Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa
File:                     36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa (raw, json)
Hash identifier:          FO6OYVZhTMRF3WxOanzAc3x3mE5d+vv0sfNZMOGbGd8=
Subject key identifier:   5F:06:6F:38:C7:49:7F:8D:89:AF:0F:FD:46:F4:70:6A:5E:5D:DE:F0
Certificate issuer:       /CN=810a26b8-2ddc-4001-9876-52b54c0695fb
Certificate serial:       010D0C9F4328584511B58F868D7C91E4646D82C0
Authority key identifier: 89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     398041
IP address blocks:        134.195.148.0/22 maxlen: 24
                          23.156.16.0/24 maxlen: 24
                          2605:6840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:8f:86:8d:7c:91:e4:64:6d:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810a26b8-2ddc-4001-9876-52b54c0695fb
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=20930e65-daac-4864-aeec-1c0ff05bda19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:72:c8:87:cf:a9:e3:d9:40:7d:c8:e0:37:
                    a6:30:ff:f1:20:e8:45:f1:67:64:97:42:02:8e:b7:
                    5e:e6:6c:b1:2a:fe:aa:d0:e8:bd:01:bd:35:18:ce:
                    83:28:a1:7f:10:ee:a7:ea:d5:1d:a0:2b:dd:fe:fc:
                    80:0c:0b:c7:04:a2:d9:73:74:66:56:77:6b:9f:c3:
                    fa:b3:a0:31:18:c0:ae:7c:f2:96:f5:59:16:ba:56:
                    f1:09:08:8f:9b:11:00:f5:e7:7b:d9:52:40:1e:44:
                    37:d7:3a:b6:6f:42:e8:81:3d:50:10:4c:41:e4:ba:
                    9b:f5:62:40:bc:19:09:a8:c9:e6:a7:65:21:7e:ed:
                    96:5a:b6:07:91:00:d2:67:03:2e:05:98:dc:15:aa:
                    0a:c8:a0:c6:c3:21:51:9f:51:f0:a2:51:92:a5:9c:
                    68:e4:65:3d:aa:88:c4:4f:d9:e0:ae:ab:8f:a7:21:
                    1b:1b:1c:3b:0a:f7:0c:5a:9c:fa:79:9a:4e:bd:21:
                    60:bc:26:b5:f8:34:91:b9:34:91:a0:b8:c2:de:08:
                    90:ce:fa:c0:40:24:c2:8e:56:37:86:5b:3f:a2:c9:
                    77:c5:4f:d5:5c:01:33:d3:1a:0e:00:4a:f0:69:cd:
                    84:d7:85:d4:a9:1e:1e:5a:e3:d6:a8:e1:73:f2:4a:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:6F:38:C7:49:7F:8D:89:AF:0F:FD:46:F4:70:6A:5E:5D:DE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/36c6970e-5308-3a3e-ac04-e0c3d14c6b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.crl

            X509v3 Authority Key Identifier:
                keyid:89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.16.0/24
                  134.195.148.0/22
                IPv6:
                  2605:6840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:56:75:e7:a8:82:cd:20:67:c2:7e:2d:83:23:5a:45:de:
         8a:f8:a9:21:56:be:3e:bb:91:3c:ae:af:3f:66:62:74:e8:0b:
         87:f3:55:20:55:f1:d2:de:4f:43:26:d8:07:7f:8a:d4:0b:80:
         a6:db:6e:62:d0:2c:a5:06:c1:88:0d:72:8a:df:fc:c7:ea:e2:
         82:0b:e2:5a:81:88:2e:b9:62:2d:fa:1b:f2:a5:07:80:7c:ab:
         ac:74:79:5f:da:88:a4:b2:11:33:11:2c:4c:19:65:12:6a:45:
         2a:e3:fb:40:d6:18:ee:10:e6:e0:18:a9:9c:2e:25:51:1f:2e:
         d2:44:9d:2c:49:f1:dc:d2:db:44:2b:94:68:7a:2e:d6:67:de:
         d8:04:e4:fb:1c:8a:fe:15:47:0e:d8:12:c4:dc:c9:2a:6c:8e:
         31:be:12:80:ce:14:12:58:a5:02:b9:5a:de:49:12:1c:01:63:
         82:c6:6d:7c:f1:d4:37:25:39:cb:85:c4:44:00:76:7f:82:a7:
         73:88:33:fd:3b:0d:a8:da:a9:9d:a2:c7:5a:88:2f:a3:eb:08:
         c5:0b:c3:73:80:f0:43:08:bb:51:83:47:00:cd:e2:3a:63:c0:
         cf:e6:3e:a4:4d:e3:6e:eb:07:f4:79:21:6d:ab:e0:03:53:bb:
         d8:25:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:20:40 2024 by rpki-client on console-ams.rpki-client.org