Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa
File:                     9afd2348-7f86-323b-8d7a-9a4032518ea1.roa (raw, json)
Hash identifier:          GWgp/3vLyhMB05lZabdzdwsme9+BX2GnZEyfVOVvx64=
Subject key identifier:   E8:D7:1E:04:54:1E:DF:BC:A8:48:85:95:1E:71:23:77:C5:40:A1:6D
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540B8DB0D2E404E03FE7FA840
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa
Signing time:             Mon 18 Mar 2024 22:10:16 +0000
ROA not before:           Mon 18 Mar 2024 22:10:16 +0000
ROA not after:            Sun 16 Jun 2024 22:10:16 +0000
asID:                     36040
IP address blocks:        136.22.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:db:0d:2e:40:4e:03:fe:7f:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:10:16 2024 GMT
            Not After : Jun 16 22:10:16 2024 GMT
        Subject: CN=8a0fa68c-9bf4-49f2-b26b-dd37273ef7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:b2:07:84:24:a0:7b:c1:5e:fe:ca:f7:78:
                    9c:99:dc:1f:d3:39:ab:5b:f7:eb:c6:31:5e:d9:32:
                    61:a5:29:5b:b1:8e:3f:57:a5:b1:01:bd:f9:ac:78:
                    25:f6:03:78:3b:31:7b:84:15:93:41:ec:86:b8:c9:
                    53:a2:f6:28:1d:42:2f:58:4b:f5:d8:33:53:a8:97:
                    db:e8:49:ae:76:ae:17:81:08:77:54:99:15:91:61:
                    c1:49:16:50:88:dc:c8:8b:30:6f:23:cd:fd:d8:e0:
                    31:87:5e:6c:2d:c5:66:fd:c3:85:e5:a2:9a:c3:81:
                    c7:a0:ec:1d:ab:e0:4e:73:d5:9f:da:d3:ce:5c:56:
                    bc:91:ab:87:d0:f1:38:ff:81:42:99:cb:03:34:08:
                    cc:86:61:54:d0:8c:ae:a7:8c:7b:db:0a:e8:90:d6:
                    ba:60:dd:2c:61:d3:0c:41:7e:f9:65:4e:03:c8:ed:
                    df:0e:e7:ce:53:f9:3d:36:0b:d3:af:a9:37:67:fd:
                    3f:71:62:b0:1a:77:4f:ed:15:8a:93:9c:51:d7:53:
                    91:f5:c4:62:25:ba:58:43:6c:9e:05:2c:fd:fd:eb:
                    8b:35:d9:5d:73:c0:82:f4:6a:f9:fb:d0:5c:b7:24:
                    6a:b2:1f:60:f9:d6:12:a6:18:8f:46:83:79:9a:f0:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D7:1E:04:54:1E:DF:BC:A8:48:85:95:1E:71:23:77:C5:40:A1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:87:b2:b2:4c:4c:9d:e4:c9:57:c3:87:fd:c6:48:4f:9a:52:
         3a:65:f7:4f:15:11:6b:c6:2d:37:47:ac:2b:5c:0c:e7:c5:d0:
         44:d8:f9:31:56:fa:3b:a4:2b:ea:da:5e:04:0c:18:c8:34:5d:
         b2:0c:94:2b:a4:92:08:17:9e:07:30:95:76:8b:aa:54:74:ef:
         02:44:ed:1c:8f:9b:32:0e:a2:11:c0:ef:b3:49:c3:30:57:73:
         25:f7:f2:5d:7f:6a:5b:a5:5d:ae:36:ef:fd:ad:88:fd:c7:ac:
         8b:ba:a9:4f:e0:d4:29:af:2a:bb:04:cb:e0:17:d5:d1:af:8e:
         80:d4:33:2a:d2:c7:7f:c1:e1:ea:f7:fa:4d:2b:66:db:dc:5c:
         58:0b:8f:74:a0:50:a0:7e:31:bf:a8:f0:dc:fb:4f:35:ac:58:
         49:af:a5:6d:aa:5f:65:36:56:f1:86:0d:3d:c3:1a:40:bf:5d:
         f7:01:22:e2:a1:f2:a8:91:15:88:b4:61:03:d3:c3:7a:b8:fe:
         04:6a:1f:30:ca:80:02:35:cf:4c:f8:8d:51:ae:96:57:a2:2b:
         ae:1e:02:67:6b:be:f7:cc:be:71:f0:04:75:37:62:51:7c:85:
         b4:76:6e:c4:61:a1:a8:06:81:a1:9a:fc:ca:48:ee:25:ba:59:
         d7:2e:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:39:30 2024 by rpki-client on console-ams.rpki-client.org