Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa
File:                     7a1704e8-7ccc-335b-aa08-405d8288ba92.roa (raw, json)
Hash identifier:          c/MT3EzLdRZjjK0JAsbjSR/od/SpAnwbpYz3d/etvlc=
Subject key identifier:   6D:B0:0F:B6:CF:D0:DA:00:0C:FC:48:16:67:F3:9E:28:A2:B2:3C:BA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584546273A8F9C994A73D9F4FC80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa
Signing time:             Wed 20 Mar 2024 20:51:42 +0000
ROA not before:           Wed 20 Mar 2024 20:51:42 +0000
ROA not after:            Tue 18 Jun 2024 20:51:42 +0000
asID:                     36492
IP address blocks:        136.22.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:3a:8f:9c:99:4a:73:d9:f4:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:51:42 2024 GMT
            Not After : Jun 18 20:51:42 2024 GMT
        Subject: CN=46866adc-aa38-4ece-a42a-251056b309cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:0b:2b:ad:db:4f:00:ee:9d:2f:25:a6:d6:
                    07:1c:eb:a1:e6:16:08:0f:84:91:07:d5:76:bc:29:
                    44:72:98:be:04:bc:8d:c1:96:47:b3:9a:a4:c6:0a:
                    9e:a3:b4:a2:75:9a:4e:3d:ed:80:29:43:fc:cb:39:
                    53:ef:40:41:a4:a5:94:5e:d1:5c:c9:c4:3b:02:4c:
                    93:31:04:0c:52:8c:84:14:ad:79:d3:13:78:c8:af:
                    00:27:d2:0b:86:49:60:95:1e:7a:cd:d1:c5:f8:ee:
                    6f:48:be:8b:23:80:2d:d9:cc:bb:fb:d2:b0:51:49:
                    45:c5:6e:cf:6b:94:60:78:41:3e:eb:8b:8f:b0:18:
                    1e:a7:3b:b0:fe:5f:e3:50:a8:68:11:ac:c9:94:51:
                    00:6a:b8:87:8d:32:a7:a9:b5:21:77:a4:2e:81:9f:
                    b8:b9:3b:5d:01:34:b0:bc:ac:7f:12:00:85:a1:23:
                    00:24:b7:29:0c:59:aa:e4:8a:49:27:57:b2:05:11:
                    5c:4f:b0:38:2b:40:7d:e6:57:af:24:a8:9c:92:13:
                    08:bb:b9:8c:78:a1:89:02:55:55:0a:e6:a8:8b:8c:
                    80:6b:23:cc:11:bc:3b:06:24:01:09:73:25:ff:32:
                    70:1f:02:15:ae:f2:29:ff:46:36:bf:9a:01:fb:8b:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B0:0F:B6:CF:D0:DA:00:0C:FC:48:16:67:F3:9E:28:A2:B2:3C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:80:b8:ad:4e:f8:a7:f3:4d:de:f7:10:7c:1a:63:b0:53:
         09:f6:5e:d8:0d:c5:93:fc:df:15:1a:4a:e9:75:ae:36:55:48:
         2b:2f:dc:1a:30:28:95:3b:cc:78:ed:6b:67:64:92:32:0b:03:
         ba:7c:f2:80:21:0f:b8:b7:31:41:25:a7:5e:da:fb:f1:7b:66:
         be:3f:0c:ee:9a:7d:40:f6:99:b6:a5:49:d1:61:63:45:a8:fd:
         23:93:8f:2f:ea:b9:e0:60:85:de:5d:57:59:33:3e:10:e3:57:
         42:91:8a:81:ba:f4:fe:f7:8a:33:1b:64:0a:f0:df:07:40:9b:
         5b:c1:31:17:f0:50:3a:91:86:0f:b3:62:e0:fe:e4:ba:5d:71:
         24:8b:9a:76:c7:90:09:49:f5:2f:14:6f:57:cb:43:d8:34:05:
         83:53:7b:9e:6f:c7:05:36:c0:d5:f1:bd:e1:96:c9:ed:a5:9b:
         bf:2f:15:1e:9d:ac:41:05:8a:9e:0f:dc:5d:d0:7a:52:f1:87:
         a5:10:9f:82:f9:f0:d6:60:cd:54:a7:c1:38:37:bc:ef:6d:35:
         69:95:40:c7:9c:7a:e9:4b:f5:c9:3c:d4:f3:5b:44:49:64:b9:
         b3:8d:b1:13:96:de:94:0a:3d:79:f7:f6:e8:65:1e:39:a6:c2:
         57:47:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:41 2024 by rpki-client on console-ams.rpki-client.org