Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
File:                     a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa (raw, json)
Hash identifier:          HDa2OIHXJpxxX+tiVFsS4sqbzlNPQRT0DA4UzG3ImNg=
Subject key identifier:   65:1D:FB:1C:7B:B2:C2:78:63:42:96:8F:0B:D8:8D:A0:C2:DE:87:2F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094FE10CA720F6049FDF4A0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:fe:10:ca:72:0f:60:49:fd:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=6ca9bba1-23c6-4d75-ab83-e5d9e8906396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:1b:6f:d3:7e:c6:0a:9b:0f:65:5f:5f:62:
                    21:83:67:1a:d9:38:6e:eb:bc:9e:cb:b6:70:6d:02:
                    76:0a:c7:78:18:fe:1a:f2:e1:ab:ab:49:9f:67:4e:
                    9c:8c:e0:80:24:fd:5e:d2:b1:19:07:52:df:6d:1c:
                    82:e0:7f:48:24:1e:bc:c8:09:90:79:16:22:b5:af:
                    23:23:f4:59:29:ef:a2:8e:55:a9:ad:c7:cc:f2:20:
                    4b:f7:fa:17:cf:d0:e6:3f:ad:5b:e8:85:28:69:9a:
                    66:48:0c:47:59:8a:40:cc:52:15:6b:b1:5c:3d:f6:
                    81:00:ca:48:62:90:b4:96:9d:15:c2:b9:7c:23:ca:
                    fa:d2:85:9f:39:df:53:5b:dc:57:53:92:ce:19:f1:
                    9d:5e:57:03:18:8e:c8:56:c7:02:0b:c3:38:13:87:
                    01:5b:a2:71:76:72:90:fb:38:22:45:72:ce:bb:06:
                    37:17:62:37:dd:ad:a7:49:d0:0e:a5:78:85:dc:87:
                    6f:11:7d:c3:b6:31:41:c8:f0:1c:9a:4a:49:6f:ee:
                    2a:a0:99:a4:65:5e:ba:2c:0a:63:4c:8b:e0:32:6d:
                    79:5c:cc:25:fc:3d:b0:81:e4:82:f5:ae:e6:ad:2d:
                    89:5c:da:3a:02:b2:70:09:7c:ab:9c:c0:aa:22:dd:
                    a3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:FB:1C:7B:B2:C2:78:63:42:96:8F:0B:D8:8D:A0:C2:DE:87:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:48:5a:f0:98:d7:52:b3:c9:83:36:7d:59:9a:f4:45:dd:
         3c:5d:52:93:ff:64:61:0a:40:f7:55:a5:9b:d8:a3:83:19:47:
         03:68:2d:80:07:fb:19:ec:6f:39:37:db:ee:66:bc:9c:37:c3:
         a7:ef:e2:43:68:cb:46:eb:53:13:67:19:5c:b9:0a:8f:a3:07:
         a5:46:09:ce:57:d0:8c:04:50:6b:04:23:35:a6:eb:d3:57:7b:
         b9:2d:ca:2d:4a:87:12:5f:2c:9c:a2:2f:d1:7c:e7:b8:aa:15:
         2f:f3:68:87:91:80:06:dd:56:a5:d2:fd:28:a8:d8:71:25:d8:
         b1:f9:8e:07:e4:a9:b3:0e:08:d7:7e:ec:0d:11:70:28:e9:9d:
         62:20:3c:df:62:46:ff:3e:83:9f:08:c4:6b:dd:b6:49:ef:73:
         4e:98:f8:43:bd:5a:b5:bf:72:0d:2b:96:71:80:5f:71:c4:f8:
         bd:51:7e:ac:d3:d7:b6:d7:d8:27:ef:a1:69:bd:b7:dd:21:cd:
         4f:25:29:6f:e4:2f:dc:91:08:c6:2b:4a:18:23:4c:40:20:79:
         0e:62:52:9e:76:76:60:17:ad:8a:2c:db:4d:8e:1e:78:ee:23:
         33:4f:36:b1:49:3e:a6:70:e2:53:df:63:f7:7c:7a:ca:f5:ee:
         79:a6:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org