1c:
         bb:34:c6:73:8b:44:e0:7f:b5:33:d2:23:61:c2:7f:2b:26:68:
         d4:ec:61:1c:2f:f1:8f:2d:8d:dc:48:94:79:04:b0:56:46:1f:
         b4:d1:ae:60:2e:d3:67:fd:fe:ff:2d:94:f1:a1:af:89:12:ca:
         fc:27:f1:2e:09:ae:cb:bc:97:3e:7c:1e:cf:8a:ad:11:76:2d:
         e2:85:56:58:d0:fc:6c:55:16:bd:0c:4d:d0:be:93:8a:e7:4e:
         d0:76:dd:83:8e:a3:8d:0f:e3:33:57:17:4a:03:7e:f9:df:f3:
         32:ce:29:46:1f:2c:c0:d5:c1:80:95:76:b3:fa:db:7c:a0:a6:
         98:68:14:e0:60:3b:5f:c6:77:7a:2d:d4:98:3b:3c:b5:f0:ac:
         b9:b4:e5:2c:05:a3:e5:64:c8:ec:82:10:3b:7e:ff:a0:d9:10:
         3b:83:dc:fc:1d:d8:78:38:01:bd:2f:ba:e1:e2:38:8a:f8:aa:
         83:8a:fd:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglO5OfJpciqeQ/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
OWIyZDQ0M2QtM2JhNS00YTM2LTg1NjAtMzEwYjNmYTc5ZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+cQKLMm0fq3Y/GBYgXmb44JM0mwQDtgkwi8
UpMKpRZlMcfQvuKDnimK1ZQurCgamqhDVXE3HyvQbs6rK74qKCwiTBhsckNOth/y
KzkfzZCj2ai6HoR3RSGmAKOH3xOE0eE3KAa21mQLoqwkuRRt+VF7FULG9CxcN6Nf
yCfcj9kVm65+/tKfVj7rWPxKYgIFHNiqoxNDQPtzpagGD9+VUpNz0oRlyaQkKKcE
ApcykQUn40ewW/NVsqHKGiNAxcFhq6gOUylNXTRMILNKYttTo0596sbGGCbwr+2S
0RKTPVaqCUNWi9a6fds8mG+cm62rzjxyga0i4nwSahSXp/jsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL95CWA9oiUpdMTU2uqk5tKVP4peMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGUzNWE5MjEtNGJjYy0z
MmM1LTgwYmYtYmI4MjBhMTBlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInmJMsEdareKdzUrTdbOrUqK4yhjUXnTTT8fUmQYVRyTLUBH8NoPLd0
48UBdy3RZHPouQmxalnjFSP6VSpVPdw1QOSfG3tYHLs0xnOLROB/tTPSI2HCfysm
aNTsYRwv8Y8tjdxIlHkEsFZGH7TRrmAu02f9/v8tlPGhr4kSyvwn8S4Jrsu8lz58
Hs+KrRF2LeKFVljQ/GxVFr0MTdC+k4rnTtB23YOOo40P4zNXF0oDfvnf8zLOKUYf
LMDVwYCVdrP623ygpphoFOBgO1/Gd3ot1Jg7PLXwrLm05SwFo+VkyOyCEDt+/6DZ
EDuD3Pwd2Hg4Ab0vuuHiOIr4qoOK/bo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org