Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
File:                     7de72217-a5ed-3f99-8532-8233575f8ade.roa (raw, json)
Hash identifier:          OfYtZgZlLod9VrVYogUFpoGBOq2zvj/hC8bTxctqAfk=
Subject key identifier:   BD:89:EA:70:E4:C0:12:DA:76:F3:53:8F:E7:ED:A4:DF:59:49:38:04
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62AA6B4DF991CBED3EC0580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a6:b4:df:99:1c:be:d3:ec:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c28c493d-31b5-4d16-8f60-aad4682b0992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f5:27:50:61:07:6d:d2:15:aa:1e:b1:7e:d1:
                    7b:87:59:bb:27:cf:78:b9:a6:f1:a8:28:10:c7:f5:
                    80:6a:54:09:11:d2:59:e6:6c:2b:2c:db:b3:33:e2:
                    dc:fb:62:d1:c9:b6:38:ce:d1:8e:24:c3:f1:32:e8:
                    4f:d6:b7:19:b7:b9:e8:a5:cd:26:8e:6e:7e:5e:0e:
                    14:1b:2b:ee:be:c9:b5:5c:18:c9:f4:e6:f3:22:e2:
                    c4:45:57:c0:c6:56:e8:7e:45:a1:82:97:6f:05:75:
                    0c:f0:72:f6:77:c0:b0:d3:31:11:3c:af:14:3d:89:
                    cc:26:b5:5c:93:15:32:4d:40:f4:f6:ba:6d:89:e8:
                    72:62:58:9b:fa:44:7f:44:44:61:23:fa:15:be:f4:
                    1d:04:17:ba:f1:93:29:2a:da:46:2b:03:7d:fc:4f:
                    6d:af:8e:fc:e5:12:12:40:fb:2a:8b:4c:03:b1:f2:
                    9d:17:f8:c4:41:2e:e3:3d:a9:23:7d:da:e7:4e:17:
                    c1:e0:b9:c9:2d:64:e6:0b:50:0e:2f:63:3f:f2:e6:
                    34:e8:89:6b:ec:65:f9:1b:e7:44:31:11:b9:37:c1:
                    31:88:50:38:7c:4a:91:9f:17:0d:b2:f6:52:8a:90:
                    78:e8:a7:5e:8e:06:7e:c7:32:91:5f:d6:8d:59:8f:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:89:EA:70:E4:C0:12:DA:76:F3:53:8F:E7:ED:A4:DF:59:49:38:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:18:cb:c4:65:39:60:35:50:9c:b6:b5:ff:09:4e:86:6a:44:
         f2:cb:46:42:f8:66:a7:12:60:02:46:b1:64:c2:d7:98:f7:16:
         60:09:ce:53:a3:6f:b3:f7:20:fd:3c:f9:d9:36:af:4e:91:9d:
         61:0d:aa:44:5e:e7:54:10:a1:68:3f:6d:e6:9e:a4:53:07:74:
         39:9e:4e:61:b3:97:88:dc:32:fd:72:30:c0:96:18:41:99:bd:
         a9:75:c0:51:ef:e3:d2:12:14:bc:ec:4c:8d:b9:d2:43:95:ae:
         c1:ad:e1:a0:c3:81:48:42:ce:83:32:64:6d:7f:8e:88:92:08:
         d3:4f:5e:a8:15:a0:c2:15:c5:4c:58:02:ef:6a:b4:de:ff:91:
         cc:ad:b4:48:f9:bc:c5:c9:ed:34:73:44:6e:e8:9e:58:f1:11:
         f1:08:12:b4:87:10:69:e6:a0:87:94:f7:39:22:87:95:aa:c8:
         d1:a2:93:3b:74:a2:7a:b2:26:ce:7f:90:04:98:09:f5:f4:a9:
         b6:25:67:2d:70:54:8e:f7:6c:39:93:b0:23:06:fa:2b:e8:03:
         50:e9:1a:1c:ca:f4:79:2a:66:0a:1e:66:86:52:98:41:7d:1f:
         2b:93:29:f0:77:6e:c6:cd:33:01:e1:b6:dc:ec:e7:0c:ac:52:
         d0:c1:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org