Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c0404f26-364b-3d51-ac52-b9310d51e7eb.roa
File:                     c0404f26-364b-3d51-ac52-b9310d51e7eb.roa (raw, json)
Hash identifier:          +3PEUBzDYvMk+PjnWLPjPy0W8AaWLDQ56raPh9WTldQ=
Subject key identifier:   5B:BF:E2:66:66:7A:B4:14:D5:DB:94:81:9D:02:3E:64:23:54:1C:F5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858454627147DBAF8FC4334E47500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c0404f26-364b-3d51-ac52-b9310d51e7eb.roa
Signing time:             Wed 20 Mar 2024 20:51:24 +0000
ROA not before:           Wed 20 Mar 2024 20:51:24 +0000
ROA not after:            Tue 18 Jun 2024 20:51:24 +0000
asID:                     36492
IP address blocks:        136.22.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:14:7d:ba:f8:fc:43:34:e4:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:51:24 2024 GMT
            Not After : Jun 18 20:51:24 2024 GMT
        Subject: CN=f5fd9b28-6b0b-4045-ad0d-8d812e2e4513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:eb:e6:cc:8f:b2:63:ad:38:21:8d:c6:0e:
                    f7:b4:19:35:17:92:72:39:40:bc:86:b0:a4:c3:5e:
                    9d:74:a1:4d:4e:0e:86:23:fa:45:df:62:9f:ba:da:
                    b2:34:d8:57:da:ef:7d:f7:c4:26:46:3c:02:7a:27:
                    4c:79:af:82:17:90:04:bb:06:3d:19:51:51:39:5a:
                    53:91:f1:c8:e7:ec:2b:bf:47:4b:31:4d:64:66:be:
                    e5:53:b4:48:81:80:31:bf:54:fb:65:80:a6:b9:f6:
                    cc:0d:81:ce:ef:df:2d:89:fc:e7:c4:c0:99:32:bd:
                    d0:01:e2:1a:8b:15:61:77:7d:1e:35:15:52:5b:7b:
                    5a:c2:4f:7a:07:92:33:a7:78:80:e1:5c:4d:e7:8f:
                    40:8a:e9:6f:d3:17:1c:7d:04:ed:52:70:34:bb:56:
                    34:69:23:99:ee:2c:85:cb:6b:e2:d7:cb:ba:d6:a4:
                    a3:74:29:d5:29:e9:45:67:b5:20:07:aa:27:6e:06:
                    e6:06:83:ce:8b:3b:59:68:43:e9:48:d9:42:9c:32:
                    97:dd:03:bb:42:76:ff:a4:29:92:f6:68:44:7a:83:
                    ff:5d:bd:1b:59:a4:19:c8:7a:6d:0f:19:e1:5f:1c:
                    06:85:1d:51:dd:2f:8f:ef:37:2b:1e:da:6b:87:2f:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:E2:66:66:7A:B4:14:D5:DB:94:81:9D:02:3E:64:23:54:1C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c0404f26-364b-3d51-ac52-b9310d51e7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:c3:35:02:96:f3:08:00:21:7a:14:d3:41:37:47:22:6a:
         f6:e0:93:61:fd:51:ce:32:43:01:b6:72:30:61:cc:da:03:a6:
         da:b5:81:46:8f:a4:0e:29:3a:29:76:5e:af:fd:4b:71:3e:75:
         37:43:e9:6f:ff:89:e7:50:ac:b5:99:7e:f0:d5:1c:dc:3b:91:
         31:d6:9d:ef:fa:09:34:86:e9:88:fc:b0:9c:92:83:54:e7:b1:
         18:d5:51:e2:d3:86:de:4f:63:ac:e3:c6:e1:70:ef:90:7c:21:
         ed:34:a5:11:7c:44:ed:69:f0:d4:53:98:d4:4e:c3:9d:98:7e:
         42:25:ec:43:02:ec:ab:e1:c7:ac:91:6c:2a:92:14:8f:89:00:
         c7:fd:a4:9b:d9:3a:c6:b1:af:22:0e:30:63:46:f9:8a:80:6b:
         48:d0:90:b7:4e:1c:19:40:0d:1d:15:fd:4b:95:a0:e0:24:72:
         54:81:27:ed:5c:23:44:44:3b:87:5e:56:ed:a3:78:5a:e2:ce:
         d2:49:a3:75:ea:92:03:2a:c2:90:5c:60:ea:03:7f:c5:80:7f:
         45:bb:ae:70:93:52:be:8d:b6:4d:7a:83:53:84:9a:8c:e6:c1:
         f5:88:ba:34:8b:9e:b3:fc:54:12:b8:f4:c8:4f:40:82:2c:83:
         9d:bb:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org