Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
File:                     4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa (raw, json)
Hash identifier:          yJEp59p28qb9/OhWepk0K5uaqEgHRa45vbGkvcny9AI=
Subject key identifier:   5E:A1:E4:EF:BE:86:40:06:F8:FE:B7:C4:5A:17:89:3F:C3:5D:A8:BA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B73386C7F30A8F3104BCC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
Signing time:             Mon 18 Mar 2024 22:06:56 +0000
ROA not before:           Mon 18 Mar 2024 22:06:56 +0000
ROA not after:            Sun 16 Jun 2024 22:06:56 +0000
asID:                     36492
IP address blocks:        136.22.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:33:86:c7:f3:0a:8f:31:04:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:06:56 2024 GMT
            Not After : Jun 16 22:06:56 2024 GMT
        Subject: CN=43422a2a-d37c-462b-bca4-bc3f84dd0550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:6f:a1:4c:16:93:cf:38:68:73:3f:f9:37:
                    f9:2a:a9:62:83:a5:be:33:65:e4:1f:9a:3b:64:f6:
                    7f:de:c9:a8:fe:42:4b:b9:0f:ac:bd:7f:a7:11:15:
                    1d:dd:95:9a:7a:44:32:73:f9:ef:6f:a6:77:75:f6:
                    ea:28:25:9b:4c:a5:b5:59:5a:68:ac:e4:57:3a:53:
                    f5:18:17:85:c2:db:96:90:59:b2:79:4c:9c:35:9d:
                    7f:e7:2f:c6:0e:0b:10:43:c5:f3:94:f3:6f:7b:80:
                    bf:d1:e3:8c:23:94:a0:06:77:8e:2c:0c:bf:a2:6d:
                    af:52:92:0f:98:7c:e2:23:a5:a2:37:e5:28:d1:67:
                    9c:ad:0c:bc:96:04:41:a7:d9:85:c0:13:b3:5d:55:
                    01:4d:2a:d8:a5:02:63:80:2a:d5:67:eb:93:f7:71:
                    b1:14:dc:d4:63:db:a4:2b:e9:94:b2:c1:65:19:9f:
                    5a:71:16:76:03:b2:90:2a:4d:4c:dc:b5:cb:51:8f:
                    69:39:80:20:dc:ef:0e:85:d6:00:8e:04:f9:4b:27:
                    b3:f6:4e:14:69:af:a2:b8:74:4c:cd:ce:26:47:58:
                    8c:5f:11:ca:38:6a:03:86:6e:22:f5:af:a9:c1:35:
                    66:61:59:f1:ab:63:82:d3:a4:07:62:16:ab:da:c3:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A1:E4:EF:BE:86:40:06:F8:FE:B7:C4:5A:17:89:3F:C3:5D:A8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:6e:5a:f5:6c:06:df:a7:f4:8d:67:ef:92:3c:8b:99:4d:
         f6:59:67:8d:0f:d2:15:1e:37:c0:71:09:68:63:f4:71:24:1b:
         bc:7a:8e:d1:c8:ab:28:46:49:5d:72:23:02:5c:80:1e:a9:0c:
         26:29:a1:8c:40:4e:1a:37:f2:d5:ac:bb:87:5b:ae:51:5d:f6:
         68:96:de:89:46:2c:d8:c4:62:73:9e:c7:83:a6:9f:47:1f:d8:
         85:f5:e5:29:e2:0d:68:0c:f6:cc:48:bc:ee:39:48:26:bf:ca:
         22:52:4f:cc:0d:e4:55:a2:d0:95:89:4a:ae:27:1a:41:03:08:
         7d:c7:70:35:9b:3a:aa:82:da:86:30:f3:ba:01:02:9a:7a:27:
         70:b2:16:95:b4:ca:02:2d:e9:21:49:69:6f:26:3a:a4:99:15:
         ea:7d:8a:9e:dc:27:8e:ec:3a:2c:f8:4f:c2:a5:fa:a4:87:b4:
         f1:3f:f9:41:2f:5e:cd:ad:4b:8a:4a:6d:e8:e1:c3:3d:bc:c9:
         9f:91:0f:4e:7b:5b:f3:e1:32:3f:65:7d:ae:24:16:d2:dc:e8:
         34:2c:8e:ee:dd:89:94:38:8a:1d:1b:92:ba:d4:77:1d:89:b9:
         23:76:cf:da:9e:25:09:20:06:4e:ad:8d:7b:5a:63:8d:e1:2a:
         b1:57:e5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:19 2024 by rpki-client on console-fra.rpki-client.org