Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa
File:                     16d32892-c3eb-30da-a6a2-9342916a0080.roa (raw, json)
Hash identifier:          zrA6XqIM325nSox08C53quQXvfBZoE/iF469P6NT0UQ=
Subject key identifier:   4E:CD:79:3F:18:4C:B6:12:13:E6:B5:8F:E0:1E:67:E4:64:1D:C1:02
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094FAA8914456DF4E1D6200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fa:a8:91:44:56:df:4e:1d:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=a94eaa7e-1dbe-4dd8-9458-0c0fd75d86a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:61:ff:df:f5:ec:a8:c3:43:3e:c5:68:7e:
                    cb:fa:38:bb:3c:ba:21:19:60:07:fe:02:75:5e:bb:
                    ce:28:36:88:1a:03:91:17:cb:2d:54:de:65:66:1f:
                    62:dc:e0:5e:15:36:39:fc:15:52:f7:8f:28:87:cd:
                    32:b1:9a:46:0a:39:ae:be:2a:5c:f2:5b:e8:e9:02:
                    de:d1:be:f8:a8:83:cb:6d:05:db:d1:27:3d:fa:8f:
                    f2:4a:e3:25:4f:eb:d8:08:11:3f:df:b3:7b:b2:5e:
                    a9:79:10:6e:33:94:92:6d:88:2f:55:7f:ec:04:c4:
                    f4:fd:43:d5:4f:ea:11:a6:fa:9a:b0:a8:a3:7b:c5:
                    34:44:28:ed:f4:cc:46:60:25:43:ef:89:b1:06:ca:
                    b7:01:85:6f:46:0c:63:cd:d2:58:9a:a1:1f:52:60:
                    81:ca:24:d3:32:0b:c7:ab:d6:5b:19:e2:c4:5e:7d:
                    9c:bd:1d:b4:fa:b5:e4:7f:cd:34:41:d4:d0:61:bd:
                    9b:0b:46:19:cb:d0:9b:e9:22:9b:a1:ad:b3:9d:0a:
                    86:7b:dd:fd:11:91:7c:de:f1:20:36:3b:a5:31:20:
                    6e:3a:4b:99:69:9a:0e:d3:d6:23:f2:13:4a:d3:13:
                    6c:dd:5f:88:93:55:6f:a4:73:0e:07:35:8d:90:19:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:79:3F:18:4C:B6:12:13:E6:B5:8F:E0:1E:67:E4:64:1D:C1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:87:29:88:47:f7:64:e3:30:72:0e:66:92:db:78:96:55:17:
         af:7b:da:3a:bf:e2:b7:e8:3e:1f:0d:0c:7f:55:d1:c2:94:58:
         f4:4e:79:c4:c8:9a:71:07:eb:45:eb:10:01:e5:e5:fb:a0:cf:
         22:59:88:e8:15:a9:a8:17:ee:2d:e7:a4:7c:23:90:78:c4:12:
         03:72:e1:e1:a7:75:b2:c3:99:05:35:98:48:5a:68:46:6f:98:
         c0:63:5b:07:1b:e6:da:18:4c:c4:45:67:b3:fb:df:60:94:10:
         cc:f9:c0:12:66:67:bb:d7:c4:7e:0d:b7:09:19:0c:07:17:d9:
         5d:0d:56:b2:49:b6:fb:b1:78:c2:d4:7e:ba:db:fd:d4:20:d5:
         04:a4:51:a9:0e:70:12:1e:1f:78:6b:e5:29:1b:79:07:6f:89:
         c4:4b:f0:15:6f:99:1a:f4:c8:37:ef:3c:45:65:18:d6:aa:c0:
         c5:11:64:c5:32:c8:9b:30:3f:20:c1:6d:9a:b0:4a:8e:87:2c:
         1f:c0:cd:c2:0e:f3:8f:f2:80:21:46:ef:71:dc:f3:b5:b3:5f:
         c9:ca:64:5c:3f:6c:32:20:10:78:f8:c5:de:41:82:f3:41:83:
         42:7b:86:49:19:01:b1:13:c1:60:60:e6:5e:22:89:f7:c9:39:
         12:70:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org