Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
File:                     8d27695a-73c7-3751-bc92-207e66c57da9.roa (raw, json)
Hash identifier:          kYiVRCdb6tTpv0HYB0xDvdaV5YmvwgqT9bgcg1JZ2aw=
Subject key identifier:   E9:62:3A:55:EF:68:19:90:34:9D:AF:CC:D0:F2:BF:E0:20:26:D0:2D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454625BB8152FD4CFD329AA680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
Signing time:             Wed 20 Mar 2024 20:48:41 +0000
ROA not before:           Wed 20 Mar 2024 20:48:41 +0000
ROA not after:            Tue 18 Jun 2024 20:48:41 +0000
asID:                     36492
IP address blocks:        136.22.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:bb:81:52:fd:4c:fd:32:9a:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:48:41 2024 GMT
            Not After : Jun 18 20:48:41 2024 GMT
        Subject: CN=f632e824-0ca5-48d5-8388-2725d43fac97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:cb:7b:75:74:41:76:ff:02:6c:35:40:0c:
                    e8:fc:51:4a:59:96:65:7c:9f:65:16:72:05:3b:b0:
                    20:b1:0c:5c:69:b3:7f:59:62:e4:31:83:3b:0a:4b:
                    fe:18:01:97:45:03:68:7c:d4:41:6c:e7:09:9e:19:
                    0c:36:9b:ff:8a:28:20:e4:61:f7:59:61:cf:e5:ba:
                    ee:df:1a:ae:8d:92:95:80:71:da:d9:22:af:76:df:
                    fd:a9:ce:65:ad:5b:fa:eb:ef:56:50:5b:df:ec:cb:
                    f5:50:84:de:c0:3e:42:43:95:c3:63:d1:7b:66:32:
                    2c:63:23:c8:65:35:a8:59:4d:fd:a3:5b:52:d1:d2:
                    70:94:7f:a8:ac:d3:ae:c9:bc:aa:39:8d:b5:e3:97:
                    9d:42:2b:21:2f:87:d1:38:d1:e5:93:f3:82:41:54:
                    ba:f5:6e:9b:04:ce:e8:42:7f:60:7d:6d:e2:d2:29:
                    9e:dd:a8:66:d1:e1:0f:f1:99:9f:d8:4f:06:80:38:
                    d1:f6:e5:a0:7b:25:55:36:2f:d4:a5:be:15:7a:5d:
                    e5:60:b6:1e:5f:6f:ba:d5:08:be:bf:a0:f3:8e:3c:
                    e1:8e:5a:09:9e:10:25:3e:83:a5:12:e7:75:4c:f8:
                    66:be:0d:93:4e:68:fc:7a:70:9a:bb:20:04:be:1c:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:3A:55:EF:68:19:90:34:9D:AF:CC:D0:F2:BF:E0:20:26:D0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:83:63:0e:41:9f:2c:86:ac:ed:1b:a7:fb:73:15:76:9f:44:
         d2:29:fe:33:d7:22:d9:4a:28:92:55:85:ff:70:ad:60:87:db:
         d3:08:c1:01:a7:3c:c5:f6:ca:c4:b5:60:89:55:d2:e8:6d:a4:
         70:e1:6d:16:cd:ea:cd:04:95:63:7b:b5:b3:18:98:4d:f9:00:
         ab:19:8c:0c:6e:ef:26:74:1f:ab:55:32:38:ba:10:ee:2f:82:
         c9:28:1f:04:60:ed:d0:a4:73:1d:0c:0b:5c:1a:e3:2c:b6:2c:
         1f:6e:45:e4:de:7f:70:11:d0:5d:39:a4:0b:e1:7a:b1:5d:61:
         f7:a6:19:17:03:33:48:8d:05:87:bb:b8:d0:8e:e5:2f:bb:6d:
         33:22:8c:6b:c9:ff:67:2c:0b:34:b9:cb:e1:d6:b9:a7:df:1d:
         09:de:fb:1c:70:f6:2c:e1:c0:65:7e:dd:64:43:55:63:23:6c:
         bc:88:6e:8e:27:9b:4b:da:94:39:e8:73:98:49:2f:4f:ed:1e:
         1d:86:f8:8d:a2:7f:2d:3b:74:d7:eb:4c:97:73:40:fd:ed:67:
         d7:1d:ef:79:87:79:e9:7b:2d:3c:a8:a3:16:9e:4a:41:d9:e5:
         26:f3:f5:fa:e8:1c:d0:33:77:9c:05:e9:72:27:1f:d2:31:7f:
         66:b2:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:19 2024 by rpki-client on console-fra.rpki-client.org