Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
File:                     7257db57-885c-3616-9770-9cdc08337427.roa (raw, json)
Hash identifier:          KRmTy2R2P76Wg9Z8dz8nb+dNkBbeyiyf4/OqTK2Xw8Y=
Subject key identifier:   D7:BB:F9:DD:A8:AD:59:97:29:B3:99:81:03:48:22:03:0E:83:89:B3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094ECFCC213D3F8FA3A2E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ec:fc:c2:13:d3:f8:fa:3a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=e43ff4b5-3505-4cb3-815d-adaf48a3a09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:20:77:41:14:1d:56:9d:d4:c1:15:f4:a2:
                    db:0a:a0:ea:7a:40:03:9a:6c:d5:9a:19:95:4a:64:
                    bf:b3:f5:09:d6:e3:38:73:28:ee:2c:c8:0e:eb:a7:
                    e0:9f:2c:fb:2b:db:37:d9:7c:77:90:99:35:d2:89:
                    97:11:ce:30:56:3f:f9:03:14:83:9d:2a:a6:ed:20:
                    0c:5f:e0:92:6c:1d:af:e7:33:b7:40:37:66:25:54:
                    17:35:17:3b:00:87:c4:1b:c5:42:ab:34:61:d9:67:
                    8d:81:23:cc:d1:48:0c:fc:f6:8f:d6:53:0d:7c:35:
                    17:10:6b:cf:11:38:68:b2:1e:cf:d1:41:f0:2b:18:
                    e2:47:eb:1e:7d:8f:77:b0:00:b0:9c:ca:ac:b1:9f:
                    1f:1d:8e:47:f9:cb:a5:41:93:e3:26:a2:0a:93:d5:
                    14:00:07:e7:bb:8b:a5:f8:ef:1c:62:42:6a:9b:b9:
                    d6:7e:96:29:fb:69:7d:e9:84:e6:a1:9c:da:de:6e:
                    6b:84:12:7d:de:21:9f:13:0e:7f:ff:72:76:da:09:
                    4f:e4:45:f1:31:0a:b9:35:0b:82:b0:e3:a2:28:f0:
                    3c:62:27:d6:8e:f8:5f:4a:0a:7c:c1:4a:37:d4:71:
                    cf:0c:18:b5:23:fc:23:d5:ea:6b:c8:3a:ad:e5:b3:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:F9:DD:A8:AD:59:97:29:B3:99:81:03:48:22:03:0E:83:89:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:71:f1:91:a1:4f:20:72:19:d8:b8:b3:cd:f7:06:97:f0:93:
         f4:fc:d7:3b:49:f1:71:10:8d:af:98:98:51:c8:3b:79:53:9a:
         86:97:b4:4b:c1:b0:49:0c:60:46:c9:f0:9a:76:92:a5:44:11:
         11:20:a6:b8:42:67:8b:69:8d:60:b7:67:dd:f6:3d:f1:55:15:
         fb:74:d7:49:fc:b3:14:b9:2d:ad:73:3e:03:99:b6:71:89:1b:
         1c:7d:93:7b:08:5e:e1:86:32:f2:2e:9b:c5:fe:49:5f:ba:0d:
         61:a8:30:86:a9:cc:51:d4:9e:bc:3b:ee:ba:1c:85:8c:41:09:
         45:ad:ee:80:b6:ad:ea:d5:96:cb:c4:c2:ee:65:9c:76:b4:df:
         69:54:c8:f4:47:6a:8c:d5:2d:37:ee:78:38:d2:d8:5d:34:b0:
         0f:31:04:92:48:cf:21:dd:ac:f2:c5:39:49:9e:88:d7:64:a7:
         03:a6:a8:78:5a:5b:a9:3a:04:38:1e:3f:cd:4f:2d:f5:94:25:
         d6:e8:31:4b:f1:a9:88:dd:4e:49:95:68:1d:46:15:f5:e8:d2:
         18:0b:3d:58:73:a3:a8:4b:36:12:15:d4:d7:9a:03:a6:43:5d:
         7d:75:d7:be:9f:6d:b2:1f:20:67:14:4a:2a:bb:fb:4a:01:77:
         e7:2d:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org