Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa
File:                     c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa (raw, json)
Hash identifier:          9eW2K09FO3xh8O/5a4piYWEmR+d4rEujhD+vyzmEoXs=
Subject key identifier:   80:01:E0:40:33:71:AB:E2:7C:B7:23:19:48:51:C5:01:DC:67:E6:9C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845462AE8D0248C441B1D7B2A20
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa
Signing time:             Wed 20 Mar 2024 20:59:07 +0000
ROA not before:           Wed 20 Mar 2024 20:59:07 +0000
ROA not after:            Tue 18 Jun 2024 20:59:07 +0000
asID:                     36492
IP address blocks:        136.22.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2a:e8:d0:24:8c:44:1b:1d:7b:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 20 20:59:07 2024 GMT
            Not After : Jun 18 20:59:07 2024 GMT
        Subject: CN=4a503ff7-5549-41e0-b301-78062fb493da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:a9:fd:10:a1:e4:c8:72:85:8a:b8:8e:cc:
                    61:9a:ea:14:96:07:65:7f:7f:b8:41:2b:a7:9f:90:
                    a6:04:61:8b:18:76:6d:7e:db:da:3e:0a:fe:8e:24:
                    21:13:17:2c:3c:30:30:af:01:66:2b:4c:63:c0:3a:
                    77:08:47:ac:db:c3:9d:33:a8:49:ed:b6:81:a0:f0:
                    f3:32:7c:8e:92:ca:19:a4:3a:3a:97:8c:d6:4d:a4:
                    fe:1f:01:8f:c8:27:87:85:86:ad:ac:d8:c3:f1:29:
                    a6:aa:53:51:7f:55:cf:63:b9:fa:62:27:c2:7e:c2:
                    d5:a2:cf:6f:c4:e2:cd:7b:66:b0:19:8f:15:c2:ce:
                    de:c6:21:c6:a2:d1:0c:2a:5a:39:33:ac:70:45:c2:
                    77:c8:36:94:e7:96:d8:98:ca:5c:b1:04:40:a2:76:
                    5d:56:33:b0:59:3b:57:26:5c:a4:ff:30:07:d7:97:
                    6d:0f:b9:1a:c7:3a:73:92:b4:79:87:ca:89:6a:a9:
                    01:e4:a7:87:44:3b:4b:bc:25:ec:ec:e0:e6:bb:91:
                    57:c4:df:42:34:3f:8e:bc:e7:c7:64:1c:b7:5e:d5:
                    01:89:d2:d5:5f:03:12:6e:40:f7:4a:28:46:6b:77:
                    40:f0:a1:07:50:06:64:7e:bc:2a:8a:b0:c0:b0:8b:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:E0:40:33:71:AB:E2:7C:B7:23:19:48:51:C5:01:DC:67:E6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:73:84:1c:96:53:98:ef:77:b8:8c:0c:2e:f2:ca:da:61:9e:
         a0:12:9c:64:74:18:98:89:dc:bc:42:3d:fb:2c:6b:97:44:8a:
         5b:30:0b:62:63:4b:df:3e:e2:0e:42:ca:46:2b:10:62:73:da:
         4a:4c:d5:62:17:42:b8:25:df:3e:8f:83:e5:ef:4f:0c:ac:85:
         1a:bb:f0:63:7b:07:62:c5:52:bf:1f:e0:fd:da:0d:2e:30:da:
         68:58:08:b7:b9:a5:e5:78:b4:1e:95:d5:81:21:50:13:5e:06:
         fb:46:21:56:59:89:4b:b5:a1:ca:37:f4:da:dd:33:06:00:91:
         d6:f6:b0:e8:a0:31:67:02:26:f7:83:1c:3c:15:c5:00:34:59:
         6c:19:c4:64:0b:60:da:63:f5:5c:bc:7f:23:36:1c:07:5f:c5:
         cb:db:1c:a6:69:99:bb:6a:38:26:89:27:87:27:2b:3d:21:a5:
         40:6b:1e:ef:cd:74:0d:59:54:ac:62:e9:42:2e:cd:01:86:b3:
         6b:9a:c6:a2:f2:96:d7:f2:20:fa:e3:59:59:74:69:07:7c:62:
         0d:7b:0f:eb:3f:55:8a:1c:70:f5:23:b4:9c:8f:50:dc:90:30:
         18:fe:de:ab:3a:6e:c2:19:93:0d:1d:2e:7d:3a:7a:56:64:8e:
         32:0f:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:20 2024 by rpki-client on console-fra.rpki-client.org