Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad0a93d6-475c-35e3-bad2-9ce680ac0d6a.roa
File:                     ad0a93d6-475c-35e3-bad2-9ce680ac0d6a.roa (raw, json)
Hash identifier:          dMbUBF4RxDwThzHkthVtYDeqB8oYsNZymYUbotLzwpQ=
Subject key identifier:   4C:38:3A:4F:91:D1:C9:B5:39:9D:F9:23:83:A7:83:A5:1E:01:52:60
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584546237D7F9683621FD2418100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad0a93d6-475c-35e3-bad2-9ce680ac0d6a.roa
Signing time:             Wed 20 Mar 2024 20:44:10 +0000
ROA not before:           Wed 20 Mar 2024 20:44:10 +0000
ROA not after:            Tue 18 Jun 2024 20:44:10 +0000
asID:                     36492
IP address blocks:        136.22.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:7d:7f:96:83:62:1f:d2:41:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:44:10 2024 GMT
            Not After : Jun 18 20:44:10 2024 GMT
        Subject: CN=9c115b95-62cb-41ab-a7ff-aab7efb3a086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:a1:d5:7f:99:fb:9d:38:53:76:0a:40:cd:
                    15:0d:d5:50:a1:28:05:85:62:de:94:54:b0:06:f0:
                    7f:ba:21:8b:34:68:9c:93:d1:9e:ed:0a:4e:5e:3b:
                    73:28:ef:38:59:6d:e4:55:d8:82:20:21:8f:a8:98:
                    9e:d4:6a:40:5f:6a:15:07:6e:fe:dd:59:c4:c0:f9:
                    df:d9:d5:7a:8b:fd:66:bb:64:a7:25:d7:75:3b:e5:
                    23:76:e6:24:b1:e3:39:42:d9:5a:49:1f:e9:08:14:
                    fe:df:8e:da:4c:1f:0d:ae:c6:53:10:77:f5:59:2b:
                    d6:7f:65:78:72:c5:af:8e:85:28:e2:93:46:93:26:
                    ca:4b:86:85:61:23:d8:4e:47:f6:b0:57:d9:98:dc:
                    16:a8:f7:86:1c:98:9c:a9:e4:8d:6d:42:e8:fd:48:
                    7a:69:ab:c2:3d:61:47:77:0b:87:6c:18:7d:a1:37:
                    7b:30:ea:45:36:68:3e:7c:bf:2b:ac:ea:a6:7f:c1:
                    49:3e:2f:b8:cd:6f:f9:d5:7a:57:8a:b5:69:18:90:
                    5e:30:ed:41:80:72:82:ca:69:a5:60:2c:86:87:0c:
                    39:92:b2:1a:8a:26:1f:47:fc:58:ce:3d:c9:75:1b:
                    50:64:8e:7a:31:ab:94:e1:e1:f3:a9:37:f3:27:24:
                    33:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:3A:4F:91:D1:C9:B5:39:9D:F9:23:83:A7:83:A5:1E:01:52:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ad0a93d6-475c-35e3-bad2-9ce680ac0d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:02:70:d0:9d:3a:45:3c:0f:27:90:2c:e5:a2:59:db:93:9a:
         5f:04:dc:d7:82:eb:f9:04:d6:4a:ae:68:8b:af:15:d4:5d:88:
         05:a2:86:da:f4:88:d1:11:36:69:83:1c:03:4c:a5:bb:b0:e3:
         2c:13:28:20:be:3e:dd:d4:34:43:9b:cc:a9:71:f4:c1:85:bd:
         85:37:d2:76:2e:7c:a2:6c:f4:85:b9:f7:8e:59:51:26:92:3c:
         a6:00:02:32:e8:1b:b8:f5:f7:49:6a:9b:cf:35:2a:ee:f5:9e:
         4a:cc:33:d3:3f:3e:91:a9:a7:df:a7:23:1b:15:74:de:71:0e:
         27:62:d3:6f:01:e4:c4:3c:03:af:f1:ad:ec:77:56:f0:b3:52:
         b7:04:ff:55:28:56:6b:b4:a6:26:ba:bd:50:e9:65:37:d7:6f:
         dc:4a:bb:31:72:a3:86:56:ea:38:1b:7e:d6:8b:15:b8:8d:7b:
         9d:34:4e:f2:df:26:39:ce:57:2b:ab:b6:e1:ad:0f:cd:2c:14:
         b3:59:c2:8e:b1:c2:a4:7d:93:71:9f:7f:f3:ac:e2:8d:07:38:
         ce:e8:19:55:44:be:1a:29:d4:69:92:f1:d2:64:81:e3:f9:4f:
         cb:72:41:ab:e8:c1:83:7e:56:3e:51:3c:d7:fc:7e:ce:d9:f1:
         7d:e9:b6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:56 2024 by rpki-client on console-ams.rpki-client.org