Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db8278ef-aa1c-3cce-88f1-cad76db02ab5.roa
File:                     db8278ef-aa1c-3cce-88f1-cad76db02ab5.roa (raw, json)
Hash identifier:          YBWsqRbXY+sixHrpZfpRD65Q/v198MSSwouwI16+9qc=
Subject key identifier:   D8:93:90:CF:75:33:34:FD:4D:1F:91:C9:BA:AB:2B:B7:F7:04:11:82
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B6696E518C8F71CB2A2100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db8278ef-aa1c-3cce-88f1-cad76db02ab5.roa
Signing time:             Mon 18 Mar 2024 22:05:21 +0000
ROA not before:           Mon 18 Mar 2024 22:05:21 +0000
ROA not after:            Sun 16 Jun 2024 22:05:21 +0000
asID:                     36492
IP address blocks:        136.22.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:69:6e:51:8c:8f:71:cb:2a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:05:21 2024 GMT
            Not After : Jun 16 22:05:21 2024 GMT
        Subject: CN=c12a85f2-474b-4e38-8af9-26e9c8156d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:90:43:7f:b2:07:d2:a3:6f:73:4c:e0:06:
                    29:29:e6:07:d0:35:67:0f:74:7c:ec:c7:ed:c6:36:
                    39:7f:e3:07:04:4c:98:b7:ff:55:c9:3b:46:14:79:
                    98:b7:38:1c:e5:16:19:a9:89:83:36:56:5e:95:11:
                    d7:40:67:6b:8b:e1:d7:e7:85:61:5b:0f:9a:89:ac:
                    b0:18:0a:e4:78:87:a4:20:6e:88:6b:b8:42:45:d8:
                    5f:c2:33:68:f5:aa:88:68:1a:1b:a1:de:03:f2:89:
                    c6:3a:98:b4:42:29:58:77:11:e7:0c:14:f6:be:e3:
                    23:bd:a4:cb:d8:16:55:77:a3:4f:d2:9e:a9:e1:cb:
                    b6:e9:3d:5a:c0:51:d4:d9:36:1e:2e:f3:79:6f:e9:
                    84:c1:3a:5d:3c:90:83:c6:9b:64:12:3f:cb:1f:9d:
                    0e:07:51:fe:63:e7:0a:75:4a:96:9b:5f:fb:82:dc:
                    bb:7b:10:ef:4c:fb:e4:2b:d4:f1:00:ac:46:c2:65:
                    72:b9:48:d0:0a:bc:0e:04:0d:3f:57:81:b4:cb:c5:
                    a7:c2:53:06:c5:c6:cb:93:e3:2c:5c:8a:77:20:b5:
                    28:40:fc:58:ea:ff:b1:64:1c:ff:f4:62:99:d6:a0:
                    c1:38:9e:82:0e:98:6f:77:70:ff:7c:ba:ba:c4:99:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:93:90:CF:75:33:34:FD:4D:1F:91:C9:BA:AB:2B:B7:F7:04:11:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db8278ef-aa1c-3cce-88f1-cad76db02ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:3f:2c:bd:08:22:6d:33:59:49:bf:c5:b6:c5:aa:ae:23:
         f3:20:a6:71:ca:5e:b6:c3:5f:7a:ae:93:d9:2b:98:59:ec:1c:
         eb:ff:11:2c:02:d7:0d:e0:73:50:63:5f:f6:f3:c5:ce:98:99:
         ca:44:fd:20:e6:35:92:93:fe:2c:40:fd:5e:0b:59:f1:12:aa:
         eb:7a:d4:3c:57:d6:48:41:ee:9a:91:3b:a7:25:35:eb:41:fb:
         4c:77:94:3a:71:14:be:c3:a1:9c:6d:a0:f5:41:34:74:9d:9c:
         fe:0e:a1:52:a6:fd:f5:e0:10:d2:d7:d6:af:f6:0c:06:29:11:
         7b:d8:a9:01:6e:8b:bb:bf:e1:b3:27:46:9c:c4:f5:6b:ce:b3:
         39:af:db:1a:46:e7:73:69:42:26:1c:63:1f:db:6c:1e:4c:f4:
         cc:f2:99:65:61:71:7c:72:0d:08:db:8a:d3:c2:aa:22:8b:72:
         43:84:59:52:ac:0d:65:83:6e:6a:62:47:2c:a7:c7:f8:52:10:
         19:3e:2e:58:3c:ce:88:e9:4a:af:3f:70:7b:1e:ff:20:91:56:
         e4:65:02:88:6e:c0:dc:14:dc:7a:52:a9:2b:cc:92:f5:df:e5:
         78:29:e3:34:61:2d:89:0d:07:5b:76:f1:a0:2f:57:10:84:cc:
         1a:28:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:20 2024 by rpki-client on console-fra.rpki-client.org