Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa
File:                     f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa (raw, json)
Hash identifier:          irMRH/nUzLU9iqy5bLw6NigZi+FBI2Fke6rgn1ilzQA=
Subject key identifier:   E3:7C:DB:CC:FE:59:51:B3:DB:7F:B2:11:59:B6:BD:25:FE:74:4F:B1
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285847E094EE5E388342344CBD4880
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        136.22.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ee:5e:38:83:42:34:4c:bd:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=84d4fa06-1eb8-4f60-8253-cd01316ba691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:b1:6c:7a:ba:a0:43:7f:82:96:26:f0:79:
                    6c:70:ad:c4:96:aa:84:d9:02:ad:33:b8:b4:be:57:
                    d0:5a:76:4e:f2:53:ad:fd:f3:08:f3:62:d0:fd:dd:
                    60:fb:71:6a:53:39:a7:9c:88:70:48:12:e2:41:4f:
                    a7:1f:84:78:cd:18:e2:c8:61:c6:74:bf:d3:ce:5c:
                    21:77:1e:8b:8a:9b:63:89:b1:a8:6f:b0:ee:9f:fd:
                    e9:a3:3d:c2:df:2f:ef:20:ca:75:46:cd:e3:4f:68:
                    37:4d:67:8d:54:d6:0a:23:24:9c:bf:51:3d:63:20:
                    66:0c:c4:f5:2a:74:af:cc:f2:c4:e1:22:e2:40:87:
                    2b:56:48:5a:e0:88:17:59:63:84:4c:18:99:60:f2:
                    2c:91:cd:bf:ca:f5:0e:f7:88:c8:21:91:eb:bc:24:
                    e1:99:61:ab:20:8e:37:3c:03:f7:58:61:0d:a4:29:
                    c1:e1:43:91:b4:5c:41:df:fa:aa:28:23:96:76:0b:
                    1a:0e:2d:69:f5:4e:45:69:32:63:91:7d:4b:52:95:
                    c3:90:a2:a6:7c:43:d2:ef:64:0f:03:43:d8:a3:c7:
                    50:38:2e:c1:eb:3f:ed:05:dc:ac:de:37:6d:c2:d0:
                    91:43:6f:c3:40:e4:f8:35:ca:53:20:d9:fd:6d:ad:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7C:DB:CC:FE:59:51:B3:DB:7F:B2:11:59:B6:BD:25:FE:74:4F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8d:f0:ff:25:b2:19:cc:1c:b1:50:1a:fc:5b:d3:ce:77:23:
         47:75:5c:12:56:65:e7:b4:29:71:12:b2:6e:37:a9:cf:ef:ce:
         bc:97:79:dc:60:af:da:a2:98:56:c3:d0:d2:51:1b:64:6d:f2:
         90:9c:b6:dc:ce:7b:a7:41:27:a7:84:65:b5:2f:fe:cd:f1:c3:
         7a:96:e8:85:ff:f4:10:8d:78:c4:20:6d:d6:9e:00:8e:09:a9:
         0f:8c:63:98:a6:a0:59:03:f0:0b:aa:bc:95:d5:a0:ca:71:44:
         63:4e:23:d4:a4:5d:8f:ea:b8:a7:11:61:3f:84:01:08:fc:be:
         05:b1:2a:b2:f0:96:ac:a7:8b:d5:de:a0:1e:99:a3:18:0c:64:
         67:c0:73:89:3b:d6:b7:5d:73:52:a1:33:b8:82:2e:8f:9f:f5:
         c9:3a:b4:16:99:72:ed:97:75:81:bc:e2:86:5a:8e:70:a1:e0:
         e5:5f:f0:7c:d2:62:7f:66:8f:07:a8:7c:a4:4f:1e:60:a9:de:
         ff:ce:e2:f7:a1:51:54:61:6e:d5:ed:7f:95:57:e4:cb:96:aa:
         cb:68:42:db:fe:89:43:4a:41:0f:8e:81:07:76:05:8a:67:a3:
         7e:5a:37:f3:ac:85:97:6a:78:da:47:59:03:c0:50:e6:1d:82:
         3b:a7:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:46 2024 by rpki-client on console-fra.rpki-client.org