Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03e86d0c-0791-3a7e-bc77-a325e9ad5be7.roa
File:                     03e86d0c-0791-3a7e-bc77-a325e9ad5be7.roa (raw, json)
Hash identifier:          3Tvdm5SRZrZ45FWDulJvi3oKuwPnt6WXeQVzq6UkjT0=
Subject key identifier:   70:40:63:CB:B4:25:B0:CB:45:B9:B7:FC:9E:65:52:3E:57:25:69:4C
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584540B8552D8D6D64DFEE0BD700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03e86d0c-0791-3a7e-bc77-a325e9ad5be7.roa
Signing time:             Mon 18 Mar 2024 22:09:13 +0000
ROA not before:           Mon 18 Mar 2024 22:09:13 +0000
ROA not after:            Sun 16 Jun 2024 22:09:13 +0000
asID:                     36492
IP address blocks:        136.22.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b8:55:2d:8d:6d:64:df:ee:0b:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 18 22:09:13 2024 GMT
            Not After : Jun 16 22:09:13 2024 GMT
        Subject: CN=193250e1-67f9-4b1a-9fa2-f673225b08a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:54:4e:12:aa:63:c3:f3:d0:83:0e:69:e7:
                    76:e8:a3:69:25:72:6c:07:81:6b:43:8c:c0:93:01:
                    82:be:c4:01:f9:1f:10:a6:76:38:53:c6:f0:99:5e:
                    34:5b:57:11:73:f9:33:88:2a:15:c3:8d:7f:f6:d4:
                    aa:cc:02:6e:62:5f:fd:4a:0b:58:02:fd:3a:b9:28:
                    e1:de:8f:9c:79:d3:5c:2d:ad:c1:4a:99:bb:b4:24:
                    c4:18:6c:f5:35:a9:10:43:0a:12:75:06:04:ac:48:
                    2e:93:68:9c:49:97:77:a1:eb:18:e1:af:53:c2:f2:
                    e4:91:25:67:56:d8:93:5e:74:01:5e:64:6c:5b:52:
                    b8:dd:a2:8e:f4:eb:f6:13:aa:94:ba:9f:23:ee:59:
                    f2:63:4c:d0:9a:9f:21:bf:59:23:1e:e6:44:3c:36:
                    c1:c5:f2:62:c3:a5:97:84:a9:3e:58:d8:e8:2b:4b:
                    4b:4f:34:d2:c1:52:01:f9:62:54:3b:99:83:aa:b5:
                    05:c2:c6:59:2a:1a:fd:f5:af:76:aa:eb:82:d5:f6:
                    2f:e2:05:8d:c2:9f:6c:36:47:46:91:0a:d9:2e:ce:
                    0e:82:33:c3:b3:d4:0d:e1:0e:6e:f1:ac:35:a2:55:
                    15:ae:80:f4:aa:1e:60:c8:c3:3c:0a:c6:b8:85:b5:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:63:CB:B4:25:B0:CB:45:B9:B7:FC:9E:65:52:3E:57:25:69:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/03e86d0c-0791-3a7e-bc77-a325e9ad5be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:84:c3:b7:e1:e5:89:c9:04:37:b7:19:c9:51:be:b4:ed:ba:
         5d:c1:c5:07:13:aa:5e:b8:b0:3e:12:ba:83:75:06:ba:95:c7:
         5d:0a:39:cd:3c:a5:95:09:32:9f:49:e6:03:f0:cc:0b:82:41:
         bc:85:cc:26:9a:e4:f9:1a:84:61:f4:83:4c:59:8e:29:04:67:
         47:4f:1c:ae:13:7e:12:d0:b9:74:83:9b:ee:68:32:41:ce:46:
         62:f9:c2:65:13:06:59:a4:09:e4:20:ac:57:8d:6d:5f:b2:49:
         b6:1d:d1:85:4c:4c:ad:96:ab:6c:28:77:14:5f:00:8a:b3:e2:
         56:d6:2a:47:e4:a3:53:57:ee:49:07:4e:41:cc:16:de:a0:99:
         3d:29:69:75:e4:0a:95:14:e0:96:51:e8:f6:90:37:b7:e4:a3:
         bf:b5:00:b7:c5:c7:e8:75:51:1c:a2:f4:71:a1:5d:cf:b2:98:
         01:56:4f:80:a5:74:bf:a8:a4:7d:ba:9e:81:8f:d0:da:26:4c:
         dd:fd:9f:62:da:e6:5a:92:3b:60:37:4f:a8:d2:07:78:26:c3:
         8c:68:dd:f8:f9:1a:ac:4e:16:21:7f:44:0c:d8:c3:09:86:5d:
         9f:71:ab:a6:5b:3c:76:cc:5c:30:e6:9b:31:47:f0:67:0d:c9:
         1f:cb:b8:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAuFUtjW1k3+4L1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MDMxODIyMDkxM1oXDTI0MDYxNjIyMDkxM1owLzEtMCsGA1UEAxMk
MTkzMjUwZTEtNjdmOS00YjFhLTlmYTItZjY3MzIyNWIwOGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mhUThKqY8Pz0IMOaed26KNpJXJsB4FrQ4zA
kwGCvsQB+R8QpnY4U8bwmV40W1cRc/kziCoVw41/9tSqzAJuYl/9SgtYAv06uSjh
3o+cedNcLa3BSpm7tCTEGGz1NakQQwoSdQYErEguk2icSZd3oesY4a9TwvLkkSVn
VtiTXnQBXmRsW1K43aKO9Ov2E6qUup8j7lnyY0zQmp8hv1kjHuZEPDbBxfJiw6WX
hKk+WNjoK0tLTzTSwVIB+WJUO5mDqrUFwsZZKhr99a92quuC1fYv4gWNwp9sNkdG
kQrZLs4OgjPDs9QN4Q5u8aw1olUVroD0qh5gyMM8Csa4hbWC5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBAY8u0JbDLRbm3/J5lUj5XJWlMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMDNlODZkMGMtMDc5MS0z
YTdlLWJjNzctYTMyNWU5YWQ1YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMiEw7fh5YnJBDe3GclRvrTtul3BxQcTql64sD4SuoN1BrqVx10KOc08
pZUJMp9J5gPwzAuCQbyFzCaa5PkahGH0g0xZjikEZ0dPHK4TfhLQuXSDm+5oMkHO
RmL5wmUTBlmkCeQgrFeNbV+ySbYd0YVMTK2Wq2wodxRfAIqz4lbWKkfko1NX7kkH
TkHMFt6gmT0paXXkCpUU4JZR6PaQN7fko7+1ALfFx+h1URyi9HGhXc+ymAFWT4Cl
dL+opH26noGP0NomTN39n2La5lqSO2A3T6jSB3gmw4xo3fj5GqxOFiF/RAzYwwmG
XZ9xq6ZbPHbMXDDmmzFH8GcNyR/LuCU=
-----END CERTIFICATE-----
Generated at Wed May 1 22:27:00 2024 by rpki-client on console-fra.rpki-client.org