Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
File:                     91c1e2f3-72fb-3651-b995-c235e2819d23.roa (raw, json)
Hash identifier:          n/npaK4hEHAvOwEmeNPhZFGMlw2gj52gdAAqrtWH5xk=
Subject key identifier:   8B:9F:6C:3B:F9:44:58:41:A0:D4:24:DB:24:7A:6A:E5:AD:4F:09:E4
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094F020AEE833B65FB61CC0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f0:20:ae:e8:33:b6:5f:b6:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=048856a6-c964-4245-bce8-ee10316039d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:9b:d3:2b:c4:7d:e9:b7:06:c5:da:f0:45:
                    47:90:a1:b3:ca:6c:97:a7:36:0e:a4:b9:40:43:a7:
                    87:1c:d7:b8:73:c9:0f:3c:19:1d:7a:03:f3:88:bd:
                    a7:4d:29:aa:42:74:20:e7:36:1f:65:31:5f:6e:51:
                    88:80:4c:57:0c:73:39:de:bf:5a:28:3b:ae:dc:dc:
                    4f:01:fc:d5:33:65:f2:26:5f:40:79:76:20:63:cb:
                    7e:2a:c3:34:7e:e8:2e:4e:6c:6c:73:eb:ff:34:45:
                    8f:62:ad:a4:9b:cd:91:a5:18:a9:1d:a3:58:ef:50:
                    ab:48:f3:37:d8:50:b7:ec:06:b5:01:ff:12:8f:8c:
                    11:1e:f0:20:89:2f:84:98:da:a1:f0:64:af:fb:32:
                    a9:bc:dd:e9:f5:47:02:c0:ad:33:c3:38:e7:82:8a:
                    a8:b4:28:43:fc:2d:16:56:b4:24:48:ed:d2:4e:55:
                    c6:fd:e4:c2:26:53:fa:e9:57:c1:d7:0c:27:8d:21:
                    0d:88:ac:f9:73:89:64:bc:fe:3a:1b:5b:66:98:3d:
                    98:62:6d:9a:78:5e:93:6c:b8:1d:2e:68:b4:d9:a5:
                    8e:88:8c:a1:f1:01:f3:13:bb:56:37:8f:3e:a5:cf:
                    17:05:f8:15:97:6f:e0:6a:a8:58:f2:ca:e9:9d:39:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:6C:3B:F9:44:58:41:A0:D4:24:DB:24:7A:6A:E5:AD:4F:09:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:80:a2:bb:19:67:98:53:7c:c0:b1:4e:d6:62:09:1b:1c:
         c5:b0:0d:42:95:bf:51:79:c8:75:de:87:ea:65:c9:cb:3b:29:
         21:1b:71:00:76:d7:bf:2f:53:fe:34:bc:e8:05:fa:65:92:23:
         98:e2:46:67:b5:1f:fe:39:84:f2:92:91:24:e3:42:e0:e6:40:
         e3:0c:42:b7:73:cb:51:8e:ed:0a:f8:af:19:da:2a:55:5c:68:
         53:43:4e:31:33:8c:dc:ae:07:cb:a3:ee:8e:40:32:48:26:77:
         63:2b:82:36:70:14:c0:99:e8:d3:91:c4:ec:f6:d0:23:50:68:
         f4:cc:d0:32:03:23:5c:bc:d6:f6:ec:6b:27:4a:54:2e:60:ef:
         cf:64:29:8b:f3:96:2b:a3:62:7d:e6:f5:5c:db:e7:f8:cd:00:
         4f:60:9c:74:5e:4d:06:cf:4f:34:67:b3:61:1f:f5:48:87:ed:
         f0:3e:7d:e9:e6:23:51:94:4d:b9:fc:5a:8f:74:19:f3:74:83:
         32:d9:99:12:9d:30:90:d4:94:a7:7c:92:32:48:e1:5f:65:c6:
         73:7d:33:cc:b3:5e:37:97:fa:00:b8:be:56:3f:1a:d5:58:b2:
         ba:42:40:7b:98:f0:03:b1:80:9d:1b:b6:60:6e:b4:a7:95:1c:
         a3:01:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org