Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa
File:                     61a53849-faa2-35a8-a44f-39748123203a.roa (raw, json)
Hash identifier:          vBXkrxTBVpKuibl8qlZD6UT7dkazkJVYWdLpM8YHhRM=
Subject key identifier:   F6:39:98:A0:C4:4C:DA:50:01:83:1E:54:CE:CF:E2:E3:89:6C:BF:FC
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540BB1F5BADB5A073DB3A8280
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa
Signing time:             Mon 18 Mar 2024 22:14:50 +0000
ROA not before:           Mon 18 Mar 2024 22:14:50 +0000
ROA not after:            Sun 16 Jun 2024 22:14:50 +0000
asID:                     36492
IP address blocks:        136.22.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:1f:5b:ad:b5:a0:73:db:3a:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:14:50 2024 GMT
            Not After : Jun 16 22:14:50 2024 GMT
        Subject: CN=0e4d97d1-afcf-4999-a7f1-ffb5333facbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:ee:46:52:09:a8:cb:74:07:93:a6:12:ea:
                    72:cf:d6:39:3e:58:87:64:6c:6b:e6:cf:e9:df:e4:
                    30:cf:9b:fb:38:1c:70:40:e2:f1:45:64:e7:6d:e7:
                    c5:e3:ac:22:14:81:fc:59:d8:88:be:66:6e:ea:50:
                    32:e4:eb:5e:a7:0f:4c:df:c0:ec:57:89:60:89:5d:
                    e4:ea:46:9a:a3:07:1c:df:6e:93:33:49:ef:29:ce:
                    38:6d:21:da:17:03:61:d8:2a:1d:e6:fc:29:76:1e:
                    9b:87:aa:0f:7b:84:18:27:df:0f:6b:02:f7:3d:0e:
                    5a:43:d6:3b:bd:c3:bc:8b:14:d7:72:66:86:e5:ab:
                    bc:9c:4a:34:00:cb:fe:7f:c1:c8:28:5d:93:42:d5:
                    3c:1a:17:e0:1a:20:51:a3:04:56:7a:fc:02:c8:34:
                    91:25:30:56:5c:af:db:ca:f5:e7:85:e8:3d:86:46:
                    2e:9f:6e:49:c3:8d:ec:2d:a2:76:ba:0e:f3:38:56:
                    47:5d:e7:37:ed:c0:e1:db:a0:94:f7:0b:97:0c:fd:
                    bc:a8:79:ca:98:de:1d:f9:58:17:df:dc:31:68:18:
                    df:ab:8e:fe:9a:8b:fb:e4:32:28:8e:a5:b9:75:c7:
                    df:79:7b:51:c0:e8:e6:22:e5:ee:58:39:f9:52:5c:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:98:A0:C4:4C:DA:50:01:83:1E:54:CE:CF:E2:E3:89:6C:BF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:5d:b9:0c:98:be:34:98:9b:8d:8f:9c:30:8f:0d:8e:0f:
         6b:e7:96:ff:ed:81:18:7e:0f:dd:2b:33:13:9b:cb:b9:5d:c1:
         2f:aa:9c:8d:b4:85:65:99:a2:25:27:b6:b1:d9:e5:a2:b4:37:
         4d:e5:9f:1d:76:3c:d4:15:b0:fe:c5:2b:79:25:63:aa:d8:44:
         a0:fd:ab:3a:92:25:62:7b:f8:aa:f9:5a:07:1b:93:40:a4:01:
         00:87:e9:ad:8d:6c:b7:92:ab:09:c6:52:7c:77:9c:ff:cb:ef:
         7c:94:b2:cd:a2:03:70:9b:74:55:98:de:5c:45:c7:ec:4f:26:
         d1:aa:03:b2:ee:de:b6:8d:ad:eb:79:a4:1c:51:1a:a3:b7:ab:
         2e:77:e8:0a:0f:00:26:d6:4d:1c:11:fa:5f:fe:5d:fc:68:be:
         3f:f4:7a:52:fb:7b:9a:b7:42:21:56:ef:ab:c0:dd:51:8c:6c:
         38:ab:b9:d6:42:79:3f:dc:ad:64:b6:8a:29:df:7e:e2:a7:a9:
         19:e4:2d:ab:c3:c9:43:7e:37:88:3a:9d:ec:72:b8:c1:f5:51:
         bf:c7:bf:db:c2:33:a2:fa:3b:e3:8c:b9:8d:3d:a1:9a:8c:16:
         13:2d:42:e5:33:4d:a3:0a:59:12:6c:11:f8:91:4e:1f:bd:dd:
         36:34:ad:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAux9brbWgc9s6goAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMxODIyMTQ1MFoXDTI0MDYxNjIyMTQ1MFowLzEtMCsGA1UEAxMk
MGU0ZDk3ZDEtYWZjZi00OTk5LWE3ZjEtZmZiNTMzM2ZhY2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEjuRlIJqMt0B5OmEupyz9Y5PliHZGxr5s/p
3+Qwz5v7OBxwQOLxRWTnbefF46wiFIH8WdiIvmZu6lAy5Otepw9M38DsV4lgiV3k
6kaaowcc326TM0nvKc44bSHaFwNh2Cod5vwpdh6bh6oPe4QYJ98PawL3PQ5aQ9Y7
vcO8ixTXcmaG5au8nEo0AMv+f8HIKF2TQtU8GhfgGiBRowRWevwCyDSRJTBWXK/b
yvXnheg9hkYun25Jw43sLaJ2ug7zOFZHXec37cDh26CU9wuXDP28qHnKmN4d+VgX
39wxaBjfq47+mov75DIojqW5dcffeXtRwOjmIuXuWDn5UlwIRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPY5mKDETNpQAYMeVM7P4uOJbL/8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjFhNTM4NDktZmFhMi0z
NWE4LWE0NGYtMzk3NDgxMjMyMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0EXbkMmL40mJuNj5wwjw2OD2vnlv/tgRh+D90rMxOby7ldwS+qnI20
hWWZoiUntrHZ5aK0N03lnx12PNQVsP7FK3klY6rYRKD9qzqSJWJ7+Kr5Wgcbk0Ck
AQCH6a2NbLeSqwnGUnx3nP/L73yUss2iA3CbdFWY3lxFx+xPJtGqA7Lu3raNret5
pBxRGqO3qy536AoPACbWTRwR+l/+Xfxovj/0elL7e5q3QiFW76vA3VGMbDirudZC
eT/crWS2iinffuKnqRnkLavDyUN+N4g6nexyuMH1Ub/Hv9vCM6L6O+OMuY09oZqM
FhMtQuUzTaMKWRJsEfiRTh+93TY0rUo=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:35 2024 by rpki-client on console-ams.rpki-client.org