Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa
File:                     1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa (raw, json)
Hash identifier:          JSF0g9KY0Y8KKOhA70y3K7dCkDmyz6yAgXybqI4cTrI=
Subject key identifier:   D3:C9:7A:49:32:EC:85:9A:BA:3E:AA:72:C7:8C:6E:89:6B:E2:5A:79
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094F64550569B5205FB21A0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f6:45:50:56:9b:52:05:fb:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=ba91a483-b794-4f49-b858-49e46a487911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:58:40:41:75:a1:c9:98:9a:c9:ec:b7:b5:
                    13:78:c4:ea:c2:a3:60:0f:24:ec:47:f9:9b:1d:d8:
                    2b:d4:31:f6:70:cc:29:54:84:86:34:e3:05:b3:fc:
                    13:3d:1a:82:34:e5:1b:51:58:41:63:07:17:96:f4:
                    10:65:f3:6a:a8:85:b9:77:00:14:ce:46:56:19:6c:
                    62:35:b9:21:55:66:c6:73:c6:bc:ca:cd:7c:4e:42:
                    ec:5f:f1:97:bd:d9:ce:3b:9b:6f:55:2d:35:92:8e:
                    88:e2:af:6b:2a:7f:c4:83:64:12:90:61:18:69:2f:
                    57:b9:d6:f3:99:45:44:b0:78:9a:e1:9f:49:a4:af:
                    aa:41:3b:e4:79:02:da:90:d4:7d:e1:95:36:0c:0e:
                    e1:87:35:3b:32:7f:2f:0c:48:5c:fa:cc:d4:24:d6:
                    2c:53:8d:d6:cc:74:df:6c:28:5e:50:c9:08:17:ca:
                    21:f9:09:8c:2d:03:dd:b2:4a:12:57:b9:a5:75:be:
                    f4:d4:bc:32:27:a4:90:ff:f8:a1:4d:0a:be:0f:eb:
                    9c:8b:e1:05:34:b2:5d:b3:c0:ac:7f:56:43:3f:fb:
                    45:1b:f9:b9:1b:eb:07:5a:c6:9f:28:9a:01:e4:7d:
                    af:c8:d8:d3:35:83:6d:4e:9e:65:f3:0e:52:04:03:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C9:7A:49:32:EC:85:9A:BA:3E:AA:72:C7:8C:6E:89:6B:E2:5A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:94:76:16:23:3a:a8:0f:f7:52:75:f2:85:61:d0:d4:47:
         c7:32:a0:5d:9d:70:09:8b:98:17:2f:6c:80:2b:79:06:09:91:
         69:0a:b9:da:b4:be:61:f8:1d:a4:6c:53:a5:89:7c:46:22:90:
         42:aa:65:74:e1:1b:07:01:25:dd:c8:46:31:bc:05:85:60:a5:
         67:59:6a:33:6a:52:fb:ef:e8:f8:07:f0:00:9a:2f:96:5d:07:
         ba:a2:84:29:dd:84:04:6d:b4:a1:95:88:43:d3:02:b8:1b:cd:
         04:62:11:c2:81:59:01:20:a0:99:4c:c7:10:9a:e8:b3:f9:f7:
         39:f3:06:6c:44:58:55:f8:33:22:48:69:7f:18:ac:81:96:bc:
         e7:29:ab:c6:6b:fa:29:8d:51:59:43:97:cc:ce:f4:0b:46:61:
         f6:c9:90:67:d7:1e:2f:01:93:b9:46:c5:80:fd:46:c1:04:c2:
         b9:90:c5:d4:e3:a4:44:85:f2:9d:d3:47:32:21:01:6e:92:3b:
         85:c4:44:b6:24:18:82:9a:24:8f:0d:ad:3a:27:33:05:93:3b:
         62:8f:96:a5:e7:5e:b6:e7:25:32:b8:a7:66:e4:07:51:b8:63:
         dd:fc:89:ec:a5:83:d9:6b:32:58:12:a9:9f:86:23:ad:30:3f:
         4d:50:96:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglPZFUFabUgX7IaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
YmE5MWE0ODMtYjc5NC00ZjQ5LWI4NTgtNDllNDZhNDg3OTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNhYQEF1ocmYmsnst7UTeMTqwqNgDyTsR/mb
Hdgr1DH2cMwpVISGNOMFs/wTPRqCNOUbUVhBYwcXlvQQZfNqqIW5dwAUzkZWGWxi
NbkhVWbGc8a8ys18TkLsX/GXvdnOO5tvVS01ko6I4q9rKn/Eg2QSkGEYaS9Xudbz
mUVEsHia4Z9JpK+qQTvkeQLakNR94ZU2DA7hhzU7Mn8vDEhc+szUJNYsU43WzHTf
bCheUMkIF8oh+QmMLQPdskoSV7mldb701LwyJ6SQ//ihTQq+D+uci+EFNLJds8Cs
f1ZDP/tFG/m5G+sHWsafKJoB5H2vyNjTNYNtTp5l8w5SBAObUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPJekky7IWauj6qcseMbolr4lp5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMWY5Y2UwYWItYmQ4ZS0z
ODY3LWJkYmItODNmNjFiYmNmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqtlHYWIzqoD/dSdfKFYdDUR8cyoF2dcAmLmBcvbIAreQYJkWkKudq0
vmH4HaRsU6WJfEYikEKqZXThGwcBJd3IRjG8BYVgpWdZajNqUvvv6PgH8ACaL5Zd
B7qihCndhARttKGViEPTArgbzQRiEcKBWQEgoJlMxxCa6LP59znzBmxEWFX4MyJI
aX8YrIGWvOcpq8Zr+imNUVlDl8zO9AtGYfbJkGfXHi8Bk7lGxYD9RsEEwrmQxdTj
pESF8p3TRzIhAW6SO4XERLYkGIKaJI8NrTonMwWTO2KPlqXnXrbnJTK4p2bkB1G4
Y938ieylg9lrMlgSqZ+GI60wP01Qli8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org