Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
File:                     fd549013-e60f-380f-843a-ac541320c21f.roa (raw, json)
Hash identifier:          eu5ju9ltPqthjYC+06SSHM+H1nOO707+wdKxNqTSTu0=
Subject key identifier:   0F:F0:44:9E:B2:81:CB:7E:B1:15:47:82:D8:36:2B:5D:3C:3F:E8:94
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E62B3436C9027572BA3BBC80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:34:36:c9:02:75:72:ba:3b:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0f7f47eb-3547-4f1d-8697-da3c49d944fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:64:df:5d:b1:1f:be:67:a1:35:d2:fb:ea:
                    22:63:be:7a:ba:bd:42:38:ec:b2:df:22:b0:6b:75:
                    ef:80:52:e4:c5:8f:c6:96:fb:e1:04:d1:02:97:81:
                    10:2d:a3:93:cc:88:38:d9:26:cc:a3:a7:25:4c:94:
                    c6:15:70:99:62:24:84:45:7d:a8:57:08:e0:f7:28:
                    56:0a:f4:cd:f4:3b:d2:29:5b:64:94:c4:d0:ff:02:
                    02:45:a3:41:0e:a5:c7:ab:9c:c9:60:b8:69:45:69:
                    76:84:a7:28:bb:ad:68:0d:ab:ad:e0:0e:e0:8e:4c:
                    c9:3c:7c:8d:97:9e:fa:da:25:9d:30:0b:46:94:6c:
                    4a:a5:9a:24:d3:6c:ac:61:7c:c6:8a:f5:c4:a4:e8:
                    f8:95:f0:54:17:57:1e:58:0f:04:a1:5f:7b:c9:41:
                    a2:49:af:14:3e:04:a5:a2:9c:74:a3:47:c3:4a:ce:
                    a2:4b:56:71:0d:82:fe:7a:b8:f3:f9:e4:52:23:1f:
                    88:38:06:c3:c4:a7:54:67:32:a3:ca:e3:bc:27:32:
                    a7:93:10:09:d7:14:c4:43:44:31:04:27:b3:ae:d9:
                    05:7c:cb:80:11:fa:48:85:4d:b8:b1:b9:5a:a6:64:
                    f9:16:39:94:54:af:17:14:df:f7:9d:26:36:e0:51:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:44:9E:B2:81:CB:7E:B1:15:47:82:D8:36:2B:5D:3C:3F:E8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:50:f8:47:a7:86:f4:cf:4b:ca:99:57:c6:fb:9b:11:bf:84:
         4b:3a:24:dd:ba:9a:a2:af:fc:3a:5f:59:9d:02:80:4b:01:20:
         09:1c:f8:95:46:96:9b:4d:f5:d8:47:12:e2:60:e6:05:06:1b:
         3d:84:c7:c4:2a:96:63:d9:2a:5b:2d:b6:7f:f4:2c:25:2b:0a:
         d9:a8:0e:06:70:d2:8f:f1:54:9f:66:65:92:dd:3e:f8:fd:ab:
         3e:66:f3:a5:87:ad:66:2d:66:22:03:8a:2e:0e:67:62:7a:ea:
         3f:87:5b:0f:37:d2:9d:b0:df:e0:a5:9c:23:ce:63:93:f7:2c:
         ed:39:ba:dc:3c:be:26:3f:37:36:c3:1c:5e:8e:15:8a:32:53:
         a8:cc:fe:a2:0e:17:47:fd:1c:3c:8c:9f:e2:f3:cf:7a:be:24:
         88:00:d0:8c:f2:89:5d:44:3d:59:9a:16:dc:ff:35:a8:b5:9d:
         1c:ae:1d:e9:16:d0:24:8c:47:64:f6:47:37:2c:78:bb:cd:16:
         50:2e:21:2d:2a:95:cc:cd:0d:13:c6:28:0a:fb:8d:04:2d:a2:
         3a:4b:57:b4:9c:ba:c5:16:26:02:91:08:c3:b7:02:6c:5c:cf:
         40:62:d8:7a:c4:3e:c0:a6:6e:a6:af:f2:13:5a:e7:3b:bf:8f:
         2c:62:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:33 2024 by rpki-client on console-ams.rpki-client.org