Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76f0c68d-49b4-39fc-a995-3d4e1fc81f4b.roa
File:                     76f0c68d-49b4-39fc-a995-3d4e1fc81f4b.roa (raw, json)
Hash identifier:          q4MPdzkOrVVibu0+VydjvN+khwnelWeFgyhwF4EJ6QM=
Subject key identifier:   77:E3:0D:40:9B:C0:98:BF:2D:29:35:14:34:6A:9E:89:10:C3:E1:8D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B7DADD41B56364F4A150C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76f0c68d-49b4-39fc-a995-3d4e1fc81f4b.roa
Signing time:             Mon 18 Mar 2024 22:08:15 +0000
ROA not before:           Mon 18 Mar 2024 22:08:15 +0000
ROA not after:            Sun 16 Jun 2024 22:08:15 +0000
asID:                     36492
IP address blocks:        136.22.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:da:dd:41:b5:63:64:f4:a1:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:08:15 2024 GMT
            Not After : Jun 16 22:08:15 2024 GMT
        Subject: CN=e18917ec-dc75-4873-a5ea-0f290ada6648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:4a:a6:ef:7a:87:81:f9:6c:85:b9:cd:8b:
                    97:0b:15:ed:e5:5f:a3:3b:dd:1b:b6:d3:3b:7e:c2:
                    58:56:e4:5c:51:6d:be:d0:f5:4f:fd:a2:9b:4b:54:
                    9b:6c:ec:be:8a:6a:66:69:fc:1a:b2:dc:a3:f8:7d:
                    5a:9c:d9:a6:91:38:ee:70:79:89:58:b2:ef:60:74:
                    f9:85:45:9e:38:80:33:36:cf:6c:50:b5:f9:d0:65:
                    3c:c4:48:2a:3a:ab:56:84:f5:f3:0d:f3:cb:14:44:
                    e8:db:74:c6:fd:c5:19:77:42:bb:9a:b5:1c:b2:c9:
                    b4:a4:b9:c9:92:df:32:4d:d0:8b:3e:29:f0:94:b2:
                    75:4b:45:a9:4c:19:10:a4:b5:27:1b:b9:72:08:7a:
                    6a:c8:11:e8:0f:0f:4e:3a:c7:74:fb:80:67:c4:65:
                    d2:2a:ba:6c:e9:6b:e8:6c:0e:5f:11:db:ca:23:24:
                    56:67:9b:db:ac:df:02:f5:f3:e7:9a:d5:53:35:fc:
                    14:ec:20:76:87:7d:73:5a:d2:22:fb:c6:ab:00:d4:
                    71:89:f7:b6:97:71:85:3c:69:51:b3:02:88:4c:35:
                    2c:43:94:b3:0c:9c:49:9b:6d:71:e9:78:2a:2d:28:
                    58:14:d3:ae:37:b4:48:6d:4c:f3:ba:5f:f5:75:fb:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E3:0D:40:9B:C0:98:BF:2D:29:35:14:34:6A:9E:89:10:C3:E1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/76f0c68d-49b4-39fc-a995-3d4e1fc81f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:56:14:bf:30:9a:d2:29:1a:2e:39:5f:1f:37:2b:7a:bd:
         74:7e:60:45:ba:cb:e3:51:a7:78:a7:db:60:71:fc:fa:5b:8c:
         0d:9a:34:99:49:17:ac:86:67:6a:94:5c:c7:63:b9:b5:52:64:
         7d:4b:8f:36:c6:49:29:57:cd:d7:47:0a:56:0d:81:c8:57:61:
         0d:29:45:99:d3:6c:c8:8b:9a:4d:e0:ee:23:00:bc:13:33:9e:
         6f:88:4a:2a:90:50:46:f4:75:fa:81:1e:af:3e:f3:e0:11:48:
         b4:0e:a0:b7:af:d8:e4:c1:ec:1f:ea:bb:b6:76:25:cd:eb:34:
         ac:2f:4d:c1:ce:ae:1c:03:f2:5b:56:bd:73:33:d6:a0:c8:ef:
         73:c9:20:ca:2c:d7:ff:02:1c:81:9e:8e:6f:a3:00:5b:1d:a8:
         3c:23:25:19:53:8d:86:3e:63:43:e8:0c:1c:d4:e8:d8:ef:13:
         50:61:ef:cf:04:39:aa:cb:a9:fd:4b:18:49:07:58:3e:56:92:
         8f:a8:86:24:66:cf:04:e9:66:ea:40:37:8a:16:a8:a7:31:da:
         1e:4e:25:a3:d0:14:2a:91:f2:4d:a1:66:2b:45:dd:48:17:89:
         39:db:31:42:36:73:ee:87:1d:08:89:29:6b:7a:96:b8:c0:f5:
         21:56:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:22 2024 by rpki-client on console-ams.rpki-client.org