Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa
File:                     91551183-9e42-3cc2-a757-dc28c939803d.roa (raw, json)
Hash identifier:          uyXS9vxkQxCebNMTAp8ddKUE1qLS1cnAHxpCas/VzMc=
Subject key identifier:   91:1F:12:CB:1B:05:C0:03:ED:8B:E4:B0:E0:50:63:26:6E:64:4F:AE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462326AB488A60601EC0A000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa
Signing time:             Wed 20 Mar 2024 20:43:29 +0000
ROA not before:           Wed 20 Mar 2024 20:43:29 +0000
ROA not after:            Tue 18 Jun 2024 20:43:29 +0000
asID:                     36492
IP address blocks:        136.22.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:26:ab:48:8a:60:60:1e:c0:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:43:29 2024 GMT
            Not After : Jun 18 20:43:29 2024 GMT
        Subject: CN=2f2aff0c-9bdc-451e-9053-7ed13e0ce4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:53:8d:03:07:f5:48:c9:fc:a4:2f:2b:f8:
                    e5:a7:01:e7:b9:40:c5:17:f2:68:67:9e:95:d3:46:
                    5b:9c:ba:d5:42:21:82:8f:72:ba:93:1d:ab:78:a5:
                    1c:b1:53:07:af:88:de:4b:11:3d:24:18:92:38:da:
                    8a:28:d3:2c:a2:0f:19:77:f8:53:46:87:4f:0a:8f:
                    9f:86:e0:a7:8a:4f:6b:62:49:a6:2a:fe:5d:01:0e:
                    f1:c1:e0:68:d4:7a:05:b2:3a:43:2d:10:77:d9:09:
                    60:c0:98:ce:c7:f9:30:21:a5:43:64:f0:fa:02:e5:
                    09:3e:de:03:a9:d9:89:3f:2f:1f:2f:bc:fd:dd:7b:
                    9c:46:10:c9:d5:11:99:69:04:d8:7e:2c:c6:97:f1:
                    03:ef:be:23:1f:44:79:b4:19:13:f3:c9:10:7f:4d:
                    0a:3a:a8:6d:b4:16:81:be:22:9a:01:a9:48:84:b7:
                    6c:b2:f5:ad:4b:76:43:90:d5:31:2d:f2:63:fd:53:
                    65:fc:98:2c:38:55:25:68:5a:85:58:b0:ad:f1:2c:
                    bb:1b:1d:ce:6c:2e:88:2e:0b:48:ed:7e:bf:5b:bd:
                    7d:c5:10:8e:0f:81:62:67:d7:aa:ab:60:5c:16:a3:
                    bc:67:a1:aa:e3:29:68:3a:80:67:f0:a8:85:6a:b2:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1F:12:CB:1B:05:C0:03:ED:8B:E4:B0:E0:50:63:26:6E:64:4F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/91551183-9e42-3cc2-a757-dc28c939803d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ce:f1:b5:f1:90:b3:98:35:06:13:51:5a:c8:83:86:05:43:
         fe:40:4a:17:ae:90:a4:81:bf:85:93:8c:47:9e:17:e2:b1:36:
         a2:21:50:78:e7:68:61:36:0c:e2:81:15:26:16:de:e0:91:1f:
         c3:c7:b2:11:ad:10:6b:e8:f3:b8:f9:ef:bb:b7:4b:37:74:26:
         d2:f4:e2:d2:9f:59:30:85:0c:d0:a4:a4:37:e7:f4:db:b3:22:
         b5:6d:68:e5:8d:bd:d5:82:9a:c9:f8:6c:ee:70:f0:ff:77:8d:
         b4:45:f4:c0:c9:53:6a:87:25:f9:96:bf:2c:f7:8c:34:27:88:
         ee:33:bb:dc:62:33:f1:26:8d:44:87:20:89:9e:90:ea:d2:ee:
         41:6b:dd:6d:a1:e9:91:0c:ab:ef:87:a8:8f:49:9d:24:ea:04:
         07:b0:c6:00:3e:e9:df:4e:33:a9:c0:e3:89:d2:fe:83:a9:9d:
         5f:e8:6e:82:81:8c:61:62:b2:6a:3c:c7:8d:c5:93:64:42:fd:
         ca:6e:4a:81:50:d6:47:ea:ef:bd:36:35:f3:85:19:a0:31:c4:
         1a:c0:cc:a1:a5:b4:4f:03:19:52:b0:80:f1:6c:b5:5f:c5:70:
         e0:13:a3:4f:7f:f3:4c:2d:fe:5f:9e:04:61:f3:40:43:a7:97:
         fb:bb:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:48 2024 by rpki-client on console-fra.rpki-client.org