Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          x+EYQ5X7WcP4yYscmx0C6t648LXiySUWNdX2xslrI9U=
Subject key identifier:   37:62:34:F2:CD:05:B3:5D:28:09:5D:85:1A:45:C5:87:FD:C2:93:6C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094C7FC9B21A3B5207DD570
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c7:fc:9b:21:a3:b5:20:7d:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=606326fa-adde-4a3d-826a-742549beea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:34:b8:e2:10:5e:30:2e:fe:d3:54:2c:e6:
                    af:a6:fb:61:ff:3b:e6:89:be:65:30:d4:40:e4:b0:
                    59:6c:50:17:51:a7:a8:ed:57:e7:d5:0c:33:4f:64:
                    8c:29:01:e5:df:1f:07:d4:90:1d:b8:2e:ac:8a:28:
                    1f:76:bb:e7:47:31:88:e8:a7:67:6e:78:cb:67:3d:
                    96:0b:0d:1a:b1:50:e8:19:a3:f1:d9:f5:a1:35:0f:
                    78:3c:fc:f9:e2:07:40:88:53:0f:b8:62:0d:bd:c7:
                    c9:fb:7a:3d:7d:4d:83:51:9e:c3:4d:78:e2:a0:4b:
                    50:9b:f8:3f:9b:5c:3f:03:71:3d:22:28:dd:b7:9e:
                    ec:14:0d:bc:be:92:4a:05:25:f7:da:83:c2:7c:60:
                    97:64:83:f9:98:10:71:16:ba:55:42:5b:c1:60:19:
                    af:59:5b:0a:ef:06:dd:25:fa:10:14:78:2b:2e:1b:
                    80:9c:48:cb:8b:1f:e8:70:2a:21:f7:da:12:de:c9:
                    05:67:35:09:09:33:ce:ee:bc:e3:fb:94:7b:c9:26:
                    f5:1a:b3:72:01:72:e8:8c:a6:03:e3:0c:4b:03:f2:
                    85:c8:ef:68:20:40:d5:9b:92:23:a2:f5:31:d9:99:
                    22:56:2e:78:dc:0c:11:e1:82:26:cb:94:af:a8:7c:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:34:F2:CD:05:B3:5D:28:09:5D:85:1A:45:C5:87:FD:C2:93:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:67:c9:59:f2:b4:28:3e:35:dd:4a:8b:7b:9b:40:94:be:80:
         47:80:0f:af:41:31:b8:d1:4c:4c:6a:cc:b3:16:2b:11:0e:a5:
         a6:a1:75:41:62:ed:7e:22:d5:54:81:be:29:25:ae:76:4b:22:
         cb:3d:a9:a5:60:a0:74:9d:c4:ab:6f:fa:ef:1f:08:24:cd:34:
         3a:0d:98:9b:44:6f:2e:65:00:1f:4b:19:c1:a4:f1:f9:7a:13:
         1c:d0:2e:5f:5e:d0:45:e2:d9:73:43:0a:0c:33:df:e8:4e:08:
         17:5a:48:cd:af:28:63:5c:bb:f0:40:ee:fa:98:51:64:a2:d1:
         1c:a5:dd:df:db:f5:90:ad:af:c1:3b:2f:50:6a:83:4a:aa:26:
         47:02:39:f6:49:e1:32:b4:1a:42:b9:76:b0:e9:b1:b0:02:54:
         ef:6c:04:9b:c5:df:34:31:cd:c9:12:79:54:6e:9e:12:ce:78:
         f9:29:1c:d8:04:03:67:38:4a:3a:ae:8f:ca:0c:2b:43:84:5b:
         91:3d:c5:b2:ff:4d:18:4f:21:7b:2c:d7:e9:e9:09:80:6d:22:
         66:aa:d0:14:f5:7d:d4:4b:90:fa:72:7a:44:c8:39:f4:1e:ba:
         01:b8:7e:73:bb:32:04:a1:28:93:d4:f3:fd:f8:4e:bb:b7:7a:
         19:d2:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org