Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          J1FuKhZhOkkG/M32OnkoN/Qd0KdLyqujG8Vm4vrm7qs=
Subject key identifier:   1E:0A:3F:2A:5C:7E:AF:21:DA:6A:25:CE:95:B1:2E:06:4C:FA:01:C6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B64BDBD711626E3203BF60
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Mon 18 Mar 2024 22:05:07 +0000
ROA not before:           Mon 18 Mar 2024 22:05:07 +0000
ROA not after:            Sun 16 Jun 2024 22:05:07 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:4b:db:d7:11:62:6e:32:03:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:05:07 2024 GMT
            Not After : Jun 16 22:05:07 2024 GMT
        Subject: CN=72321173-63d2-4ee3-80da-c14bf480e794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:26:27:67:b8:14:21:ff:02:de:2f:bc:42:
                    90:3a:5f:0c:fb:b3:74:6e:0e:d9:83:96:98:39:ee:
                    cc:b6:c9:7f:0c:ae:98:bb:e1:97:76:33:c5:8b:f1:
                    cd:5d:e0:de:0a:53:8b:12:44:a4:8e:2a:a8:3b:c8:
                    e0:be:1d:41:dd:e2:86:8d:3b:71:ca:05:8e:45:e8:
                    31:69:9f:64:62:0b:a5:93:82:11:d4:39:4d:12:67:
                    37:a2:fe:93:68:f9:ba:bf:88:1c:47:1b:0f:33:43:
                    be:60:c2:d1:f8:26:79:c3:94:0a:7b:26:c7:71:87:
                    2b:ca:93:33:73:88:bf:15:99:0a:ed:35:c6:f7:24:
                    ea:9b:c4:a4:f2:9f:2b:f4:d4:73:12:53:a0:17:05:
                    c0:46:b4:01:4a:ea:cb:4f:01:0d:d4:7f:93:b2:f3:
                    53:f9:e7:f1:67:06:36:db:80:98:15:ed:07:51:1f:
                    05:e6:aa:de:ec:2b:00:1c:78:61:08:ad:4e:71:97:
                    34:8c:55:78:fc:01:9a:da:33:ca:f9:2f:43:7a:88:
                    a4:3c:ff:dc:d5:b6:4e:4d:7d:fc:0c:ce:74:76:11:
                    92:8a:b0:77:66:64:df:ac:e9:11:61:be:40:1c:3c:
                    73:8e:5a:9b:13:8b:f8:75:a1:42:85:8e:45:27:f9:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0A:3F:2A:5C:7E:AF:21:DA:6A:25:CE:95:B1:2E:06:4C:FA:01:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d2:39:fc:ba:46:b5:93:c9:f3:27:08:6a:6a:75:1c:98:e5:
         d0:49:8a:bf:64:8e:17:66:da:d9:d3:0b:6a:76:21:ae:14:51:
         db:04:85:4b:dd:23:37:19:c5:a8:9f:61:a1:a4:3e:10:d3:1e:
         55:9c:c7:f7:8f:ee:10:1d:9c:be:bb:e1:46:db:31:5a:0c:f8:
         f1:44:d1:20:63:26:0d:ed:1a:96:fb:58:ab:50:d4:c9:e5:dd:
         43:cb:c9:75:20:7a:80:57:b5:c2:3f:fa:68:00:f3:30:3b:d5:
         3c:37:28:57:3a:a4:83:c4:3c:1f:3f:73:32:6f:4c:81:86:53:
         e4:2d:56:59:85:1a:54:77:e9:98:d5:57:ec:a6:9f:56:2c:22:
         1c:d6:7f:d0:5a:6e:3a:a0:0a:ad:5b:ba:dd:df:de:90:93:25:
         26:9e:9f:1d:5f:f1:01:09:a9:58:44:7e:c3:11:ee:8a:78:5f:
         ff:fe:37:99:00:a2:2a:e8:7e:3c:81:46:16:54:dc:23:18:7e:
         3e:72:b2:b9:99:f4:93:e4:6a:79:60:a8:c9:fe:2d:5d:4b:cc:
         4c:ca:6d:d4:a7:2a:16:16:75:c6:7b:3c:23:0e:b6:b8:e7:67:
         5f:fc:17:03:1d:0c:af:28:bf:aa:3b:3f:32:b5:4a:ad:d2:2f:
         70:c1:ba:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAtkvb1xFibjIDv2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMxODIyMDUwN1oXDTI0MDYxNjIyMDUwN1owLzEtMCsGA1UEAxMk
NzIzMjExNzMtNjNkMi00ZWUzLTgwZGEtYzE0YmY0ODBlNzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpQmJ2e4FCH/At4vvEKQOl8M+7N0bg7Zg5aY
Oe7Mtsl/DK6Yu+GXdjPFi/HNXeDeClOLEkSkjiqoO8jgvh1B3eKGjTtxygWORegx
aZ9kYgulk4IR1DlNEmc3ov6TaPm6v4gcRxsPM0O+YMLR+CZ5w5QKeybHcYcrypMz
c4i/FZkK7TXG9yTqm8Sk8p8r9NRzElOgFwXARrQBSurLTwEN1H+TsvNT+efxZwY2
24CYFe0HUR8F5qre7CsAHHhhCK1OcZc0jFV4/AGa2jPK+S9DeoikPP/c1bZOTX38
DM50dhGSirB3ZmTfrOkRYb5AHDxzjlqbE4v4daFChY5FJ/kshQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4KPypcfq8h2molzpWxLgZM+gHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzViZGU0YTEtZTg3ZC0z
MjFkLTkxN2YtMTBkMTZhMDNhNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHSOfy6RrWTyfMnCGpqdRyY5dBJir9kjhdm2tnTC2p2Ia4UUdsEhUvd
IzcZxaifYaGkPhDTHlWcx/eP7hAdnL674UbbMVoM+PFE0SBjJg3tGpb7WKtQ1Mnl
3UPLyXUgeoBXtcI/+mgA8zA71Tw3KFc6pIPEPB8/czJvTIGGU+QtVlmFGlR36ZjV
V+ymn1YsIhzWf9BabjqgCq1but3f3pCTJSaenx1f8QEJqVhEfsMR7op4X//+N5kA
oirofjyBRhZU3CMYfj5ysrmZ9JPkanlgqMn+LV1LzEzKbdSnKhYWdcZ7PCMOtrjn
Z1/8FwMdDK8ov6o7PzK1Sq3SL3DBupc=
-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org