Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7331c0d3-caad-3409-83f8-abc8f647ea7d.roa
File:                     7331c0d3-caad-3409-83f8-abc8f647ea7d.roa (raw, json)
Hash identifier:          Dtx9behEeGzyGQYbRsOftEBBC2rhEFSpxQq+h1kZUkk=
Subject key identifier:   F2:B4:25:1D:58:5F:75:EE:5B:77:89:F3:24:ED:54:90:16:88:19:39
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462435AD628186CEEB430000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7331c0d3-caad-3409-83f8-abc8f647ea7d.roa
Signing time:             Wed 20 Mar 2024 20:45:37 +0000
ROA not before:           Wed 20 Mar 2024 20:45:37 +0000
ROA not after:            Tue 18 Jun 2024 20:45:37 +0000
asID:                     36492
IP address blocks:        136.22.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:35:ad:62:81:86:ce:eb:43:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:45:37 2024 GMT
            Not After : Jun 18 20:45:37 2024 GMT
        Subject: CN=b87e6367-da49-4b08-95de-3b0d2c8c5c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:27:32:92:7a:30:89:cc:88:80:95:49:e7:
                    9b:11:e1:0d:b2:f3:df:fd:fd:16:85:86:09:32:da:
                    8c:c7:d3:03:b3:98:8a:b2:00:4a:0e:e9:3d:26:0b:
                    5a:05:70:b6:0c:4c:ce:dd:4c:8c:3c:75:3e:41:18:
                    d0:f2:de:a0:62:d0:d1:a2:37:bb:22:07:9d:8c:21:
                    e6:13:c9:e8:db:6d:7d:3d:df:64:d1:13:2a:68:ac:
                    5e:ef:f2:0f:72:72:55:33:24:26:78:2e:85:b2:de:
                    ee:0f:69:93:eb:91:44:67:79:96:62:17:bf:00:a5:
                    3b:c8:76:33:08:ba:3d:2d:3f:3d:f1:f3:63:5b:d1:
                    c9:8b:41:fb:db:5f:f5:8e:36:d1:bf:49:48:97:47:
                    36:54:66:f3:45:c4:e0:2f:6e:8b:fd:e9:8f:22:14:
                    58:b8:4f:e9:30:34:ff:71:e9:05:e4:b8:d6:b3:a9:
                    e7:54:a8:80:dd:3d:49:a4:d8:33:21:94:6d:55:b7:
                    22:f0:03:1f:f9:19:41:ca:99:5e:55:8a:d1:65:e6:
                    c9:53:e8:fa:ec:2f:66:32:5e:35:5b:94:df:22:65:
                    0f:c6:91:77:77:fe:eb:da:89:d6:ab:18:64:07:44:
                    fa:9d:2b:46:45:11:a4:c7:04:ca:4e:2a:d1:14:88:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:25:1D:58:5F:75:EE:5B:77:89:F3:24:ED:54:90:16:88:19:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7331c0d3-caad-3409-83f8-abc8f647ea7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9b:4c:d2:9b:77:22:9d:98:32:af:64:6b:3e:73:65:f2:f4:
         22:c6:aa:67:05:76:d8:5c:87:bb:12:f4:59:25:29:71:2a:14:
         1d:3b:2b:21:0b:51:10:2e:d1:5f:72:e8:0a:19:a0:c7:e6:0d:
         f4:08:e3:ec:8c:f8:f7:44:73:58:95:0b:6d:34:83:51:e7:f4:
         6d:00:86:85:d1:35:eb:ec:e6:5d:de:8c:cc:39:29:e6:77:19:
         63:19:f0:07:cc:b4:84:49:d1:bb:42:cd:c3:bc:47:93:58:09:
         2b:50:a2:3b:1b:54:17:10:ce:3c:11:0a:54:17:7a:ec:8a:78:
         d7:a9:88:1c:58:3b:2d:88:7d:53:ed:e3:31:5d:b7:c4:a1:6b:
         2f:e7:fe:25:99:09:de:59:b9:50:53:73:57:d6:0f:36:59:d7:
         a7:ac:28:1f:ba:08:b1:75:7b:ea:52:ea:f3:d8:14:95:da:a3:
         40:bc:dc:3b:21:69:c4:a4:0a:45:f4:34:b8:dc:86:51:f0:f2:
         0e:c8:93:be:f8:5c:25:c4:b1:c6:57:8c:c8:f8:dd:30:6c:be:
         11:7b:0b:5c:a6:c2:0c:de:80:54:bc:6c:16:04:7a:26:36:b4:
         b2:d6:4d:f6:d9:02:af:53:7b:2a:ef:72:38:98:8e:6e:2c:ae:
         48:9c:66:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJDWtYoGGzutDAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMDIwNDUzN1oXDTI0MDYxODIwNDUzN1owLzEtMCsGA1UEAxMk
Yjg3ZTYzNjctZGE0OS00YjA4LTk1ZGUtM2IwZDJjOGM1YzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq4nMpJ6MInMiICVSeebEeENsvPf/f0WhYYJ
MtqMx9MDs5iKsgBKDuk9JgtaBXC2DEzO3UyMPHU+QRjQ8t6gYtDRoje7IgedjCHm
E8no2219Pd9k0RMqaKxe7/IPcnJVMyQmeC6Fst7uD2mT65FEZ3mWYhe/AKU7yHYz
CLo9LT898fNjW9HJi0H721/1jjbRv0lIl0c2VGbzRcTgL26L/emPIhRYuE/pMDT/
cekF5LjWs6nnVKiA3T1JpNgzIZRtVbci8AMf+RlBypleVYrRZebJU+j67C9mMl41
W5TfImUPxpF3d/7r2onWqxhkB0T6nStGRRGkxwTKTirRFIgG4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPK0JR1YX3XuW3eJ8yTtVJAWiBk5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzMzMWMwZDMtY2FhZC0z
NDA5LTgzZjgtYWJjOGY2NDdlYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSbTNKbdyKdmDKvZGs+c2Xy9CLGqmcFdthch7sS9FklKXEqFB07KyEL
URAu0V9y6AoZoMfmDfQI4+yM+PdEc1iVC200g1Hn9G0AhoXRNevs5l3ejMw5KeZ3
GWMZ8AfMtIRJ0btCzcO8R5NYCStQojsbVBcQzjwRClQXeuyKeNepiBxYOy2IfVPt
4zFdt8Shay/n/iWZCd5ZuVBTc1fWDzZZ16esKB+6CLF1e+pS6vPYFJXao0C83Dsh
acSkCkX0NLjchlHw8g7Ik774XCXEscZXjMj43TBsvhF7C1ymwgzegFS8bBYEeiY2
tLLWTfbZAq9TeyrvcjiYjm4srkicZk8=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:37 2024 by rpki-client on console-ams.rpki-client.org