Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
File:                     6db07d60-40ed-3ad4-a297-e8c49b593112.roa (raw, json)
Hash identifier:          AkVC2TCta3hw7F4smxd9OK9D6mzHtks+Gsk4NsbnUfk=
Subject key identifier:   6C:21:EB:0F:61:C3:F8:D5:4F:11:0B:97:4D:6C:D9:F6:A7:F9:D8:9E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094DF1B49C4BC4D4ECF2700
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:df:1b:49:c4:bc:4d:4e:cf:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=bfbe7c88-0055-4335-b288-beba52991ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:ec:61:d3:de:07:a4:74:6b:ee:b2:d8:9b:
                    4a:76:07:7e:23:28:34:ae:9f:1b:67:2a:c4:da:db:
                    ff:7c:14:b0:6a:82:b0:c3:a9:3a:fa:d0:44:cd:c4:
                    08:4e:e3:6b:09:e9:16:2b:0c:40:90:23:a5:29:ba:
                    97:3b:2c:a6:ca:dd:1c:38:1c:4e:91:27:11:22:57:
                    ca:84:33:ad:f3:00:8e:c9:50:a8:69:86:dc:67:ae:
                    7b:eb:ee:ca:23:18:2a:db:66:e0:3c:3d:ca:a0:05:
                    23:87:83:6a:a2:ac:eb:c5:9e:ef:2c:21:0b:14:4d:
                    07:82:1d:54:9b:91:b3:7b:44:19:8a:4b:7f:1e:49:
                    5e:bb:9b:63:24:40:54:79:2b:cc:09:b7:07:c8:1c:
                    59:04:a1:1e:a2:9d:72:d8:2e:a2:9d:70:c0:46:47:
                    06:0e:7e:4b:73:00:a9:d4:ac:20:7c:f8:2e:14:0d:
                    2e:9c:f4:20:cb:6b:8d:a2:75:e3:d5:92:72:79:0b:
                    1b:bb:fa:bb:9f:6e:8a:ad:dc:ce:47:2c:85:32:26:
                    36:97:b4:1a:32:74:d1:f5:ce:ad:bf:f0:b3:8f:be:
                    b3:50:bf:ee:20:d7:e7:58:e8:81:e8:20:98:61:b5:
                    21:7e:59:1f:5c:6b:7a:7f:9e:b0:5a:36:99:7c:78:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:21:EB:0F:61:C3:F8:D5:4F:11:0B:97:4D:6C:D9:F6:A7:F9:D8:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:38:41:a0:34:45:8b:28:b1:54:07:57:0e:87:f8:3a:78:0d:
         14:77:f4:eb:4b:b5:86:81:1f:76:6f:dc:b1:b9:dc:cf:eb:f4:
         33:4f:29:4c:a4:89:9c:08:00:44:8c:8d:b1:15:b4:52:03:51:
         81:92:67:be:ad:92:b9:e8:c3:ec:9b:cb:f4:08:01:f5:34:8b:
         45:de:db:40:29:73:fd:00:37:31:73:f9:4d:8b:35:c3:ab:4f:
         55:fb:75:fe:71:1c:bd:09:1b:eb:14:f0:3a:08:9a:4b:7b:9f:
         eb:96:83:5f:a6:f2:ad:8a:e1:82:1e:0e:86:8d:6c:a4:09:90:
         82:d2:1b:c7:d6:ac:3f:d6:04:39:63:24:85:33:1f:7a:c5:ec:
         ce:3b:48:d2:b8:3c:66:43:37:f0:2a:0f:fb:b9:eb:fb:bf:e8:
         7a:c8:e3:de:06:11:99:35:40:81:08:c8:a2:54:e5:6f:44:0e:
         2f:fd:8b:9a:b4:8a:92:91:cf:54:c0:63:bf:9e:21:b4:da:81:
         99:f1:b4:23:1b:0f:8f:f0:48:2b:98:2a:36:69:3f:a0:55:ef:
         3f:89:6d:34:32:f4:cf:e5:a9:15:cd:ac:21:57:33:de:2d:e5:
         02:49:2a:a9:de:70:40:fa:ea:a5:b2:bb:e5:b2:e0:43:f6:fb:
         0c:a8:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org