Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ad8fc5c7-7403-3cec-abb4-a3f284f0ec2a.roa
File:                     ad8fc5c7-7403-3cec-abb4-a3f284f0ec2a.roa (raw, json)
Hash identifier:          W+Rx8O+probcWb89aoWxciClbtwq8ZNohNF+kMrPvhU=
Subject key identifier:   32:40:BC:02:19:7C:65:2C:F7:7C:A0:01:30:FB:47:0E:FF:10:EB:3B
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094E0B0C4EE562C0B556E40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ad8fc5c7-7403-3cec-abb4-a3f284f0ec2a.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e0:b0:c4:ee:56:2c:0b:55:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=c3e4eb87-3ff0-4b57-9961-d312476df873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:e8:8e:53:7b:e2:4c:a1:02:97:dc:18:d7:
                    95:ad:d7:23:e9:1e:e9:ca:40:ae:c4:88:0f:69:4d:
                    b5:e2:6f:b3:32:a2:48:59:3e:71:5c:cc:46:d2:0f:
                    a8:b0:5a:9c:77:5a:33:c1:b2:0a:58:e4:06:bd:8c:
                    b6:51:2a:67:8e:1c:fa:c2:54:e7:38:06:a5:34:1c:
                    d4:66:52:cd:ed:74:61:42:07:67:bc:83:bc:18:4f:
                    4f:e4:f3:c7:fd:e1:c5:32:81:f4:e7:80:7e:02:3e:
                    ec:c2:f1:78:1a:53:c2:e1:c0:18:f4:d9:e8:b6:63:
                    a2:0a:39:36:d6:6a:67:96:4d:6b:b5:48:ac:b0:fb:
                    7f:a3:e7:6e:41:04:93:ee:2f:b0:85:8b:16:2d:8f:
                    59:07:1d:22:23:8c:1a:0b:ec:42:46:b6:4e:b3:a3:
                    7c:c8:0c:6d:82:02:e7:75:bf:24:cf:90:1d:96:66:
                    1e:38:ca:20:12:07:cb:f7:a2:03:89:8c:88:4e:85:
                    25:f4:87:53:28:71:a2:27:ba:fa:10:b1:93:eb:4a:
                    00:03:01:04:95:a0:4c:5a:c1:a0:ec:1c:b4:14:1a:
                    b3:17:e9:38:3f:09:5d:12:91:03:cc:a6:f0:2b:3c:
                    73:93:f8:91:6e:40:c3:86:5c:ee:81:ff:3e:68:f4:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:BC:02:19:7C:65:2C:F7:7C:A0:01:30:FB:47:0E:FF:10:EB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ad8fc5c7-7403-3cec-abb4-a3f284f0ec2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:a8:f5:68:94:d3:18:b7:9e:5c:b3:fd:60:43:be:cc:ff:
         50:21:17:4d:37:04:e0:3b:6c:83:ff:df:8c:75:ff:d1:f6:81:
         16:c8:30:72:45:c4:e8:e6:22:96:d7:d7:45:e0:87:0a:f5:6d:
         16:c6:f4:a8:4c:c1:18:ee:c4:28:b8:59:3b:7a:a8:8f:1a:b9:
         a5:18:88:7f:3e:00:9c:17:c6:e5:ca:16:81:40:df:55:76:8a:
         02:c4:32:39:98:ac:90:c4:42:86:cd:26:d6:ae:d5:67:a8:0b:
         d4:fb:02:80:7d:fa:7f:ae:04:c3:c0:a8:15:56:a5:f4:67:9f:
         c7:aa:f8:cd:76:03:28:b6:d4:10:45:d5:e4:5e:61:91:1a:c2:
         65:32:7c:cb:4a:d7:0e:49:da:ed:48:1f:71:51:ec:62:15:fa:
         c1:47:22:7c:15:80:92:bf:d3:63:a8:00:f3:59:11:0f:c5:ef:
         b9:1b:e8:8a:89:b3:04:28:21:ab:9f:42:66:7c:26:07:bf:23:
         a5:8f:a0:5d:08:d7:f8:dc:5a:5f:9e:2f:f6:7b:c7:ae:c3:20:
         50:1f:d7:68:75:ca:21:0c:c9:37:5b:34:37:7c:23:d6:ea:a5:
         6d:06:fb:1e:ae:f2:c4:93:e0:f0:f8:1d:f0:98:b8:72:9a:df:
         2d:51:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org