Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa
File:                     dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa (raw, json)
Hash identifier:          F6tLG8qnTWT9davjilZz07Km58tRO+Z/AvdvABUAGKU=
Subject key identifier:   15:C5:89:A4:03:EC:BC:56:EA:DF:7C:60:78:5B:73:72:AF:CA:0D:27
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584540B8BB7F538536120F3EF240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa
Signing time:             Mon 18 Mar 2024 22:10:01 +0000
ROA not before:           Mon 18 Mar 2024 22:10:01 +0000
ROA not after:            Sun 16 Jun 2024 22:10:01 +0000
asID:                     36492
IP address blocks:        136.22.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:bb:7f:53:85:36:12:0f:3e:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 18 22:10:01 2024 GMT
            Not After : Jun 16 22:10:01 2024 GMT
        Subject: CN=99fb2d7f-7b41-4d56-99ea-532a6f69ee37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:a6:94:ae:c9:74:35:01:d0:89:83:ce:8b:
                    e7:fa:23:aa:97:f6:aa:41:4c:42:77:23:03:37:9a:
                    15:e3:e1:19:da:09:e2:27:f1:6b:da:1d:53:4e:19:
                    9a:ec:ef:95:45:f6:bd:a4:30:dd:b1:19:ea:d2:8d:
                    11:fa:7e:22:eb:bb:78:36:2b:69:b0:27:ee:93:27:
                    c1:13:29:cf:58:dc:12:94:b8:b9:8d:59:3f:95:42:
                    ee:c5:98:51:fa:d5:71:8b:66:31:c2:09:38:59:37:
                    4e:29:4b:58:fd:2f:e7:78:c8:cb:94:25:77:37:06:
                    79:6d:5f:16:a0:c7:4d:13:24:2b:c3:8f:5f:52:05:
                    2f:0b:04:d5:6c:06:28:7d:6d:15:54:e8:09:47:6a:
                    b1:11:16:23:e8:88:de:ad:3e:fa:67:37:5d:d1:25:
                    62:4d:28:49:a2:d2:36:09:5d:16:1b:48:6e:bf:e2:
                    07:7c:26:be:e7:1f:2e:5e:c4:7b:16:1e:e2:cd:68:
                    92:2a:81:98:89:72:d6:89:be:6f:18:6e:29:4c:78:
                    fb:72:ee:4b:3a:03:4f:4c:a5:f5:f9:5f:d6:a9:63:
                    55:02:e7:66:66:ca:b3:de:f4:e5:e3:7c:98:4b:36:
                    36:f3:0c:dc:79:e1:32:4b:2e:55:32:fc:30:ad:d1:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:89:A4:03:EC:BC:56:EA:DF:7C:60:78:5B:73:72:AF:CA:0D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:7a:dd:31:54:af:cb:1f:3a:09:69:28:8c:95:0c:6c:41:
         91:09:25:3f:22:8c:c4:e1:6e:b9:51:b2:c2:c7:51:03:d0:0a:
         3f:fc:b2:3e:3f:73:4e:e1:f2:0c:fd:04:c6:c2:46:8a:af:05:
         3b:08:7e:26:c5:b9:97:a3:b0:8c:26:83:99:ba:ea:4b:00:43:
         df:dc:66:3e:ff:4d:ca:c4:02:b4:fc:9b:c6:a7:a3:e6:85:41:
         16:f5:21:8c:32:00:4d:66:46:17:3a:01:b7:5d:c1:f2:f8:e5:
         a3:cf:c7:3e:93:b8:76:d4:84:aa:c3:8a:1f:a6:ac:38:24:c2:
         2d:a3:14:3d:13:95:3e:87:dc:d8:0b:10:24:ee:a9:89:3a:39:
         4d:38:4a:ad:ce:0d:74:c0:df:c3:c0:b5:ae:88:0f:dc:fe:77:
         66:39:f4:e8:52:e6:53:21:de:03:97:d3:93:bf:08:02:a6:d7:
         98:46:1b:d9:ca:3f:7b:ea:b4:7d:d6:02:19:5b:12:6c:9c:39:
         0c:6b:ae:22:8e:b0:4d:52:8f:b7:7e:73:75:9d:95:44:f7:d3:
         4c:10:44:76:56:e5:cb:92:b3:86:ad:a5:9d:12:be:94:e5:64:
         4e:1f:24:c9:43:b5:12:d7:e0:7d:c8:c9:8c:7c:e7:9d:38:51:
         9c:5e:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:20 2024 by rpki-client on console-fra.rpki-client.org