Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
File:                     75bcbd78-4640-3856-8f93-24ae6f3712f4.roa (raw, json)
Hash identifier:          5d8O0hWrdlM1e+UdxPATTx/b04Xo58ATQTRR0RlgtOs=
Subject key identifier:   86:E1:AD:25:AA:4A:BB:9C:72:33:8A:10:8B:0E:5C:F9:4C:24:66:A5
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094C6C93DC2386E47DAE4A0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c6:c9:3d:c2:38:6e:47:da:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=e72815ad-b308-412a-a3f6-b46942ea583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:43:21:3f:6c:76:e6:39:d2:98:74:66:2e:b1:
                    55:90:e6:c7:2b:45:e1:29:0b:18:a9:52:86:88:3c:
                    ef:84:ca:82:42:da:e7:9a:e5:72:bc:78:68:e2:23:
                    49:ad:01:3c:62:93:c9:b4:16:83:95:6b:52:a9:ca:
                    0c:d4:b8:ac:25:d9:76:87:f2:2c:92:b2:5b:9c:47:
                    47:d3:82:ec:d3:03:93:83:87:31:f7:8e:6c:82:3e:
                    13:fb:c2:fa:ea:f0:5f:b8:c0:7b:43:b1:5d:17:32:
                    af:28:10:2f:14:25:31:cf:d0:11:e2:63:1d:6e:70:
                    ca:4c:d2:0c:2e:a0:81:ee:0c:f5:5d:df:31:5a:f2:
                    8d:dd:05:66:f5:58:97:15:4c:5a:35:4b:a5:1d:86:
                    3b:f2:46:06:a5:67:50:ae:ea:3a:6f:a9:cd:66:ac:
                    de:fe:8f:cb:db:2d:2f:61:7d:5f:f7:94:e1:13:14:
                    5a:4e:fc:f0:3c:27:aa:0c:ef:41:9d:b3:01:24:52:
                    1e:62:11:ac:a5:87:0b:b3:f9:c0:56:46:30:07:26:
                    45:53:8a:11:67:14:ac:d4:36:ff:fe:48:61:f0:99:
                    14:92:15:10:07:50:7f:fa:72:b1:98:53:60:25:4a:
                    e1:2a:bc:9f:84:67:7f:46:2e:cf:1c:30:23:bf:a1:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:AD:25:AA:4A:BB:9C:72:33:8A:10:8B:0E:5C:F9:4C:24:66:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ee:2f:9c:66:07:bc:39:9c:27:b2:f3:fa:6c:4f:a3:1e:39:
         39:ea:88:1c:4f:a1:13:e8:e8:3f:c0:77:e5:13:fa:e8:8f:23:
         e4:69:bb:a4:98:47:6d:73:26:75:43:16:c6:b6:78:2f:6d:d0:
         d0:8a:0a:10:91:53:98:f8:dd:eb:d3:73:0f:6a:e6:e1:e9:8e:
         f5:a1:19:37:e9:4e:b0:cb:b3:aa:ba:37:e2:0f:e7:7e:cf:ba:
         5e:3a:9b:2e:a9:e2:87:86:d5:c7:e7:37:ef:0c:8a:b7:d7:35:
         e2:37:c5:dc:d4:b9:6c:d0:3d:f7:be:c1:9c:13:54:b8:5c:ae:
         4b:66:b4:af:7b:8c:62:b8:c5:1e:fc:c1:1a:a1:bd:9f:3d:54:
         f1:38:df:f6:12:8c:c5:87:34:75:4c:61:53:0b:5f:05:50:e3:
         03:80:f7:41:fc:7f:e3:72:1c:91:b3:38:44:a4:86:aa:e4:76:
         d7:b3:bb:61:8a:9f:89:89:b8:98:92:c9:47:af:54:ea:59:16:
         c2:99:00:47:06:be:f0:75:36:6f:f5:ba:fb:be:d5:3a:d1:05:
         58:da:87:03:39:10:99:3f:2a:fd:ef:00:0f:28:d6:be:ec:bc:
         c6:91:d2:1a:c3:0a:61:90:74:ad:c1:45:9d:35:de:b1:ed:c4:
         80:20:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org