Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0a38ab3-50fe-38b6-bcc0-c969564ee2dd.roa
File:                     a0a38ab3-50fe-38b6-bcc0-c969564ee2dd.roa (raw, json)
Hash identifier:          ogb8OUfJO+Y8bDy4cgSBdlcTh8szLnxkqMyAz31QpxY=
Subject key identifier:   AF:69:18:70:EE:A1:33:89:02:7F:A5:B3:DE:81:9E:70:AB:86:ED:20
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B4AF4EE4FB144053C7800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0a38ab3-50fe-38b6-bcc0-c969564ee2dd.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:4a:f4:ee:4f:b1:44:05:3c:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9f026b6a-9373-447b-a3f0-bc8280778323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:ee:f7:de:17:4b:ff:7a:c2:3c:9f:18:fd:
                    79:a0:10:56:7b:01:93:69:dd:00:a8:54:6e:de:e6:
                    b2:40:c0:45:fd:c7:9e:57:6c:b1:c2:72:b8:70:73:
                    0c:3a:72:70:2a:f1:b9:1c:d1:f3:ac:f8:a3:1c:d2:
                    d5:60:7b:f5:79:1c:26:05:38:f6:0c:dd:f3:86:bd:
                    43:d2:5f:0b:8a:2d:cc:20:6c:d6:e4:7e:6f:f7:10:
                    9c:a8:9a:f4:e1:d0:0b:e8:8a:75:eb:a2:c6:42:92:
                    f4:bf:4e:2f:41:df:33:c0:63:6c:93:13:e7:77:00:
                    cf:0f:a3:52:bb:5e:cb:3c:3e:01:1a:be:81:56:be:
                    fc:6d:38:48:f3:9f:3f:40:3f:ae:21:ed:ea:41:d9:
                    85:52:30:41:b7:fc:51:93:d4:f7:1d:8c:68:fe:d3:
                    32:1e:da:82:74:f3:07:43:93:8c:33:f6:31:c1:ef:
                    2e:4c:ab:7d:0f:1c:91:a6:0e:c8:ed:f4:40:02:c8:
                    41:19:40:8c:32:f8:7c:96:1f:62:d2:86:cc:54:63:
                    a9:d7:23:c3:31:0f:f5:3c:da:48:e7:21:c7:b5:3d:
                    12:86:4c:c0:0b:7d:b9:6e:02:c1:8f:fb:68:b8:e6:
                    bb:c5:71:59:f1:0c:c0:5e:4f:35:7a:5e:ee:87:39:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:18:70:EE:A1:33:89:02:7F:A5:B3:DE:81:9E:70:AB:86:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a0a38ab3-50fe-38b6-bcc0-c969564ee2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:bf:31:6b:37:a0:e7:53:af:45:f3:de:a5:04:7d:18:0a:
         dc:44:7b:7b:5e:b3:bd:bd:c9:7a:00:37:25:a4:d9:8d:26:a4:
         40:25:ed:a1:e5:05:76:d2:d6:7b:6c:27:b4:94:a9:08:95:67:
         2c:c3:32:5f:99:65:e2:fa:dd:e8:52:7c:91:5d:54:3b:b5:9b:
         a3:13:6a:ec:f5:da:52:e4:59:eb:4a:28:82:7e:ec:7d:78:97:
         68:33:be:49:1d:ec:61:f9:37:f4:be:d7:81:62:e8:90:15:e7:
         5e:8d:55:60:c6:76:a4:71:98:4e:a0:5f:69:12:ab:7c:3d:e6:
         66:7e:d2:01:de:be:e7:18:bd:09:9f:9c:dd:22:56:bd:e9:ee:
         51:ba:1b:09:78:cc:97:5d:dc:d7:66:e2:13:93:92:a4:d3:61:
         2c:cb:1d:6e:75:df:ab:33:bc:a0:3c:86:4c:13:b1:36:90:59:
         07:d5:82:90:45:59:1d:d4:3f:12:9b:ef:65:9d:ee:35:87:ac:
         88:fb:c4:12:c1:6e:85:d4:83:02:a7:c9:07:b0:15:30:42:12:
         ed:52:72:d8:65:b8:61:8e:ba:a8:89:ae:c2:57:36:53:39:fe:
         eb:89:3e:e3:30:7c:72:d3:9f:12:a4:2e:b1:c2:5e:e2:81:7e:
         58:03:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:54 2024 by rpki-client on console-fra.rpki-client.org