Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa
File:                     6aa0c184-33cf-3032-8bf5-ea48290c4108.roa (raw, json)
Hash identifier:          LBL45Y2qW1nsct+dcI90jHbvT126dDOD4RFFvyuxzfY=
Subject key identifier:   AE:DA:8A:30:5B:D1:A8:F6:10:24:BB:3D:35:EC:86:3C:AC:F7:15:2E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094DE85B0760E3E8C636600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:de:85:b0:76:0e:3e:8c:63:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=9405367c-e6b0-45fc-87db-7362648665fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:f6:0f:ed:21:d2:39:6e:d9:01:6c:3a:30:
                    b6:61:5d:f5:8a:06:fe:b6:05:6e:33:3d:77:8c:45:
                    0a:7a:bc:1a:7f:de:47:d9:26:67:23:24:3b:66:f1:
                    55:97:80:db:f4:69:db:db:e7:63:2d:2b:3b:25:6d:
                    2c:34:98:50:fc:ba:29:ba:3c:f3:a0:e4:01:25:df:
                    64:14:96:e3:06:4e:fa:32:e3:36:c8:72:ec:fd:5e:
                    93:c6:4c:b6:68:4e:44:8f:4a:dc:1e:45:6f:a4:ff:
                    e7:d7:2a:59:c1:e5:4f:6b:74:52:62:93:77:65:ed:
                    96:9b:b3:82:61:b4:c1:57:27:a2:34:cf:91:c5:2b:
                    2d:53:6d:74:c2:57:cf:cf:2a:c1:6f:c6:68:9f:1f:
                    24:b5:7a:26:20:d6:7f:45:d5:0d:7d:e3:df:9e:12:
                    6d:f9:c0:f6:a9:45:1a:26:e2:ac:0b:31:b4:d6:0b:
                    0d:52:ee:e8:4c:60:aa:6f:63:74:f3:9a:2e:e1:15:
                    b5:a4:e3:f7:93:0f:df:d8:74:00:1c:05:02:d2:7b:
                    23:4b:b4:36:18:bb:3b:c7:ee:4d:d2:19:29:8c:30:
                    c2:ed:4d:e7:2a:96:12:51:6f:ba:38:c2:99:ef:da:
                    b9:38:14:03:f6:53:b5:18:ee:eb:cf:55:18:f9:b8:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DA:8A:30:5B:D1:A8:F6:10:24:BB:3D:35:EC:86:3C:AC:F7:15:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:43:a6:eb:a4:f5:81:43:10:7a:36:db:e1:7a:c4:fa:18:
         9e:87:20:56:24:ec:1e:b5:46:be:05:45:d7:5d:46:07:9e:51:
         be:1d:1d:4f:aa:fb:35:cb:36:38:59:d8:e2:6e:90:f7:cf:b7:
         6e:1a:44:42:3b:5c:da:6a:2c:36:e2:5a:49:c3:ca:e4:98:ec:
         bc:20:3d:89:c4:39:e3:3c:68:91:75:99:f8:1d:6a:58:6a:af:
         d2:e0:c0:92:b9:f9:61:25:18:6e:8d:c1:f6:54:48:64:0b:16:
         bb:f0:c9:3d:6c:cb:54:d2:6a:83:d1:5f:e9:4e:db:b3:06:0a:
         42:2c:80:77:f1:37:96:81:d0:2f:7a:43:f2:92:e4:ba:ba:f7:
         1a:eb:5d:3c:b5:24:28:74:37:2c:0d:b9:a4:a1:01:95:3d:6a:
         01:3a:ce:59:0a:de:9a:08:fe:cc:64:84:51:b3:60:05:ea:16:
         7f:85:e3:bb:eb:10:3e:bf:7d:35:9b:10:d0:a5:7a:63:5c:b7:
         97:e6:0f:df:be:f8:bf:e8:bc:5b:5c:71:0b:b8:40:cf:c2:84:
         2b:d8:79:8a:91:fb:0e:a7:ac:29:0d:10:e2:ce:93:d5:c0:68:
         6b:fc:65:57:da:7c:a2:16:e2:43:bf:24:1c:da:34:4d:95:e6:
         7d:6b:13:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglN6FsHYOPoxjZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
OTQwNTM2N2MtZTZiMC00NWZjLTg3ZGItNzM2MjY0ODY2NWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGj2D+0h0jlu2QFsOjC2YV31igb+tgVuMz13
jEUKerwaf95H2SZnIyQ7ZvFVl4Db9Gnb2+djLSs7JW0sNJhQ/LopujzzoOQBJd9k
FJbjBk76MuM2yHLs/V6Txky2aE5Ej0rcHkVvpP/n1ypZweVPa3RSYpN3Ze2Wm7OC
YbTBVyeiNM+RxSstU210wlfPzyrBb8Zonx8ktXomINZ/RdUNfePfnhJt+cD2qUUa
JuKsCzG01gsNUu7oTGCqb2N085ou4RW1pOP3kw/f2HQAHAUC0nsjS7Q2GLs7x+5N
0hkpjDDC7U3nKpYSUW+6OMKZ79q5OBQD9lO1GO7rz1UY+bhnvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7aijBb0aj2ECS7PTXshjys9xUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNmFhMGMxODQtMzNjZi0z
MDMyLThiZjUtZWE0ODI5MGM0MTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4rQ6brpPWBQxB6NtvhesT6GJ6HIFYk7B61Rr4FRdddRgeeUb4dHU+q
+zXLNjhZ2OJukPfPt24aREI7XNpqLDbiWknDyuSY7LwgPYnEOeM8aJF1mfgdalhq
r9LgwJK5+WElGG6NwfZUSGQLFrvwyT1sy1TSaoPRX+lO27MGCkIsgHfxN5aB0C96
Q/KS5Lq69xrrXTy1JCh0NywNuaShAZU9agE6zlkK3poI/sxkhFGzYAXqFn+F47vr
ED6/fTWbENClemNct5fmD9+++L/ovFtccQu4QM/ChCvYeYqR+w6nrCkNEOLOk9XA
aGv8ZVfafKIW4kO/JBzaNE2V5n1rE3g=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org