Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa
File:                     f529b062-9b30-3398-84a5-e7d5fad5abf1.roa (raw, json)
Hash identifier:          rH+G1/OnZROuGkLPG0QZGSM9lUtPJW6oKFCLljom/xQ=
Subject key identifier:   FB:B7:85:49:5F:C9:16:37:46:F8:41:9E:EA:DB:8A:B7:70:BD:10:85
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584540BA430D106A648C94611C80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa
Signing time:             Mon 18 Mar 2024 22:13:06 +0000
ROA not before:           Mon 18 Mar 2024 22:13:06 +0000
ROA not after:            Sun 16 Jun 2024 22:13:06 +0000
asID:                     36040
IP address blocks:        136.22.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:ba:43:0d:10:6a:64:8c:94:61:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 18 22:13:06 2024 GMT
            Not After : Jun 16 22:13:06 2024 GMT
        Subject: CN=71886722-83e9-4e80-8062-168973b0c479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:51:cb:6f:79:28:b3:c4:2c:5e:b5:c8:3e:
                    dc:3d:46:d7:5b:17:75:81:44:3d:52:f2:a6:c4:af:
                    d3:c6:41:14:04:ef:f7:ef:40:49:9e:48:0b:08:08:
                    ff:38:3a:c8:8c:bb:c3:41:d9:82:81:d7:d0:c5:69:
                    b9:c1:7d:40:a3:2d:7e:11:ff:b3:fb:4d:cc:6e:2e:
                    b8:d5:3b:a4:c0:c5:5b:34:44:89:67:25:4a:79:71:
                    43:75:23:e1:16:f5:85:8d:eb:bf:ab:5e:75:93:5c:
                    15:e9:f6:68:97:e0:b0:f6:7b:0d:91:2d:45:72:79:
                    65:17:46:1b:eb:ae:c0:f5:be:4a:49:ee:b8:12:7d:
                    b8:8b:31:f6:84:da:81:4c:d1:0f:82:83:13:86:1e:
                    79:ea:97:54:b2:c7:dc:87:83:0f:a3:20:57:89:45:
                    42:24:21:6a:e4:bc:fd:9a:fb:27:14:2e:a9:e5:bc:
                    ee:a0:13:1f:d9:31:af:a0:af:79:6f:f9:9e:44:79:
                    7a:8f:a5:dc:8b:c1:67:55:8c:ab:e2:b9:5c:61:a7:
                    16:f1:44:dc:33:9b:c8:b3:18:4d:13:34:32:b3:21:
                    a0:55:cf:f1:71:de:8a:69:e0:14:d7:ee:c8:3c:f6:
                    1a:5b:59:7e:ec:2d:08:fe:93:ec:94:b5:18:3b:e0:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:85:49:5F:C9:16:37:46:F8:41:9E:EA:DB:8A:B7:70:BD:10:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:11:75:ac:dc:76:87:9d:e4:44:22:39:7b:a5:22:7e:1b:
         de:b8:44:47:42:5a:dc:80:09:8f:46:a4:2d:c4:70:a7:1f:6b:
         9e:be:ea:1c:dc:2a:8c:70:13:e8:68:ca:cb:58:44:d8:73:d9:
         49:ba:e2:ea:82:fb:b8:ab:3d:c6:cd:89:0a:f2:6c:14:2e:30:
         7b:72:98:ad:66:60:1d:0c:e0:e1:0a:d6:b7:41:86:22:8a:3a:
         5c:2c:e9:a7:01:d4:d3:1f:e9:af:79:e7:ff:86:f9:ba:37:42:
         f5:7f:90:cc:c6:2c:e5:3a:e5:93:77:1b:6d:19:b1:f5:c4:68:
         43:bf:5d:7f:a9:67:04:8c:e8:12:37:22:3c:76:b6:09:a2:d3:
         64:b7:62:b0:e3:af:de:35:b0:c7:2e:67:7d:eb:b2:9f:0c:9c:
         e5:87:30:1b:32:81:a9:ee:ba:eb:72:60:a3:07:f1:0d:a8:98:
         b2:34:0e:2c:a3:38:99:09:3d:91:7e:bd:03:85:d6:69:33:c7:
         21:df:e9:c1:cb:73:ee:a6:28:49:cd:a7:76:91:0b:c8:eb:02:
         80:a1:63:28:73:af:78:d9:17:c5:d6:52:e4:9f:73:c0:95:cf:
         cd:cb:b5:b0:9f:df:33:80:f6:67:3f:08:6c:0e:0c:ed:87:5d:
         f3:d7:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:57:20 2024 by rpki-client on console-ams.rpki-client.org