Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b7f75ee4-ff6a-3553-b47a-e382514ce109.roa
File:                     b7f75ee4-ff6a-3553-b47a-e382514ce109.roa (raw, json)
Hash identifier:          oTGUVh9KObGgGP8XEV/rJ6qWVvqXNQpCC8B0esiGzYI=
Subject key identifier:   E2:1C:02:32:26:4A:33:50:63:7F:A2:25:5A:DF:91:08:48:9F:CA:E9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462786CB3EDCB73263784300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b7f75ee4-ff6a-3553-b47a-e382514ce109.roa
Signing time:             Wed 20 Mar 2024 20:52:18 +0000
ROA not before:           Wed 20 Mar 2024 20:52:18 +0000
ROA not after:            Tue 18 Jun 2024 20:52:18 +0000
asID:                     36492
IP address blocks:        136.22.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:86:cb:3e:dc:b7:32:63:78:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:52:18 2024 GMT
            Not After : Jun 18 20:52:18 2024 GMT
        Subject: CN=ce826e6b-02d1-4ffd-807f-dd40f6aa2d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:0c:0c:1b:a6:52:40:d0:f0:da:96:db:6f:
                    9c:36:77:58:e2:33:ec:00:53:a7:ea:3d:fe:56:3f:
                    88:43:fb:db:2b:01:65:0f:af:ad:8c:7d:cb:27:89:
                    1b:c7:f1:7c:26:c6:3b:d9:6d:f9:02:f8:52:5a:ed:
                    c3:a5:bf:09:c1:9f:f2:ec:db:7c:99:7b:54:8b:b6:
                    38:b1:bb:0f:c7:40:43:77:21:e8:37:c0:14:35:c4:
                    41:6b:ee:cd:a2:b4:76:cf:48:4e:ca:85:2b:17:12:
                    34:a5:56:7d:0c:2a:18:c5:b5:74:ca:e0:fa:6d:ff:
                    2c:31:8f:a2:a2:d4:49:bd:5a:d3:ee:72:3d:70:e7:
                    9f:c5:8c:35:67:58:be:77:28:6a:1b:79:d9:aa:01:
                    00:c1:d4:9b:d8:77:2d:77:4a:de:9d:15:3f:6e:06:
                    68:8e:87:6e:44:72:21:97:5d:40:21:ba:7a:52:a3:
                    f4:8e:01:91:81:75:bd:70:2f:34:d1:99:ce:11:48:
                    92:f6:26:b4:5c:9a:e0:5e:2a:d8:e8:a3:70:74:8d:
                    19:76:12:b6:8c:08:a2:37:e2:9a:05:d0:13:32:2e:
                    53:16:18:95:8b:6d:3c:08:6f:61:83:b6:73:ea:90:
                    37:06:b8:dc:b8:91:21:5d:84:7b:70:04:2a:89:79:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:02:32:26:4A:33:50:63:7F:A2:25:5A:DF:91:08:48:9F:CA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b7f75ee4-ff6a-3553-b47a-e382514ce109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:d5:4e:8d:69:eb:9d:42:e7:c9:d0:81:b1:c3:62:79:59:
         eb:54:8d:07:e3:ff:1b:78:cf:bc:ef:ff:15:92:55:6f:da:9f:
         c5:1d:5f:a5:3e:f2:eb:9f:b1:62:f1:a1:2b:fe:09:96:ba:19:
         d0:df:32:c8:39:3a:d4:ae:31:c7:7e:09:a3:9d:1e:de:00:67:
         62:76:6b:b0:58:6b:d9:6b:2e:02:0a:d1:6c:b6:05:18:8e:a2:
         11:74:c0:34:5f:fd:17:d7:ef:b3:b7:8d:06:71:4b:db:a6:db:
         5d:34:30:9b:a4:84:8e:22:80:07:8e:cb:dc:3d:c2:64:0b:b2:
         3d:92:9c:0d:9e:62:ea:a1:9f:ee:4a:92:a2:84:ab:84:b7:94:
         9b:37:2a:d3:74:15:6f:b8:fd:5b:8c:b5:e5:50:01:82:21:fa:
         42:51:db:9b:43:e6:6e:d8:b6:da:22:bf:fd:fc:42:59:bb:63:
         61:83:a2:c7:8f:ff:97:c5:a5:66:04:cc:a2:a7:a0:cc:61:2c:
         67:1e:08:31:37:17:98:10:7f:51:e1:79:27:1b:5f:9b:16:9c:
         d3:ed:a4:61:2d:81:e9:d8:fa:13:1b:59:6b:24:eb:e8:eb:85:
         62:61:ee:0b:9c:19:5e:aa:c9:93:fe:ae:8b:8e:5e:a2:a2:85:
         b0:35:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:20 2024 by rpki-client on console-fra.rpki-client.org