Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
File:                     ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa (raw, json)
Hash identifier:          GOYo8qGrBa7VxAiLEO+pgZHcJba8W/AHSAkkMjK49/8=
Subject key identifier:   2F:2A:BF:F0:2D:52:C8:95:8F:9F:C9:20:FC:55:E6:62:7A:3E:BA:C4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285847E094F6E5C54DE93EF213C640
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f6:e5:c5:4d:e9:3e:f2:13:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=7ab1762f-f898-4363-8a90-c9065895fd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:f2:c8:5e:d0:4b:2a:e1:53:69:cb:53:e7:
                    d7:15:a0:99:03:a3:eb:1e:04:ea:24:ae:f4:b2:fc:
                    e3:ef:9f:6d:4e:27:b2:8f:8d:94:d6:9e:c5:21:1b:
                    76:c3:8e:fe:a6:16:21:a3:5c:9c:c2:98:af:b1:49:
                    5f:88:20:70:bd:38:63:db:46:14:d3:d0:38:71:3d:
                    f9:96:0a:0f:70:ab:b0:c5:b0:43:eb:59:03:ee:46:
                    91:ec:8e:3d:c3:c7:ab:e8:0a:c3:dd:55:67:ac:a4:
                    e2:dd:4d:94:06:c1:2c:a9:81:73:69:c1:45:80:0b:
                    e6:2b:07:c7:d5:b5:f7:8f:41:78:50:3d:58:fe:8a:
                    f9:79:91:2f:c7:54:26:dc:77:a7:be:4c:f5:3a:34:
                    fa:66:65:44:a7:0d:75:e5:18:0f:90:ca:51:9f:7a:
                    59:a5:9b:38:27:ad:90:ba:a4:c7:1d:0c:9b:82:ca:
                    89:76:d6:2d:f7:11:a7:88:7e:91:55:cd:76:08:03:
                    29:a0:90:ee:fc:15:7f:05:4e:a0:02:e4:bd:23:a9:
                    f6:3e:3f:af:f3:f2:be:d8:e8:38:7c:c1:36:8a:5f:
                    ea:72:f0:d5:16:67:83:90:ad:65:e0:46:ab:00:ea:
                    5d:fc:3a:4b:c7:06:96:85:de:32:b8:d2:7e:dd:9a:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2A:BF:F0:2D:52:C8:95:8F:9F:C9:20:FC:55:E6:62:7A:3E:BA:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:5c:2d:53:dc:b9:64:af:26:77:d1:ab:49:36:4e:1e:4e:
         2b:19:b9:7a:d1:bc:09:86:23:34:8b:99:cb:d5:b9:0e:64:dd:
         2a:a3:9b:d5:32:af:af:0e:22:9f:4b:ef:87:48:4d:e0:b9:35:
         91:09:5f:00:0f:a5:69:ef:b4:1a:94:0e:01:d1:35:14:15:e8:
         eb:a4:76:d3:50:39:ed:b1:be:fd:d0:9a:99:f8:f7:86:a4:d0:
         4c:36:1a:4c:c7:0a:36:95:1b:da:30:79:6c:73:2b:26:0a:40:
         00:59:59:a2:c3:a1:e8:fc:4f:a5:e9:22:cb:8c:21:f8:53:d7:
         8e:48:93:e2:f5:5e:b5:ca:7e:8d:36:f4:01:44:06:3d:4e:1c:
         b4:39:7b:c7:1c:3a:26:d0:ce:9c:5c:f1:c7:f5:a9:70:ad:2e:
         90:6e:39:23:91:ef:c8:78:76:45:40:fd:0f:ec:1b:b9:c8:41:
         ee:8a:a8:83:9a:0f:4f:78:01:a8:e0:fd:8f:f1:ff:df:4a:3f:
         ff:fd:c2:42:3e:28:09:a1:7a:83:16:b0:b7:0a:9f:48:4b:52:
         9f:dc:1a:00:c8:8d:61:f2:eb:02:8d:f7:8f:f4:79:63:98:67:
         99:19:8c:8e:7f:50:ca:ce:a4:41:47:61:d1:5e:6e:b2:40:10:
         80:f4:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:06:33 2024 by rpki-client on console-ams.rpki-client.org