Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
File:                     511c4fee-d347-3752-b22c-947c770dc9ea.roa (raw, json)
Hash identifier:          qzEPGMJGHZDeciP/DxQqCjSokY040s1zJJ7CAGsK9Yg=
Subject key identifier:   35:B5:5B:E6:FF:AB:22:39:47:73:6A:CB:37:99:7F:9C:24:93:2E:26
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B89DACEBB9DAA448CAD680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
Signing time:             Mon 18 Mar 2024 22:09:47 +0000
ROA not before:           Mon 18 Mar 2024 22:09:47 +0000
ROA not after:            Sun 16 Jun 2024 22:09:47 +0000
asID:                     36492
IP address blocks:        136.22.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:9d:ac:eb:b9:da:a4:48:ca:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:09:47 2024 GMT
            Not After : Jun 16 22:09:47 2024 GMT
        Subject: CN=fe67eabc-8ce3-4a9f-8809-d5229a96418a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:6c:e7:48:25:fb:c7:6b:e3:e6:8c:7a:93:
                    a5:17:64:c9:08:d9:ae:b9:98:b2:7b:04:ea:85:ab:
                    50:45:0f:40:91:f8:5e:67:6c:b1:d1:5f:7c:9d:23:
                    6e:16:47:f6:e4:2c:23:58:0e:be:e9:76:e9:ba:a8:
                    1f:31:48:f1:62:71:01:e8:6a:c5:07:7e:ba:f0:de:
                    7b:16:5b:7f:0c:82:b8:f3:62:89:0b:e7:50:dd:df:
                    e4:87:33:36:6a:7f:4b:f3:96:dc:74:bd:ad:81:51:
                    26:60:c5:0c:67:b3:c3:00:34:7b:8b:a9:c3:6a:71:
                    d8:e1:4c:0a:05:1a:85:6a:7e:c8:87:fb:ad:75:84:
                    49:3f:c3:83:56:d8:72:07:9f:79:5c:d3:06:75:e9:
                    f9:6c:be:58:08:4b:29:60:01:32:19:7a:79:55:5f:
                    4e:66:1e:70:b2:ef:b6:65:6a:c3:76:13:ef:8b:bf:
                    06:58:ba:de:80:07:74:6d:ac:c5:ae:dd:1c:32:73:
                    38:9b:30:3a:47:dd:c5:98:2c:00:66:cc:25:a2:b9:
                    b3:fa:3f:d6:44:b9:00:dc:f2:0d:30:a5:0f:f7:4e:
                    f6:df:e7:56:ee:98:9b:6f:99:39:dd:a2:8a:ba:f2:
                    6e:b5:fc:51:24:9e:62:fa:89:bb:89:b5:78:1e:b4:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B5:5B:E6:FF:AB:22:39:47:73:6A:CB:37:99:7F:9C:24:93:2E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:27:b4:09:41:a8:ca:94:a9:33:42:25:7d:4e:cb:e9:a1:64:
         c3:74:84:35:aa:97:11:3b:ce:03:e6:19:5f:90:a8:81:4b:a9:
         36:04:49:63:05:b9:27:5b:8b:dc:d8:74:35:20:21:58:0e:45:
         55:7e:cb:5e:76:fb:13:d0:b0:4b:b8:da:e8:02:3c:4b:0a:6b:
         7d:d3:09:8d:fa:3f:77:58:8d:0e:c3:62:ea:c0:19:25:48:15:
         b9:11:05:b3:c1:f6:22:15:46:2c:60:17:a2:7e:6b:6b:bc:3e:
         cb:0f:b8:d9:27:da:18:6d:02:97:d5:5e:71:ad:b0:ab:b1:6b:
         b8:8b:02:9f:09:64:3b:e2:18:39:fc:9c:17:ae:38:12:5f:7d:
         1d:37:43:3e:9b:fc:63:72:d9:1d:86:b2:d0:cc:9c:8c:69:16:
         b4:08:68:65:f7:40:28:2b:65:d0:e5:ab:5f:a1:59:15:af:27:
         a4:a7:bd:26:e3:2f:40:c2:b0:9e:98:87:df:2b:90:f8:2a:72:
         99:af:97:30:a9:cd:d2:a9:b1:12:92:5b:ba:95:b2:87:db:d5:
         72:95:67:3c:f8:5e:73:30:d1:6e:02:9e:ae:7f:2e:fa:95:c5:
         41:ea:17:6f:ee:f7:b3:cf:ff:9d:a3:bc:83:a1:38:77:18:95:
         31:45:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:41 2024 by rpki-client on console-ams.rpki-client.org