Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
File:                     5ac818b5-57dc-33e2-ba48-5b05a497b571.roa (raw, json)
Hash identifier:          EnebIJArOjXmXRCuiVmN6M8b2RQbQ9Dxt6Y6TvZQprs=
Subject key identifier:   70:16:94:E8:07:2B:3E:19:51:2D:86:EA:5B:41:7D:BE:E8:CA:60:E6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584546261D9914A18E7E2A7EE100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
Signing time:             Wed 20 Mar 2024 20:49:27 +0000
ROA not before:           Wed 20 Mar 2024 20:49:27 +0000
ROA not after:            Tue 18 Jun 2024 20:49:27 +0000
asID:                     36492
IP address blocks:        136.22.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:1d:99:14:a1:8e:7e:2a:7e:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:49:27 2024 GMT
            Not After : Jun 18 20:49:27 2024 GMT
        Subject: CN=da3878fa-2185-4978-ad77-d1afbd5e7f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:3f:c2:15:19:82:9f:6f:f9:0b:5c:e3:5b:
                    f5:42:65:3d:65:b0:00:1f:38:d3:df:63:04:5c:42:
                    cd:4d:c3:c7:79:b9:b6:58:42:60:cc:4e:a5:8e:d4:
                    a4:fc:60:bc:b8:10:a1:39:1c:9b:5f:92:6a:40:bc:
                    dd:92:13:15:42:f3:2e:6c:8e:a0:38:d6:07:d1:42:
                    dd:07:51:97:40:02:a5:f1:dd:9e:b6:a1:45:0d:2e:
                    2e:7a:df:1d:ec:ca:c6:10:43:2b:aa:c1:91:72:ee:
                    76:4f:1b:db:bc:73:54:e5:c0:84:3e:1e:e4:b1:bd:
                    ee:d8:11:fe:66:02:2f:56:23:49:13:92:cf:a2:62:
                    b0:75:1f:17:0e:13:80:b5:9e:30:60:8e:f3:67:1c:
                    6a:50:43:bd:e0:b8:ac:bf:84:a9:57:62:95:8e:d1:
                    3d:20:5b:60:ac:02:04:9d:7d:db:fa:98:53:48:7a:
                    ef:82:ff:cd:79:9c:99:de:21:1f:25:e7:1c:b9:c0:
                    69:ec:f9:6b:27:17:48:81:11:e7:c6:8a:ff:02:52:
                    c1:23:f0:92:68:ae:cc:e5:34:0b:39:85:2c:e6:4a:
                    77:c3:e9:65:14:ff:32:b1:f9:55:82:ee:64:8a:6b:
                    b4:4e:26:52:8f:51:fe:3e:8b:f0:2a:3a:e8:e3:69:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:16:94:E8:07:2B:3E:19:51:2D:86:EA:5B:41:7D:BE:E8:CA:60:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:3a:b0:d7:d7:94:ea:27:6c:9d:4f:44:46:15:26:32:9c:
         c6:85:13:92:8c:90:6e:41:aa:4a:a2:e7:c1:5c:47:10:85:15:
         9f:69:bf:28:d9:ac:4f:85:9e:f5:84:73:14:a4:98:04:1b:bc:
         d3:1e:b8:d2:03:97:4b:0e:4b:05:11:95:c2:23:44:78:85:1d:
         fa:f8:33:41:8b:9d:3c:16:d8:56:fa:94:0a:e6:7a:02:06:ca:
         c3:3b:f0:5a:1e:e1:90:81:b9:d2:4e:41:db:2e:f4:32:66:92:
         6e:82:ed:a6:54:0d:d3:b8:5c:54:83:29:b4:bb:bd:e8:b3:6d:
         87:bc:c2:e5:f2:db:6f:a8:39:7b:d4:df:d9:1d:93:36:01:8d:
         61:b5:b0:52:d3:8e:c1:4a:cd:35:cd:6e:bc:5c:2e:54:51:46:
         d9:94:98:a6:44:15:9c:32:37:94:04:f4:5a:fe:a5:38:ed:30:
         72:c5:fa:92:f9:0a:b5:99:04:51:6f:dc:ed:b5:5d:bd:74:1a:
         1d:1a:d8:45:0f:10:9d:e9:30:b6:df:68:ab:09:24:bd:2f:35:
         85:e8:ea:77:5f:a1:a1:e5:73:6d:2e:ef:a7:bd:8d:ef:72:f9:
         50:57:d4:33:a2:95:7e:8a:1a:c9:75:89:ec:d3:43:f1:41:6b:
         9c:ec:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:55 2024 by rpki-client on console-ams.rpki-client.org