Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa
File:                     b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa (raw, json)
Hash identifier:          4BImh0DIl+fse5KKTvu0PZcCLfPig6wWP3Ur8UZkOhU=
Subject key identifier:   26:11:8B:64:A9:28:0C:D4:E7:99:32:08:BD:52:35:75:BF:E8:8F:62
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B4152E2CE2508D9BBEC20
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:41:52:e2:ce:25:08:d9:bb:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9f861e69-48a1-449d-bab0-472ebbfab04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:c3:d7:1c:8e:aa:2a:9d:0f:e9:8b:5b:ab:
                    5d:b1:12:7e:09:0b:74:60:98:0e:a0:9b:b9:3e:03:
                    8f:05:e4:e9:6b:bf:81:34:ad:0b:e5:f7:93:64:89:
                    1d:3f:4f:0a:41:fc:16:66:1e:83:45:00:13:13:93:
                    c3:04:c9:5e:8c:02:8e:fb:aa:53:20:1f:7d:a0:d4:
                    2f:29:03:0b:d6:01:64:b6:fd:72:ee:44:c6:9c:24:
                    8b:af:2a:cf:19:b8:0f:56:46:df:3a:92:db:e8:ad:
                    2e:bf:a3:09:ac:d6:8e:2e:2f:6c:fe:2a:b9:23:7a:
                    76:13:c8:7f:5a:87:1b:85:84:3f:fa:81:06:76:c6:
                    74:45:0b:b2:7d:e7:0f:7f:87:15:2a:94:98:e1:2b:
                    78:b5:ad:ac:17:6d:1f:0b:3d:d8:27:ef:a3:0e:87:
                    f6:32:66:6c:0c:c7:b7:1b:86:ae:f7:f3:46:9f:77:
                    8b:a0:0e:dc:39:95:6e:eb:a4:bf:69:ed:ee:30:d8:
                    53:4a:45:ef:27:aa:07:fb:97:07:94:a1:a8:fd:6f:
                    78:81:52:3e:1b:73:eb:06:be:f7:ff:9c:b0:46:11:
                    56:98:02:1d:96:a0:f8:52:be:4b:ef:12:a0:9e:12:
                    f8:0a:16:a4:88:1d:9d:6c:8b:84:2d:09:b0:de:2c:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:8B:64:A9:28:0C:D4:E7:99:32:08:BD:52:35:75:BF:E8:8F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:4e:2f:c5:60:5a:42:c5:c8:ac:75:f3:49:55:cd:98:aa:
         4e:ef:bc:bd:f3:e9:b1:ee:08:0e:45:c4:c2:f4:bd:ca:f6:92:
         0f:86:1e:99:ec:55:b5:bb:b4:f4:31:80:4c:70:9a:74:42:4d:
         cb:25:6e:60:18:66:2a:ed:80:27:3b:db:dd:80:ae:77:4b:e2:
         30:86:f1:4f:04:ef:be:e5:5b:94:c3:b4:23:fd:6c:80:a2:6f:
         c6:44:82:ad:59:df:6b:7f:55:59:5e:44:7a:37:77:57:2e:59:
         95:2b:35:a4:01:5b:20:f6:fe:b9:e9:8c:d9:5e:20:1c:7f:c6:
         0c:15:78:b9:bc:52:c5:a3:03:76:58:94:9e:9e:c7:45:14:be:
         dc:f5:4f:ad:d1:3c:94:52:73:b5:c2:2b:68:e7:d0:4f:fa:9c:
         5b:a3:d3:25:80:0c:6e:73:1c:c3:fc:7e:8d:00:a7:d2:bd:54:
         42:ce:5f:66:41:16:36:f0:68:d4:94:b9:7b:5e:58:e1:d1:72:
         ea:65:4a:4f:1b:34:8e:47:f5:69:e6:64:34:c4:49:d8:e2:d1:
         b4:c1:04:be:ab:4e:b0:86:e8:15:8b:a2:ed:01:fe:d3:f8:cc:
         c2:05:fc:3d:9a:6e:3b:d4:91:da:cb:c8:f9:59:b9:e0:37:67:
         e0:ac:7b:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0FS4s4lCNm77CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
OWY4NjFlNjktNDhhMS00NDlkLWJhYjAtNDcyZWJiZmFiMDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqrD1xyOqiqdD+mLW6tdsRJ+CQt0YJgOoJu5
PgOPBeTpa7+BNK0L5feTZIkdP08KQfwWZh6DRQATE5PDBMlejAKO+6pTIB99oNQv
KQML1gFktv1y7kTGnCSLryrPGbgPVkbfOpLb6K0uv6MJrNaOLi9s/iq5I3p2E8h/
WocbhYQ/+oEGdsZ0RQuyfecPf4cVKpSY4St4ta2sF20fCz3YJ++jDof2MmZsDMe3
G4au9/NGn3eLoA7cOZVu66S/ae3uMNhTSkXvJ6oH+5cHlKGo/W94gVI+G3PrBr73
/5ywRhFWmAIdlqD4Ur5L7xKgnhL4ChakiB2dbIuELQmw3ix8YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYRi2SpKAzU55kyCL1SNXW/6I9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjcyMzUyYmMtNzA2My0z
OGZiLWIxZWEtODEzYmY5YmRiNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3zTi/FYFpCxcisdfNJVc2Yqk7vvL3z6bHuCA5FxML0vcr2kg+GHpns
VbW7tPQxgExwmnRCTcslbmAYZirtgCc7292ArndL4jCG8U8E777lW5TDtCP9bICi
b8ZEgq1Z32t/VVleRHo3d1cuWZUrNaQBWyD2/rnpjNleIBx/xgwVeLm8UsWjA3ZY
lJ6ex0UUvtz1T63RPJRSc7XCK2jn0E/6nFuj0yWADG5zHMP8fo0Ap9K9VELOX2ZB
FjbwaNSUuXteWOHRcuplSk8bNI5H9WnmZDTESdji0bTBBL6rTrCG6BWLou0B/tP4
zMIF/D2abjvUkdrLyPlZueA3Z+Cse24=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:49 2024 by rpki-client on console-fra.rpki-client.org