Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
File:                     68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa (raw, json)
Hash identifier:          D5ZddERIVkh/KF2i0FxLSX3geqzNNW1FWP0XRQGT/UU=
Subject key identifier:   72:1A:65:00:C4:25:54:65:FF:2C:B6:2E:E4:3F:EB:DA:13:A7:B5:D0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462DCBB38199E64997660480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
Signing time:             Wed 20 Mar 2024 21:04:56 +0000
ROA not before:           Wed 20 Mar 2024 21:04:56 +0000
ROA not after:            Tue 18 Jun 2024 21:04:56 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:cb:b3:81:99:e6:49:97:66:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 21:04:56 2024 GMT
            Not After : Jun 18 21:04:56 2024 GMT
        Subject: CN=56fe7686-0a42-4c23-b16d-e7e638fa021e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:33:68:4f:99:36:62:7d:e8:80:96:31:d4:
                    38:a6:5e:d3:4e:68:9f:84:19:69:5d:b9:9a:30:90:
                    2a:23:6f:db:11:d2:cc:38:36:78:06:86:bf:d9:e8:
                    3b:30:15:1d:c8:bd:4b:e6:d8:a4:38:8c:71:fd:39:
                    c8:64:82:97:d6:25:25:a5:71:c5:7d:69:e0:ba:87:
                    d8:e2:db:a2:4c:9d:76:41:b1:bb:10:ba:74:3f:84:
                    ad:d4:6d:fc:51:c3:9c:0e:3f:95:4b:28:c9:af:84:
                    d2:e5:d2:ec:19:a8:d0:31:7b:92:ca:0e:7f:36:f7:
                    23:ce:d9:30:d1:02:ab:f4:19:61:5a:ec:2a:06:f8:
                    af:c1:ec:4a:d8:91:5c:f0:f2:de:3e:e3:a3:38:b7:
                    e9:8e:1f:2c:25:ac:14:f6:e4:b4:46:2c:0a:b2:03:
                    99:a2:0f:ef:45:f1:53:48:c2:53:d5:6b:0d:42:69:
                    f6:0e:0e:dc:56:30:91:4e:c2:46:ac:0e:e2:40:9c:
                    37:0b:fd:11:2d:15:e1:61:99:70:a0:de:62:30:50:
                    43:8a:33:cc:9b:aa:dc:5a:d1:63:45:83:39:4e:bc:
                    da:08:28:c4:ea:fc:e8:f6:72:7e:75:2e:f8:48:dd:
                    fe:6f:76:d7:c0:f1:2d:b0:36:b0:e8:69:6d:a0:ac:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1A:65:00:C4:25:54:65:FF:2C:B6:2E:E4:3F:EB:DA:13:A7:B5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:81:67:1c:2c:84:cc:93:54:e6:bf:e5:85:7d:b7:15:85:d3:
         ce:a4:eb:6b:d0:0f:3b:9c:28:ae:b1:41:70:44:48:61:2d:3c:
         44:d1:ce:29:b7:2b:ec:40:67:27:6c:f5:28:38:9d:40:fa:4c:
         a0:36:2d:0c:a7:c9:60:e8:6a:d6:3c:b9:56:67:79:f1:f9:2c:
         5f:eb:50:00:c3:80:9f:ad:e4:de:1e:0d:bb:49:44:0a:21:d5:
         70:99:64:e6:9d:c0:43:eb:a6:46:70:49:89:95:6f:73:04:bb:
         e6:1c:31:52:50:38:10:d8:61:bf:7b:5b:8f:bf:c3:d2:40:a7:
         34:56:e4:fc:03:76:15:4f:1d:7a:74:5c:8c:55:20:21:ba:14:
         dd:bb:e0:90:86:2a:eb:ec:53:fe:6a:77:2b:f7:9a:4e:92:bd:
         4a:65:27:96:3d:9e:c3:25:4d:df:26:f9:ef:16:9f:da:aa:7c:
         dc:c3:5e:a5:5b:59:ec:3a:71:10:3a:9d:bb:43:a6:d9:c5:0a:
         44:d1:48:2f:a7:33:33:29:4f:a6:84:71:a7:b2:b8:fb:54:49:
         d5:2f:4a:ce:92:02:3a:e8:1b:9f:83:3d:74:6c:ef:29:18:8d:
         4a:5b:83:11:64:77:87:14:29:1c:07:b7:1b:43:06:a7:c9:c9:
         fe:81:35:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLcuzgZnmSZdmBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMDIxMDQ1NloXDTI0MDYxODIxMDQ1NlowLzEtMCsGA1UEAxMk
NTZmZTc2ODYtMGE0Mi00YzIzLWIxNmQtZTdlNjM4ZmEwMjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA160zaE+ZNmJ96ICWMdQ4pl7TTmifhBlpXbma
MJAqI2/bEdLMODZ4Boa/2eg7MBUdyL1L5tikOIxx/TnIZIKX1iUlpXHFfWnguofY
4tuiTJ12QbG7ELp0P4St1G38UcOcDj+VSyjJr4TS5dLsGajQMXuSyg5/Nvcjztkw
0QKr9BlhWuwqBvivwexK2JFc8PLePuOjOLfpjh8sJawU9uS0RiwKsgOZog/vRfFT
SMJT1WsNQmn2Dg7cVjCRTsJGrA7iQJw3C/0RLRXhYZlwoN5iMFBDijPMm6rcWtFj
RYM5TrzaCCjE6vzo9nJ+dS74SN3+b3bXwPEtsDaw6GltoKxHcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHIaZQDEJVRl/yy2LuQ/69oTp7XQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjhlMWYxYjYtZWY2MS0z
NjI5LWI4MGMtNGUzZjBiMzViMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2BZxwshMyTVOa/5YV9txWF086k62vQDzucKK6xQXBESGEtPETRzim3
K+xAZyds9Sg4nUD6TKA2LQynyWDoatY8uVZnefH5LF/rUADDgJ+t5N4eDbtJRAoh
1XCZZOadwEPrpkZwSYmVb3MEu+YcMVJQOBDYYb97W4+/w9JApzRW5PwDdhVPHXp0
XIxVICG6FN274JCGKuvsU/5qdyv3mk6SvUplJ5Y9nsMlTd8m+e8Wn9qqfNzDXqVb
Wew6cRA6nbtDptnFCkTRSC+nMzMpT6aEcaeyuPtUSdUvSs6SAjroG5+DPXRs7ykY
jUpbgxFkd4cUKRwHtxtDBqfJyf6BNXI=
-----END CERTIFICATE-----
Generated at Thu May 2 08:54:19 2024 by rpki-client on console-fra.rpki-client.org