Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa
File:                     8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa (raw, json)
Hash identifier:          FyLVEXPN51Mr30U/4xR3Cm7VoLDxPKLNyGEoyOJxvXg=
Subject key identifier:   D2:33:2D:DE:AD:20:7C:7D:8C:79:5A:D1:5D:0B:91:9A:78:CC:58:47
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094F845108B93786445D0C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f8:45:10:8b:93:78:64:45:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=c73c1b11-07ab-47a9-83b9-a68aa9c8eca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:32:c5:95:e0:e4:57:73:a8:98:41:e2:f3:
                    18:39:f4:68:0b:18:5b:94:48:bf:e1:1c:df:e6:7e:
                    f5:6a:1b:9b:6a:98:5f:7c:52:19:af:c8:90:73:94:
                    a0:1f:14:70:7e:69:74:40:3a:86:03:f5:dc:8a:24:
                    9a:a6:2a:22:5f:d3:62:14:a9:0f:26:51:a6:23:82:
                    8c:30:a2:68:df:15:de:14:b7:d3:aa:12:f3:f3:80:
                    dd:09:cd:9f:58:57:c4:26:9f:3a:b1:c7:c3:89:34:
                    80:10:c8:b4:f6:b0:6e:3e:9a:8a:6b:14:5e:f9:77:
                    cb:87:4b:86:e4:de:a0:c5:4a:96:f7:30:24:96:9c:
                    be:8c:8a:a4:a5:e6:14:fb:79:88:56:d4:40:b4:d9:
                    86:32:51:50:23:22:b7:e2:14:b7:94:35:12:3f:2c:
                    c3:bf:3f:16:ec:7c:74:46:a3:ca:68:16:9f:48:a0:
                    9f:82:a3:48:f5:02:49:e4:e4:3a:37:bf:74:7a:6a:
                    d6:ab:93:2d:e7:8e:57:7e:16:bd:da:56:6f:6c:08:
                    9a:fe:54:67:7b:78:82:71:c3:7d:d7:38:52:e2:cf:
                    8f:34:e0:08:88:5e:7e:5b:08:5e:e9:df:2d:ac:92:
                    43:d7:e0:94:6a:1a:90:3c:82:f7:c8:13:01:15:87:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:33:2D:DE:AD:20:7C:7D:8C:79:5A:D1:5D:0B:91:9A:78:CC:58:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:6d:63:c6:83:2d:49:b0:69:6a:66:7d:61:02:ff:6a:16:
         97:c1:fa:ca:9d:ce:d5:2f:ad:37:70:a3:f0:78:cf:78:70:a4:
         95:b8:70:13:3e:1c:ef:fb:f6:f1:4f:c2:70:23:3a:f3:0e:04:
         dc:a8:06:29:ef:51:6e:93:45:d4:ec:8d:20:a8:75:92:4d:09:
         ff:bb:92:d6:f0:a9:da:8c:49:0a:1d:dc:99:6d:db:a7:5c:11:
         f0:a6:7a:fc:26:98:e0:eb:69:2e:54:16:55:8d:20:a6:ba:7a:
         2d:27:b5:bf:15:6a:d6:91:50:02:29:14:ac:43:92:4f:de:31:
         00:13:7b:5b:73:6c:01:cd:ff:3b:75:40:2c:bc:60:7d:3e:3a:
         b2:9c:bf:d6:7b:d1:54:da:d0:5b:51:86:ec:7a:82:b5:21:57:
         82:b7:3b:e6:45:6e:26:74:88:b1:c5:bc:a2:60:0d:4b:b2:3c:
         0a:ad:67:a3:1a:d9:7a:38:23:8b:80:c9:d7:68:ff:31:2d:7f:
         df:a8:8d:33:9a:32:91:f7:0f:52:22:d8:5d:19:f5:0a:bc:1c:
         30:2f:61:d6:33:6d:d7:7c:1a:b3:0e:01:95:da:0b:7d:67:93:
         71:d6:27:ef:13:7d:84:09:f9:b3:2c:8e:16:d7:3a:85:07:78:
         d7:cb:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org