Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa
File:                     db894078-d2ff-3020-86a4-0d7c5452e065.roa (raw, json)
Hash identifier:          GTonfNwyidnzt8JGG6bFJaBrBM9Kg8Qv9g76/01MKNQ=
Subject key identifier:   21:D4:00:EE:67:E1:D6:78:CE:7F:47:29:86:B3:0A:46:52:C1:EE:19
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540BA40F68E9E9A7DD0AE5960
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa
Signing time:             Mon 18 Mar 2024 22:13:05 +0000
ROA not before:           Mon 18 Mar 2024 22:13:05 +0000
ROA not after:            Sun 16 Jun 2024 22:13:05 +0000
asID:                     36492
IP address blocks:        136.22.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:40:f6:8e:9e:9a:7d:d0:ae:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:13:05 2024 GMT
            Not After : Jun 16 22:13:05 2024 GMT
        Subject: CN=e7c73c35-3c34-4f20-a199-2639bb2402e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:b4:15:16:13:f4:ee:33:ac:9f:50:25:fe:
                    0e:75:cf:5b:1c:42:9c:58:a1:aa:4d:de:5b:2e:8c:
                    49:1c:9e:88:68:9b:b4:92:9c:83:11:3a:09:1e:d4:
                    e4:9a:62:c5:96:26:c3:ce:9c:54:d5:b9:ba:a5:70:
                    d0:43:11:94:c6:ee:57:3d:f1:e6:7f:55:6e:65:9c:
                    b9:55:8e:a4:c1:8c:46:e2:fb:ed:27:97:2d:16:38:
                    af:4b:42:4e:f1:c4:2b:73:ef:c5:08:ce:2c:08:f9:
                    dc:33:85:45:03:83:09:f6:aa:39:03:5d:ce:f6:d7:
                    c9:05:e7:64:68:ca:74:32:4b:05:07:74:0d:22:a2:
                    45:58:d6:f1:c5:5f:e9:8a:ba:cc:2b:a8:fd:22:16:
                    34:00:be:f9:72:13:79:00:9e:7c:01:20:cf:09:32:
                    16:39:30:98:e2:32:23:30:8d:d8:65:16:be:e9:51:
                    2f:2d:3f:e0:9f:5c:6c:0f:68:02:9a:05:84:23:9f:
                    c5:b4:aa:3b:d4:f1:0c:95:f7:3e:0a:ec:f7:cd:ac:
                    ed:ae:4b:3b:ba:4a:1e:f5:d3:27:4c:94:28:53:fd:
                    53:0b:b7:0c:ba:58:0d:79:46:4e:c9:7d:3e:11:b4:
                    84:8e:03:64:14:f3:ba:49:83:76:dd:28:c9:12:9e:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:00:EE:67:E1:D6:78:CE:7F:47:29:86:B3:0A:46:52:C1:EE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:73:76:e5:1b:8f:59:34:24:09:ff:e1:c0:4e:1d:11:d2:
         d0:d9:a1:16:1c:59:66:98:e1:ff:54:e6:39:98:57:bb:a0:8f:
         58:13:12:3c:44:77:de:35:4b:74:19:12:5b:8a:01:7f:11:e7:
         f6:2e:af:1b:27:de:99:e3:98:5b:3c:b0:43:9c:6b:d5:5e:14:
         e9:21:f6:a8:20:43:7e:da:89:7a:52:1b:b2:9e:cd:c3:9a:c2:
         c9:ed:40:41:ae:cc:ec:29:6d:0c:2d:d7:e0:dc:ce:f5:06:32:
         59:5b:dd:29:8a:3b:3f:97:43:e3:32:59:47:50:e9:80:72:46:
         c3:e7:2d:d9:23:0d:1b:6c:0d:d9:3d:18:48:e1:37:e2:d0:e9:
         c4:90:35:9b:68:10:54:8f:78:60:cb:95:af:2b:c3:db:e3:c1:
         fe:7a:0b:a9:62:71:fb:a8:d6:d8:fa:f6:2e:a4:3f:da:35:d3:
         4f:c6:2a:46:29:08:2f:a2:65:75:fa:5f:d9:40:92:71:67:36:
         2d:95:ae:34:98:82:fd:fa:c2:ff:1b:f6:fd:6c:1e:50:4e:78:
         74:23:00:a6:d6:fb:be:5d:28:56:53:f5:7a:3d:12:90:80:73:
         d0:f3:e5:69:8a:98:23:3c:8a:bd:3f:7c:3d:38:d7:de:66:96:
         c2:3b:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:19:22 2024 by rpki-client on console-ams.rpki-client.org