Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa
File:                     b2073852-2c85-39c7-bece-da234b549592.roa (raw, json)
Hash identifier:          MJKXBQ5D4MUCzGaMlDGyvvOHsFoy6634i3rHy3ElsxM=
Subject key identifier:   B1:BE:AD:41:D8:4E:0F:38:5E:75:F4:50:16:2D:6F:FE:2A:B6:60:85
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094F7F9B5271FBD0E8E8B60
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f7:f9:b5:27:1f:bd:0e:8e:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=5a4691f2-c16b-49e3-9f7b-26353f648ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:f9:0d:a9:4a:d1:b3:6b:8c:63:d2:84:c9:
                    35:00:58:61:91:ee:62:2c:52:5e:bb:ea:f2:2f:27:
                    85:8a:1e:9d:d4:1a:f3:46:32:77:d6:9c:58:ef:85:
                    39:ec:6b:ce:84:5c:c9:07:35:40:da:45:26:9b:b4:
                    6f:c7:d1:a1:79:64:9a:41:85:9e:3a:49:26:87:d6:
                    9f:be:e6:74:ed:de:48:71:64:4f:cd:12:c3:33:7e:
                    af:5f:73:47:de:45:2f:f5:e4:90:1e:fe:fc:05:1f:
                    1f:86:99:a5:a4:ce:0f:7c:a8:ed:13:ba:44:d0:22:
                    2d:7e:9d:af:d5:d6:bd:59:f0:36:9b:f4:2a:49:6b:
                    13:7e:90:c6:52:4e:33:47:61:c1:85:16:5b:37:5a:
                    34:c5:ae:70:6d:20:e3:aa:02:67:81:d1:40:13:4c:
                    c8:f1:32:b7:d8:6b:ab:af:62:b5:3d:28:99:e9:61:
                    02:52:7c:5e:5f:a9:06:ce:35:8e:02:1d:d8:e5:7d:
                    3c:4a:9d:ae:4c:29:f9:24:e3:68:de:4c:4f:b4:3e:
                    2a:81:2b:10:e9:1b:01:3d:0b:26:79:90:37:44:3f:
                    93:13:fe:2f:d5:f8:5e:ec:e8:1a:59:6d:0b:a1:91:
                    1a:c2:c7:9f:3c:9b:e0:2c:e8:64:9f:05:26:f6:48:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BE:AD:41:D8:4E:0F:38:5E:75:F4:50:16:2D:6F:FE:2A:B6:60:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2073852-2c85-39c7-bece-da234b549592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6a:39:3d:73:dc:e3:35:cf:89:f5:2e:1f:0b:92:e8:2c:c1:
         40:82:2b:d3:17:f3:6e:2c:ba:0b:75:a2:0c:95:aa:3c:5a:8c:
         d9:22:5f:ae:38:95:e5:35:44:52:72:3c:cf:e3:49:db:c3:2d:
         6f:93:38:21:12:80:aa:37:98:ea:b7:cd:89:cd:73:10:41:51:
         43:a8:17:61:1d:61:25:44:d9:cc:cd:c0:47:ac:5c:08:3f:7f:
         41:58:95:7c:4a:6e:e2:87:b2:38:7f:b5:ae:b2:f9:6d:ad:9d:
         80:6d:35:03:90:e7:1e:8a:8e:07:8d:5a:a0:7d:0d:f5:ba:f9:
         e9:ab:ee:29:a5:a3:1a:42:06:3d:d4:d7:e6:b8:38:45:e3:c3:
         53:62:2e:ca:e5:d3:7e:34:f8:4c:87:37:e6:d8:13:73:5a:29:
         43:fe:ba:e7:5b:db:47:b5:40:99:92:ae:e3:a9:13:15:49:77:
         a9:f0:3f:c5:2c:2a:9b:e3:3c:f3:cb:93:54:16:8f:5a:40:ac:
         49:51:8d:63:29:65:1d:b0:19:fd:8d:67:d5:75:18:6f:ad:49:
         97:16:b3:b9:c3:bb:c2:78:7e:d1:e7:95:98:a0:bf:8f:38:91:
         af:53:c6:78:b1:07:8f:3b:19:72:4b:23:af:44:7f:67:dc:31:
         1b:46:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:55 2024 by rpki-client on console-fra.rpki-client.org