Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa
File:                     5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa (raw, json)
Hash identifier:          peIOQUVX+/Q6bZM2bHm2qAQtWuGj9rzzCqVdxE6e3T4=
Subject key identifier:   2B:33:29:74:57:D1:30:4C:3F:CD:2C:36:EE:BB:C0:6D:1D:1C:C0:9C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454624951C46B15BFD1EC6E700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa
Signing time:             Wed 20 Mar 2024 20:46:22 +0000
ROA not before:           Wed 20 Mar 2024 20:46:22 +0000
ROA not after:            Tue 18 Jun 2024 20:46:22 +0000
asID:                     36492
IP address blocks:        136.22.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:95:1c:46:b1:5b:fd:1e:c6:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:46:22 2024 GMT
            Not After : Jun 18 20:46:22 2024 GMT
        Subject: CN=f01335d8-18f2-4b5c-a767-d05d16c7e29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:34:b0:c4:26:a3:fc:c1:b0:69:19:0c:ad:
                    58:97:a9:81:bd:b7:0c:e2:07:d2:21:5c:3a:82:89:
                    d6:54:48:08:3d:e8:aa:4e:8d:d0:d7:9b:1a:90:81:
                    ed:f8:f8:32:49:9d:a1:d3:4d:3a:69:0c:15:1c:21:
                    19:88:7e:dc:37:5f:e1:dc:1c:8b:b6:cf:0b:a6:14:
                    d1:b3:f0:d4:8f:ad:ee:e2:ba:9d:12:5c:1b:42:9a:
                    14:7c:2d:b3:6b:a6:df:63:a2:82:06:07:84:b6:f3:
                    3b:5b:4e:28:4c:73:5f:00:63:ed:10:d5:3a:20:7a:
                    3e:82:db:e0:9f:78:64:4d:46:60:5e:e0:e8:59:fd:
                    60:9a:0b:0f:31:6e:7b:74:ef:f5:19:86:55:9c:47:
                    32:af:c4:72:43:79:e8:51:bb:22:3d:3a:c3:61:a3:
                    63:fe:09:02:0a:2b:61:b3:56:32:18:a3:84:da:10:
                    19:b2:63:13:f9:e0:5c:f8:12:05:db:60:e2:c2:9f:
                    d9:32:4f:02:1d:39:82:5e:bb:d5:b2:a9:1e:29:9f:
                    79:13:c7:99:b6:fc:9d:26:9a:2c:49:f6:7f:54:de:
                    2e:94:b7:93:7c:fb:5c:f5:3e:b8:47:70:f9:a2:8e:
                    d8:3a:0a:36:ac:43:b7:66:83:55:6a:32:3a:25:36:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:29:74:57:D1:30:4C:3F:CD:2C:36:EE:BB:C0:6D:1D:1C:C0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:59:e8:78:8d:00:37:20:a4:3f:22:a5:7a:f6:71:1c:ba:5c:
         8d:ee:40:d1:bc:f5:ea:4d:d8:44:6d:10:51:f9:58:4c:e3:8a:
         83:78:e6:c6:bf:7f:f9:ca:da:6a:5c:15:40:e3:c3:ec:54:5c:
         81:fd:55:a3:0d:9e:20:bc:ec:2f:3d:64:02:6e:3d:51:1e:a8:
         b5:3a:f2:3f:6b:b5:68:9f:6e:68:2b:b3:12:54:55:cd:cc:54:
         52:81:bf:1d:81:c8:f2:c0:39:b2:92:99:3e:5c:3b:6b:57:64:
         60:3d:99:c5:bc:fd:e0:af:5e:21:e2:24:06:a6:71:6e:24:28:
         a2:eb:18:09:d1:08:02:c9:f0:98:96:7d:a8:e5:f8:0c:ce:ea:
         a6:59:cb:e1:47:34:d1:9c:28:d0:3f:4c:fe:87:e8:3d:13:32:
         c8:69:2d:70:d8:e4:a3:f6:64:3b:ee:4b:c0:d2:a0:a3:46:f9:
         63:d7:0f:6f:aa:e4:e8:18:b8:d7:7a:68:73:f9:c5:95:3b:cf:
         d5:61:86:e8:6d:3a:e0:74:31:89:c8:c4:c8:9a:ab:6b:fd:54:
         ac:2a:f7:b6:05:b1:4c:a4:9a:5a:7f:b2:8f:b8:fa:4e:3b:76:
         6a:8d:67:79:0d:4d:78:a9:2e:05:b3:95:1b:33:fd:78:20:18:
         63:07:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:41 2024 by rpki-client on console-ams.rpki-client.org