Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa
File:                     7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa (raw, json)
Hash identifier:          VX99Q6eyYrdYyKfRQL7ZY5+j0CwlM8gFUN3gwGHUuHQ=
Subject key identifier:   90:A8:7B:70:55:9C:77:1F:F1:98:6A:E3:DF:58:93:28:E4:F6:1B:E8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540BAC8864784C7EF5D25F480
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa
Signing time:             Mon 18 Mar 2024 22:14:09 +0000
ROA not before:           Mon 18 Mar 2024 22:14:09 +0000
ROA not after:            Sun 16 Jun 2024 22:14:09 +0000
asID:                     36040
IP address blocks:        136.22.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:c8:86:47:84:c7:ef:5d:25:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:14:09 2024 GMT
            Not After : Jun 16 22:14:09 2024 GMT
        Subject: CN=9e24f94e-15fd-4b2a-81d4-4b8899c1d466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:c6:0f:85:3c:1a:c1:e0:6e:06:45:0a:ea:
                    fc:e4:df:30:dd:87:84:4a:93:f5:be:7f:83:7e:db:
                    33:4a:6b:d7:c9:29:42:18:d0:3f:41:98:21:7c:37:
                    33:8c:df:8d:9e:48:5d:83:d1:b3:0c:f4:1d:eb:2e:
                    70:f5:19:91:42:9c:63:87:ae:23:80:c8:53:b6:c4:
                    8a:5c:88:b3:15:4f:1a:93:51:04:e6:52:5d:de:6d:
                    13:42:d0:ef:e5:c7:b8:bd:84:fd:c2:1a:78:ab:1e:
                    a5:d4:3d:6b:4f:8f:eb:2b:81:f3:42:94:e9:fc:0b:
                    c2:fb:18:86:dc:7f:a0:d9:9a:3b:7a:e9:85:a8:fc:
                    39:2e:f8:b3:41:2e:e4:1a:7e:da:7d:2d:ac:d9:75:
                    6d:e5:d8:4c:75:ef:c3:16:54:fa:bd:37:6f:d3:eb:
                    75:a1:47:4f:d0:52:38:1a:92:66:d9:0a:4a:38:f7:
                    d9:35:b9:3a:f5:2a:a0:ab:19:0c:0c:33:89:82:60:
                    e6:d2:3d:4a:17:2c:d6:26:55:08:48:2b:69:5f:17:
                    13:a5:73:25:eb:fe:ca:51:44:dc:7e:29:1a:06:49:
                    ec:01:b3:25:ef:e0:74:0b:d6:27:c4:3b:63:e7:10:
                    a2:72:81:aa:12:5a:4f:ee:d9:95:21:0a:a3:0e:a2:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A8:7B:70:55:9C:77:1F:F1:98:6A:E3:DF:58:93:28:E4:F6:1B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7cce62ac-f40e-3535-9eb2-4d1c7a6083fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:91:4f:8f:2a:74:75:5d:b5:9e:d8:ff:81:96:77:ef:41:71:
         30:d7:79:a8:91:8c:90:54:e9:8d:25:72:01:17:dc:73:8e:0a:
         79:77:56:b0:23:b5:95:5c:7c:03:93:f1:22:6e:73:7e:aa:ae:
         a6:df:e1:cb:c6:3c:b5:d2:e1:e1:6b:fb:ea:bd:9e:10:a9:2f:
         9d:83:ca:d5:38:88:26:7f:80:f8:3b:29:d1:9e:75:2a:95:41:
         40:b1:67:5b:ba:2d:f6:fe:2c:15:a3:75:c3:ec:5f:43:48:38:
         af:b4:60:24:5a:04:59:c1:f0:1d:2d:a6:54:2c:37:a0:ce:a3:
         63:d3:84:19:7c:e4:78:b1:02:4c:68:b0:4e:2b:b1:39:09:38:
         d7:fb:da:87:09:70:a0:0d:48:f4:df:f9:02:ba:3d:a1:35:4d:
         7e:a1:7a:4c:7c:f5:f8:59:3a:aa:57:7a:b9:09:96:17:88:af:
         a9:e1:d2:70:91:f4:72:ca:67:ba:3c:52:57:5a:a8:f5:ed:83:
         14:92:a6:d1:54:59:5f:cd:66:74:9e:1a:a5:77:38:49:20:9b:
         92:01:c4:0c:7b:8c:e4:82:35:e3:34:7d:80:73:fa:56:87:09:
         88:03:31:57:d6:1b:50:b1:93:25:22:ab:21:72:86:3e:9a:e5:
         44:45:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:41:48 2024 by rpki-client on console-ams.rpki-client.org