Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
File:                     5ff4cac2-1c06-3652-a574-da5c2f31b183.roa (raw, json)
Hash identifier:          +dk6GRyRtDBkgLuk5MMvJiVBDgNzJFHuidIAYj6FZC4=
Subject key identifier:   F2:C5:C2:38:9A:34:E0:69:51:83:27:FD:BF:D9:B8:1B:BB:AE:F2:27
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B3BEF427AFBAFD37A7600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3b:ef:42:7a:fb:af:d3:7a:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6dcfa86f-dad6-4af4-8f07-1a18504f597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:47:47:6e:82:15:a6:d4:17:4c:ef:f0:d0:
                    94:f8:e5:47:0b:62:36:e8:8d:82:0a:56:73:56:cd:
                    26:43:34:b1:83:65:33:d5:4a:2f:78:8f:97:05:74:
                    0b:1c:c1:e8:3f:be:0a:5b:0e:1c:fa:cc:88:95:7d:
                    8e:0b:7f:2d:db:f1:82:26:fd:50:aa:f8:0f:8c:0d:
                    84:df:f5:39:1f:44:13:28:14:bb:d7:24:24:84:a2:
                    d9:a0:97:58:32:08:be:81:a4:59:ed:71:00:26:b0:
                    d2:1a:7b:23:44:b9:14:04:da:64:64:0c:f2:2f:35:
                    e7:95:16:d5:75:cc:1e:f8:0e:b5:5d:89:f2:7c:4c:
                    c0:1f:4e:3d:1e:fe:ac:e0:ee:a3:93:50:66:f3:9f:
                    b7:83:51:f0:e8:28:a9:14:40:1e:3b:61:6d:41:8a:
                    89:09:e1:49:46:9c:1a:48:39:dd:96:b7:58:f7:ac:
                    b9:d8:66:0a:33:a4:ca:8a:4f:f1:67:cb:e0:db:3c:
                    6f:4b:45:81:62:2f:4b:45:dc:ac:69:1a:e4:f7:7f:
                    8b:79:4d:12:31:10:43:6d:41:45:72:c1:93:f6:f7:
                    21:18:aa:4a:0d:a2:ee:10:00:c6:5c:0b:a7:1e:ba:
                    2f:01:82:f8:b8:f8:38:3f:91:93:a8:4d:3e:90:30:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C5:C2:38:9A:34:E0:69:51:83:27:FD:BF:D9:B8:1B:BB:AE:F2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:a6:3b:30:43:20:6e:0e:4d:e7:da:84:f8:e3:99:7a:6b:
         f2:b4:05:66:29:af:61:c7:da:cd:b6:63:58:00:ac:dd:5d:e3:
         d5:91:19:fe:94:f7:b2:04:e3:41:20:f9:8f:30:c2:0f:ac:bd:
         ff:f4:d4:9e:18:4f:e6:a8:d0:08:64:e8:d5:14:0c:b4:64:3d:
         72:6e:da:1d:ab:a7:31:de:cb:cc:38:60:71:5b:70:e1:82:89:
         09:8b:56:19:d3:40:74:8f:cd:42:5a:f0:50:25:89:d1:89:e5:
         2e:f3:39:b8:87:0b:29:7f:e7:3c:03:f5:8a:68:cd:6e:e7:33:
         57:3e:49:5a:67:c8:f6:47:cf:74:82:97:09:f3:e7:62:1a:c9:
         39:84:46:47:74:dc:a4:0f:09:f9:9f:29:00:51:8b:0f:d1:7c:
         55:2a:08:d5:c8:fa:5e:23:12:15:a0:d9:92:5a:e0:28:cc:61:
         5d:9f:bb:ba:10:5b:2e:86:51:4f:91:5f:b5:7a:14:3c:ee:be:
         68:28:bc:a2:2e:43:67:2f:c6:cc:cb:d7:65:80:8c:87:84:b9:
         a8:4f:87:18:8e:0a:7c:a9:43:f4:20:79:2f:37:fd:f2:79:8c:
         76:3c:96:c0:1a:27:cb:9d:25:f9:3b:9c:7a:c2:62:eb:de:33:
         c9:90:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org