Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/365eddeb-307b-38f1-a8dc-65da3341292f.roa
File:                     365eddeb-307b-38f1-a8dc-65da3341292f.roa (raw, json)
Hash identifier:          8Bt3FdRjGlSq23M97sXP+pxxXUNjQys6sVOY3Ybie54=
Subject key identifier:   20:21:27:AC:C8:7F:3B:A7:B6:69:E5:59:91:6A:3E:87:A1:10:A3:9B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462D5FA1E5B802F2C1942700
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/365eddeb-307b-38f1-a8dc-65da3341292f.roa
Signing time:             Wed 20 Mar 2024 21:04:05 +0000
ROA not before:           Wed 20 Mar 2024 21:04:05 +0000
ROA not after:            Tue 18 Jun 2024 21:04:05 +0000
asID:                     36492
IP address blocks:        136.22.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:5f:a1:e5:b8:02:f2:c1:94:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:04:05 2024 GMT
            Not After : Jun 18 21:04:05 2024 GMT
        Subject: CN=407c77e2-d684-4018-8443-b0e394c6c698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:a6:f9:69:49:b9:29:07:07:05:c8:c3:2f:
                    7d:4b:18:88:3a:78:12:ac:4b:bf:2b:71:2d:e6:cd:
                    98:49:7c:82:20:f3:92:86:ca:5f:44:1e:bf:78:c9:
                    47:b8:1e:06:33:13:05:94:37:87:b1:aa:2f:cd:2f:
                    37:49:9d:80:a8:eb:5b:cf:03:91:2e:65:1c:b3:ad:
                    58:13:43:8e:11:2e:90:e0:32:d6:4c:70:a7:9c:9f:
                    73:6c:34:b0:e6:2e:ba:46:c8:fd:bb:88:6a:a6:7f:
                    b1:e6:c3:65:0d:52:13:1b:1a:c5:1c:f5:73:cd:ab:
                    26:8b:bd:c5:50:03:ae:be:aa:97:04:29:82:16:45:
                    7f:d2:d3:8f:75:44:5c:5e:38:e4:94:e2:1f:8f:0d:
                    ff:b4:ea:91:d6:2c:d6:54:c7:7a:b1:d4:b2:2c:af:
                    79:4c:f9:e5:74:50:74:f3:22:48:b8:6e:ac:d7:d6:
                    20:9b:75:f3:1d:72:14:b8:9c:61:3d:10:a9:98:69:
                    e0:b3:02:da:c3:2d:6c:2a:25:7a:b7:eb:a4:07:38:
                    d1:eb:71:18:f6:5b:67:92:77:7e:9c:82:17:7f:3e:
                    6b:a9:ed:ec:66:cc:4b:f4:61:15:1a:50:93:9c:41:
                    b2:05:ac:48:73:48:ce:f9:92:cc:51:94:f8:08:60:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:21:27:AC:C8:7F:3B:A7:B6:69:E5:59:91:6A:3E:87:A1:10:A3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/365eddeb-307b-38f1-a8dc-65da3341292f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:84:a4:a5:6c:65:6a:45:31:d8:11:1f:59:dc:4e:73:72:
         ec:f8:be:6e:3f:64:54:84:4e:89:91:11:dc:9b:20:68:41:71:
         44:77:c4:19:d8:7b:9e:10:39:bf:c9:66:4e:c8:56:7a:6b:98:
         6c:ff:67:d0:dd:53:47:44:19:c8:92:71:48:09:c0:b9:8d:53:
         e1:fa:0c:8d:91:49:d3:4f:26:ee:15:52:aa:d5:4c:71:d0:30:
         71:42:c0:a8:bc:5e:08:61:c4:22:29:95:03:19:41:f4:6e:51:
         6d:de:d2:4b:b1:a2:24:1e:c2:93:c1:a0:32:a1:13:05:d5:dd:
         01:6d:53:21:27:9b:71:f3:a1:86:45:77:3b:2a:89:a9:b4:fe:
         0c:06:38:01:16:38:0e:f9:a6:30:1a:ea:90:8b:e4:5f:6e:20:
         13:b8:38:5d:6a:07:61:b8:72:b0:75:ce:a5:fa:b0:be:b6:95:
         20:28:06:6a:4e:91:9d:23:67:77:6a:2d:b4:a8:5e:60:ff:60:
         08:6f:45:65:5d:34:34:1b:10:b7:c8:ca:54:01:cb:43:25:34:
         57:f7:63:08:a4:56:0d:5d:0e:2e:a4:e6:a7:f8:79:65:f3:be:
         80:fb:86:bf:c8:6b:8f:51:6a:62:4b:d3:96:af:56:7e:c8:4a:
         01:98:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org