Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa
File:                     5df49535-9880-320d-bab3-bd30631b70fc.roa (raw, json)
Hash identifier:          dyblUDpdo5kB26qMnJXnxrG+kdh5gCTk7a6Cb8heBRA=
Subject key identifier:   4C:B3:7C:4D:A7:16:E8:CD:1B:E6:B9:BA:35:09:AE:CF:09:BD:50:72
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B65F066932AF4F8CBE580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:65:f0:66:93:2a:f4:f8:cb:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=79804595-fb7d-4880-976d-a14e54452748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:f5:75:1d:7f:f5:82:d3:e0:34:d1:ad:fa:
                    44:05:41:ab:de:33:36:32:7a:ff:0f:6e:a7:e2:70:
                    e1:62:02:15:98:da:27:26:e1:e9:54:05:45:7b:9c:
                    61:c4:f3:96:c4:1e:29:08:c2:34:cc:bc:08:be:d8:
                    56:b8:c9:d5:11:11:f5:1c:50:f7:e7:08:cb:89:ea:
                    3b:d3:19:b1:b0:f8:d6:fa:47:ba:d1:2c:31:97:d1:
                    79:c6:73:d1:09:13:16:b6:c4:ee:65:91:a5:b9:2f:
                    48:6e:49:59:6d:4c:48:58:a1:93:91:0a:2e:e1:f1:
                    fd:e2:49:1b:89:f9:b9:a7:a8:be:51:41:42:02:ab:
                    0b:9e:c0:ee:4c:7d:e9:ae:04:09:2a:8b:50:c0:b4:
                    d9:05:b3:63:1d:2d:10:c7:6b:d6:17:d2:8c:06:47:
                    cb:5c:b6:12:d5:37:20:50:a6:b8:b8:f4:e9:84:81:
                    da:93:71:84:65:e6:02:92:bf:99:60:67:df:d7:4f:
                    f1:0a:65:06:8a:25:23:a8:98:0e:b8:75:69:e4:ef:
                    77:0c:78:11:fc:2e:67:fc:8c:62:cb:65:62:33:b9:
                    fd:99:6f:30:3b:3f:57:b2:01:f2:d3:22:a0:9a:15:
                    7f:2c:57:ac:de:67:9f:53:4d:ff:92:12:49:4b:b0:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:7C:4D:A7:16:E8:CD:1B:E6:B9:BA:35:09:AE:CF:09:BD:50:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:2f:84:fa:3e:a5:82:27:c4:61:7e:dc:ab:63:74:5c:e8:
         ee:76:31:a2:e9:f4:fd:e8:b5:9a:55:20:8f:7c:3b:22:d2:7b:
         09:18:ff:1f:41:b0:30:d5:13:ca:2b:85:db:ae:07:16:47:23:
         f1:ad:df:42:de:69:78:d7:6f:e2:55:00:df:a7:4b:7b:70:6e:
         b4:5e:bb:01:c0:69:bb:a9:8f:3f:81:6a:63:7c:2f:7a:cb:ba:
         4c:7a:bf:65:7c:1f:54:27:13:19:78:ee:b7:40:aa:3a:6d:b4:
         cb:a5:02:dc:bc:c8:86:27:d7:12:48:a1:03:2c:22:60:19:0b:
         fb:ac:c2:97:3b:02:7d:d1:aa:a3:38:12:8a:77:22:60:a3:94:
         23:79:92:2c:ec:a6:49:32:b4:6e:d8:30:9c:b6:0f:73:7e:0c:
         07:42:d4:b1:f0:0b:c5:8b:ee:f4:6e:38:81:e2:37:6a:38:06:
         36:93:94:17:fa:d2:4a:a1:a3:76:b0:90:b8:d6:fd:05:90:c1:
         9c:9b:87:de:d5:07:6c:64:57:76:98:58:9c:91:ed:a4:b3:b1:
         70:f4:83:5e:a5:16:e4:ad:db:ec:dd:d7:e6:dd:ef:47:ec:42:
         1d:13:ac:31:7c:5a:cf:85:8d:ab:35:e6:ce:87:ff:4d:bc:70:
         54:3e:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:18:07 2024 by rpki-client on console-ams.rpki-client.org