Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa
File:                     b12d692f-f0ca-3180-8f64-68af10c175d1.roa (raw, json)
Hash identifier:          FIhTk3joXtUv42NsKnjJhkTDkxy+tctwLn7nl5wN1F0=
Subject key identifier:   F6:D0:A9:7D:15:E4:02:1F:41:AE:3B:5E:32:74:0B:6D:CD:B9:E2:2B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540BB9FF82A11C4D9ED6CBA80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa
Signing time:             Mon 18 Mar 2024 22:15:51 +0000
ROA not before:           Mon 18 Mar 2024 22:15:51 +0000
ROA not after:            Sun 16 Jun 2024 22:15:51 +0000
asID:                     36492
IP address blocks:        136.22.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bb:9f:f8:2a:11:c4:d9:ed:6c:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:15:51 2024 GMT
            Not After : Jun 16 22:15:51 2024 GMT
        Subject: CN=bd35535c-cc91-4b53-8684-7b991d089579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:08:d5:43:cd:21:f2:28:94:bd:70:ed:2d:
                    dc:41:25:1b:ae:8a:5a:51:f0:af:81:3f:38:8c:e7:
                    c7:47:b6:43:56:c4:60:f5:a2:49:ea:43:45:ae:a2:
                    ef:46:7b:19:c4:df:b5:b9:ce:d7:c4:6f:a2:1e:4d:
                    f0:82:a9:5f:ae:36:a3:b8:3f:6c:22:49:22:02:fc:
                    35:c5:e5:d1:14:f4:4d:74:2b:17:bf:97:f0:30:c1:
                    54:d8:b1:0c:9a:c6:33:81:28:11:19:dd:cc:e3:69:
                    53:35:21:37:14:5c:89:33:8c:b5:28:7b:d2:00:fd:
                    92:cc:59:0f:10:4b:e5:c1:36:ac:f7:ac:30:4e:73:
                    46:bc:91:35:08:08:16:dd:3e:74:ad:81:f3:80:a2:
                    b1:67:1d:f1:32:da:e6:7a:63:b9:5b:76:dd:8e:84:
                    c0:2a:68:cd:1c:88:a4:95:07:7c:5b:0f:fb:18:bf:
                    96:a5:c6:fc:6d:8d:0d:b7:40:e1:fb:e0:90:1b:60:
                    f1:19:fb:e4:6d:4c:ce:67:0c:c9:04:6c:38:38:e3:
                    84:44:07:84:34:3d:01:34:0f:89:c1:5b:cc:4d:05:
                    27:e2:b9:14:e0:3d:5b:a7:f3:33:41:c2:b5:55:d4:
                    f8:cb:40:58:85:ea:90:ab:28:eb:dd:9a:24:ea:4d:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D0:A9:7D:15:E4:02:1F:41:AE:3B:5E:32:74:0B:6D:CD:B9:E2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:37:84:07:0b:f2:65:40:63:4e:00:3c:7b:3d:6d:0f:bb:
         5a:55:5b:78:19:7e:26:f2:ce:e1:56:93:be:18:b4:7f:f8:c6:
         4e:12:2e:08:41:79:51:94:02:52:70:3a:b5:6b:7f:34:00:fe:
         38:96:ac:b5:94:a1:ea:4f:a5:3c:b9:cd:ac:18:1b:63:22:40:
         9a:9d:57:16:87:9c:2d:4c:48:4b:92:a8:20:64:5a:c8:17:ab:
         86:78:32:9b:b7:02:62:dc:32:8c:64:9b:8e:17:9b:70:00:b3:
         b2:07:63:48:98:41:9c:58:99:97:05:9b:75:7c:8a:cc:f3:bf:
         a6:27:44:73:5c:ce:6e:f6:46:b9:7b:bd:8c:48:92:d9:24:17:
         b5:1c:82:f8:4a:ca:2d:32:7d:2a:bb:f2:62:49:93:d9:81:39:
         a5:ad:fa:e6:46:35:00:81:a8:69:42:3b:6e:9c:97:ea:75:de:
         4f:b0:75:24:7e:03:3c:2e:97:d2:d1:81:d5:ba:44:17:e0:90:
         92:e0:6c:84:a5:02:13:6d:9c:3f:ad:a2:31:96:6a:c0:be:45:
         7e:97:95:3f:53:84:fd:a1:49:5b:d7:bb:a0:a3:66:1e:2c:a6:
         c4:f6:b2:25:55:e2:d6:29:58:d9:c5:5d:8e:12:f9:c1:86:69:
         36:9d:ac:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAu5/4KhHE2e1suoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMxODIyMTU1MVoXDTI0MDYxNjIyMTU1MVowLzEtMCsGA1UEAxMk
YmQzNTUzNWMtY2M5MS00YjUzLTg2ODQtN2I5OTFkMDg5NTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe4I1UPNIfIolL1w7S3cQSUbropaUfCvgT84
jOfHR7ZDVsRg9aJJ6kNFrqLvRnsZxN+1uc7XxG+iHk3wgqlfrjajuD9sIkkiAvw1
xeXRFPRNdCsXv5fwMMFU2LEMmsYzgSgRGd3M42lTNSE3FFyJM4y1KHvSAP2SzFkP
EEvlwTas96wwTnNGvJE1CAgW3T50rYHzgKKxZx3xMtrmemO5W3bdjoTAKmjNHIik
lQd8Ww/7GL+Wpcb8bY0Nt0Dh++CQG2DxGfvkbUzOZwzJBGw4OOOERAeEND0BNA+J
wVvMTQUn4rkU4D1bp/MzQcK1VdT4y0BYheqQqyjr3Zok6k1yAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbQqX0V5AIfQa47XjJ0C23NueIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjEyZDY5MmYtZjBjYS0z
MTgwLThmNjQtNjhhZjEwYzE3NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuwN4QHC/JlQGNOADx7PW0Pu1pVW3gZfibyzuFWk74YtH/4xk4SLghB
eVGUAlJwOrVrfzQA/jiWrLWUoepPpTy5zawYG2MiQJqdVxaHnC1MSEuSqCBkWsgX
q4Z4Mpu3AmLcMoxkm44Xm3AAs7IHY0iYQZxYmZcFm3V8iszzv6YnRHNczm72Rrl7
vYxIktkkF7UcgvhKyi0yfSq78mJJk9mBOaWt+uZGNQCBqGlCO26cl+p13k+wdSR+
Azwul9LRgdW6RBfgkJLgbISlAhNtnD+tojGWasC+RX6XlT9ThP2hSVvXu6CjZh4s
psT2siVV4tYpWNnFXY4S+cGGaTadrOA=
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:48 2024 by rpki-client on console-fra.rpki-client.org