Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
File:                     879399f8-1838-3e7f-8191-8dc221dd89be.roa (raw, json)
Hash identifier:          52cozTIyUnCmrjfu6+otdbp40DDVxI+2u6hX4D5Wg44=
Subject key identifier:   65:C3:C8:CD:AF:97:A4:03:E0:BF:AC:70:D2:0B:DB:08:ED:D1:D9:78
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62AADF2D57EC65AF7651740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ad:f2:d5:7e:c6:5a:f7:65:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=32ea8122-aafe-43b3-983c-02f6321ba521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:32:91:4f:c3:50:22:5c:a8:22:39:d7:75:
                    2e:0c:c9:e6:f2:40:7e:e1:6b:bb:2a:03:81:3e:a7:
                    b5:a0:ba:7f:40:61:86:6b:15:6e:c6:fc:15:80:f9:
                    32:b5:85:d6:ea:90:ce:01:ee:a1:7d:39:1c:6f:17:
                    f5:09:a1:ba:93:e5:c6:84:a3:7a:ec:3b:b4:f7:04:
                    3c:d0:f2:9f:9b:2f:a6:10:c4:70:85:1f:10:96:0a:
                    5a:47:ab:89:41:2e:a3:46:d6:a3:1d:c7:f6:85:15:
                    a5:93:27:01:c8:97:b2:87:43:cb:de:4b:3d:95:c8:
                    a4:42:c5:b0:32:1e:91:bc:57:44:5a:67:02:80:95:
                    78:4f:3a:fe:4f:b5:1b:75:f2:10:28:ec:e5:28:01:
                    6b:1c:03:7e:e2:fd:b7:78:de:99:dc:8f:20:f4:e0:
                    86:fd:77:95:81:80:85:64:c2:6f:39:95:df:be:eb:
                    24:52:c0:7c:17:89:3d:42:99:b3:ab:97:20:29:66:
                    52:67:d1:6a:fa:e6:54:99:52:b4:6c:2f:2c:44:f6:
                    72:88:0c:aa:23:6c:ca:3e:0b:86:44:96:48:af:a1:
                    55:c2:ca:28:79:3a:ef:a9:62:7b:bf:83:2b:50:20:
                    a3:ad:ac:13:40:b8:69:8d:d1:b9:ba:a5:86:f3:da:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C3:C8:CD:AF:97:A4:03:E0:BF:AC:70:D2:0B:DB:08:ED:D1:D9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:b3:3e:6e:78:55:1c:6d:f2:63:41:66:7f:2f:26:74:ab:
         44:62:56:85:55:9f:37:58:12:8b:67:c1:28:4e:e9:9a:e6:54:
         ba:fe:93:2d:1d:72:94:9f:c4:1e:9c:09:15:17:d5:75:bd:e0:
         7a:a2:45:3d:c6:92:53:e2:c0:6b:cf:a4:f1:ac:a2:f2:a0:a2:
         99:95:09:69:b6:ea:f3:88:8f:7b:17:79:43:51:02:3b:14:f0:
         0e:cf:b4:d2:5c:96:1d:e3:c1:26:21:98:22:11:2d:2e:c1:45:
         ea:6c:b0:fa:a0:7d:2d:77:a0:30:27:ee:1d:89:b1:4a:24:92:
         d6:ea:90:0b:3b:a3:ba:6a:bb:68:34:f8:a0:fc:c8:88:48:a9:
         29:17:58:bb:79:7f:b7:22:e5:db:15:60:fe:13:de:0d:e4:15:
         eb:02:a3:55:1c:86:87:57:37:ff:1e:c2:24:54:96:92:e4:cc:
         86:38:50:1e:02:82:4c:bd:f7:c4:2d:05:56:99:ea:2b:dd:27:
         d0:14:1d:49:ec:d0:4b:05:26:0e:4c:cc:a3:a6:53:0c:8b:aa:
         4b:6e:42:14:f7:d9:21:66:a1:fa:3b:2d:d5:44:61:d6:00:61:
         6f:1a:23:75:4a:b2:63:7e:2a:86:9b:d6:48:67:1a:25:1e:3a:
         41:5d:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org