Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa
File:                     92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa (raw, json)
Hash identifier:          8tuow2DzH/SXXTdBYVOH6UoMIy2sfxZiClk4JjQatVY=
Subject key identifier:   69:B3:3A:16:99:04:8C:83:17:F1:0A:82:17:42:59:6A:D6:8E:70:B6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62AA732132802617949A500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a7:32:13:28:02:61:79:49:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=afed0ed8-4d14-40c5-814b-c54effe477e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:21:28:91:1f:c7:1b:8a:e9:9d:b2:e4:b9:
                    93:0c:f7:69:6c:d7:9d:25:7a:be:18:4b:49:7c:87:
                    ce:b7:fd:a1:2a:11:a7:06:12:e4:0e:df:4a:90:54:
                    89:cb:9d:39:44:4d:c0:dc:79:29:22:7e:6c:7f:43:
                    e2:cf:a9:59:79:e6:b8:1a:ed:ee:79:6e:e9:1c:cb:
                    e2:99:fa:24:2f:9f:3f:71:f2:3c:24:18:b6:18:f2:
                    a3:71:ec:b9:18:50:f1:13:89:e6:fa:74:9e:ef:af:
                    d6:9f:d2:e4:1d:d2:b0:20:4c:84:55:76:52:7a:2d:
                    a7:57:28:94:9f:0a:f7:a3:55:ab:9c:85:79:f0:f1:
                    82:8c:e4:a3:c3:24:18:9d:f6:32:04:4b:15:8d:11:
                    2b:7f:68:2f:1e:46:9b:89:6a:f1:32:b4:d7:7d:30:
                    e8:6c:b7:dc:cd:0d:1f:67:95:7c:74:b4:ad:62:22:
                    89:6d:8d:92:07:bd:cd:fb:22:b4:fd:a9:35:de:2a:
                    67:7a:a7:17:36:03:1b:ae:c9:ed:8f:ff:4f:fe:b7:
                    2a:11:96:1d:5b:82:20:f9:d0:81:98:28:7d:fc:22:
                    08:53:fd:02:ed:60:0e:56:39:e4:d6:39:22:c9:22:
                    76:ec:af:20:2f:bc:bc:51:8c:f1:a2:aa:b3:64:13:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:3A:16:99:04:8C:83:17:F1:0A:82:17:42:59:6A:D6:8E:70:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:70:54:6f:d7:17:59:38:8c:67:6a:82:ab:d5:2b:da:16:bf:
         bc:81:2a:1d:5c:d5:e9:59:aa:f0:4c:93:83:c0:e5:61:82:5e:
         be:ad:a0:e0:1a:a4:01:93:7f:3d:fe:c3:48:3a:86:c2:0c:44:
         8e:2e:26:11:ae:e9:15:60:02:2e:e1:48:d8:aa:5e:d1:a9:b3:
         57:31:2f:bf:e0:9a:76:68:22:c3:94:fc:dd:78:42:bb:9d:e9:
         2f:e2:ed:e5:04:ea:40:22:d0:d6:a2:03:90:74:10:80:9f:32:
         03:ab:26:cb:d3:4b:42:60:84:84:2e:0b:36:96:45:9c:e5:7a:
         50:d9:f4:6a:bc:fb:2b:aa:de:ab:7a:30:e7:e2:aa:86:03:05:
         a9:20:0c:dc:01:29:eb:98:1c:18:8c:9b:61:de:c1:c3:6b:c9:
         57:92:94:c1:75:89:00:23:3e:e8:2d:52:5a:fb:62:20:19:04:
         a0:9b:eb:1f:bd:2a:e4:3f:c2:ff:bc:11:3f:22:7d:cb:c3:5c:
         d2:45:fb:e9:7b:cf:34:40:ff:0a:ef:5c:f2:be:ad:01:80:bb:
         a3:80:e2:3e:81:6c:e6:6a:35:73:39:f1:11:96:6e:17:4f:f4:
         82:2f:fd:ef:c7:93:75:97:1b:18:f4:3d:cb:02:f4:26:a5:68:
         f0:8b:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org