Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/89741fbe-51de-3a6f-8ae3-93337d09a353.roa
File:                     89741fbe-51de-3a6f-8ae3-93337d09a353.roa (raw, json)
Hash identifier:          KqOiachs8cEaXIhj5OW/u0bmpX8rfyWVZbrz8FJ9r7A=
Subject key identifier:   FF:D9:B2:6C:A0:08:7E:06:01:2A:4F:02:30:C6:38:F4:D7:89:CE:F2
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B8292635EDF6A6C6A05600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/89741fbe-51de-3a6f-8ae3-93337d09a353.roa
Signing time:             Mon 18 Mar 2024 22:08:52 +0000
ROA not before:           Mon 18 Mar 2024 22:08:52 +0000
ROA not after:            Sun 16 Jun 2024 22:08:52 +0000
asID:                     36492
IP address blocks:        136.22.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:29:26:35:ed:f6:a6:c6:a0:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:08:52 2024 GMT
            Not After : Jun 16 22:08:52 2024 GMT
        Subject: CN=ca8665a5-d8b9-427e-9330-133007b1ff51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:4d:01:49:04:d4:63:8f:cf:f7:a8:d2:2f:
                    e3:ec:79:dc:c7:8d:59:2d:a2:9f:f7:0c:80:95:9b:
                    df:c9:92:12:a2:b4:ca:9e:6f:67:55:ea:28:d9:56:
                    62:a0:a0:7e:6b:09:80:60:df:1f:6f:14:03:f2:30:
                    a8:ea:00:39:c9:dc:8d:7e:45:da:9e:3f:14:58:e7:
                    aa:39:ef:8d:6e:c5:92:26:89:38:ec:76:a9:d8:ca:
                    fb:c9:ee:1e:3d:24:03:eb:a9:a8:70:0d:51:bc:84:
                    bc:68:de:20:f7:53:3b:15:d8:e0:91:e5:71:a6:b9:
                    32:dc:b8:e2:01:fe:91:4d:5f:a3:58:5b:8e:91:78:
                    db:1e:6b:7c:41:a2:0a:b5:b9:5c:5e:b9:e8:d7:ad:
                    b3:0a:5e:45:41:9d:0b:e9:ba:26:d8:43:20:d6:10:
                    37:51:6a:75:e4:a6:20:33:c0:3f:bb:cb:17:a1:ce:
                    0e:ce:97:5b:ba:68:63:cb:18:c3:98:d6:7e:51:a7:
                    04:2b:6b:13:78:e1:77:bb:19:e3:f1:31:92:0f:17:
                    2b:26:65:36:97:9f:67:cf:eb:6d:08:59:e7:32:38:
                    c8:81:82:3c:67:1d:9a:fb:3d:bf:1a:64:d8:b9:9e:
                    19:08:4e:4d:d0:c4:2d:d8:33:c1:7c:b5:d0:aa:57:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D9:B2:6C:A0:08:7E:06:01:2A:4F:02:30:C6:38:F4:D7:89:CE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/89741fbe-51de-3a6f-8ae3-93337d09a353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:25:aa:a6:2a:4b:23:b6:7e:55:87:db:f3:14:99:df:d0:29:
         81:cc:eb:32:99:5b:93:c9:3e:d8:3d:8d:ea:3c:30:74:d3:48:
         6f:38:fc:65:85:68:31:f2:12:6e:03:fe:18:01:4e:c7:1d:a1:
         84:4a:9d:a6:7e:3f:41:fa:c8:84:7c:1b:13:36:1b:6b:ce:53:
         cc:9b:6b:42:ab:d1:e8:fa:97:43:69:32:c8:b0:33:6b:2a:b2:
         ea:a7:65:0a:f4:01:65:73:80:82:7e:b4:3c:63:f9:d5:34:eb:
         3b:30:b9:db:ad:9b:38:46:0e:0f:0b:84:ba:3b:f2:0a:64:13:
         87:76:f5:27:b9:60:ca:c7:6a:bb:39:f0:8c:36:c3:29:5d:df:
         f5:3c:03:9e:cb:a9:ae:13:e8:db:d3:68:c3:f5:20:97:48:1b:
         6d:c5:a7:f0:38:dc:04:f3:32:cc:b3:30:ad:3f:1e:b0:a8:3f:
         37:4f:d3:d7:eb:27:8d:24:9c:54:cb:39:28:90:8a:af:9c:4b:
         92:49:06:db:68:a4:fa:72:97:09:bc:78:5e:53:e3:ff:9e:df:
         f6:2a:7b:04:00:4b:03:aa:28:b8:13:ae:d5:50:a2:52:46:d9:
         12:7e:92:b0:a8:55:89:4f:fb:9c:59:9b:dc:38:63:b6:7a:9f:
         97:8b:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:22 2024 by rpki-client on console-ams.rpki-client.org