Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
File:                     68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa (raw, json)
Hash identifier:          9xoTKfuVQSV9m1Tb/i2JKdxKU/UI1AlB5KK893nGJ5Y=
Subject key identifier:   55:95:B1:02:74:E5:33:0D:4F:C1:3E:A7:4F:15:ED:9E:C9:31:76:24
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62AB90240665C927D0EDC00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b9:02:40:66:5c:92:7d:0e:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=49860cbd-0aa1-4f0e-98eb-c550f202a494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:cb:0f:69:f3:d7:42:31:cf:94:6c:ba:bf:
                    5e:d5:ce:a7:da:5e:21:4a:d8:9c:36:92:49:9c:2b:
                    aa:85:f1:49:10:84:26:10:9b:e0:33:aa:9a:0c:22:
                    97:22:32:51:e0:d9:72:87:3a:68:4b:a9:59:b6:0a:
                    eb:49:a6:b7:41:3d:75:0d:f6:eb:6d:17:5a:56:75:
                    0d:ed:d7:91:f4:af:50:fb:a5:fd:83:89:01:23:31:
                    e1:fd:17:7f:e3:d7:71:db:91:47:62:21:e6:b2:21:
                    0b:dc:f3:46:27:ac:57:3d:a3:a7:08:0a:9f:42:96:
                    bf:cf:6e:de:89:a5:d8:ec:34:26:ac:6e:16:e6:79:
                    92:5b:3e:7c:81:8c:64:2e:e0:c0:d5:34:a8:ce:4b:
                    78:ca:39:5a:c0:cc:fd:78:01:4e:9b:d0:b6:54:9c:
                    cc:73:c7:8b:2d:bd:f4:1d:fb:65:14:93:55:2e:3e:
                    fd:58:8e:3a:aa:4a:04:3a:c3:93:09:7e:8a:27:0e:
                    40:82:18:27:7f:a7:c1:07:91:4d:5a:31:99:75:2c:
                    f3:ac:11:5a:62:72:e7:4e:c2:51:d0:6e:a2:18:75:
                    d5:6c:94:da:54:e3:70:94:7c:8b:03:ce:59:ed:1b:
                    45:19:c0:99:e2:b9:52:70:00:3e:21:52:72:ff:22:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:B1:02:74:E5:33:0D:4F:C1:3E:A7:4F:15:ED:9E:C9:31:76:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:72:14:eb:de:f9:da:a3:21:20:5b:5c:10:7a:dc:9b:68:1b:
         e9:e4:eb:0b:07:a4:00:b7:7c:c0:12:2b:0c:f9:37:55:c4:67:
         06:99:64:dc:37:9f:3e:8c:5c:87:e4:c6:26:a4:09:00:28:67:
         92:5e:6e:2b:d4:0d:aa:11:e0:e2:ac:73:b7:bb:30:95:08:a5:
         8f:af:a1:80:ae:b4:a7:a1:d5:99:42:e1:7d:ca:f1:3d:4e:cb:
         65:36:53:fe:da:30:a0:35:fa:fe:ce:86:5e:8b:22:be:49:49:
         7a:c6:c6:95:26:4e:c3:77:6c:8c:49:6d:7c:7f:ed:c1:85:3c:
         30:c4:d8:eb:00:2f:ff:00:45:f3:b7:6b:90:77:a4:69:d6:28:
         b5:b7:1a:54:84:a9:c9:d2:26:86:0a:78:d2:82:00:f3:ed:45:
         76:46:79:1b:29:eb:dd:5c:28:c0:cc:a4:28:7a:4a:b3:76:19:
         db:28:cb:f7:86:c7:13:1a:30:1d:38:8e:b3:52:9f:0f:a9:8e:
         89:ee:1a:73:b1:71:25:7c:80:2c:fa:ae:84:ae:f6:47:8f:46:
         2f:fd:9f:31:b0:b6:8b:0c:b1:8b:42:e6:cb:12:e0:e0:b7:b7:
         dc:c0:a0:68:6b:c9:d7:d5:e6:54:a5:8e:23:c2:43:94:b0:81:
         c6:5f:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:32 2024 by rpki-client on console-ams.rpki-client.org