Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa
File:                     77417015-c5b6-331e-86ca-868773d1c05a.roa (raw, json)
Hash identifier:          ZS3ztBjsnFGieyQDp4cmASQ1qGEKkh/REbQt0O50s3o=
Subject key identifier:   30:F0:8E:7E:61:76:01:84:30:24:ED:0D:5E:68:C0:27:13:52:26:39
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584540BC5BE82C79DD5424261A00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa
Signing time:             Mon 18 Mar 2024 22:17:20 +0000
ROA not before:           Mon 18 Mar 2024 22:17:20 +0000
ROA not after:            Sun 16 Jun 2024 22:17:20 +0000
asID:                     36492
IP address blocks:        136.22.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:bc:5b:e8:2c:79:dd:54:24:26:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 18 22:17:20 2024 GMT
            Not After : Jun 16 22:17:20 2024 GMT
        Subject: CN=0a9e37f0-95a7-4ae4-9c10-3a9ee848f00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:6a:4c:70:79:10:aa:06:21:5e:18:1a:d7:
                    49:86:48:1e:b9:16:7d:13:33:54:cb:a0:7c:fb:68:
                    63:de:55:1f:52:3c:02:f6:fc:7a:3c:2a:e6:9b:da:
                    cf:f2:33:0d:a4:43:c7:2e:42:49:79:d4:5c:2d:fa:
                    d1:1b:01:ba:5c:e5:d3:86:d9:e8:a8:92:c2:89:fe:
                    f4:79:8a:85:88:d0:6b:b3:ff:53:b5:a7:7c:65:6c:
                    d0:de:b9:9f:3c:61:8a:bb:c9:f1:ec:14:78:20:e4:
                    ad:61:5b:6b:2e:e5:39:d5:5f:28:34:e4:d2:a8:03:
                    99:1e:84:8a:9b:e5:d6:6d:ba:6f:08:16:93:dc:41:
                    e0:d8:61:1d:08:b8:45:a5:be:46:c7:84:8c:4e:62:
                    cf:8b:38:a4:71:b4:e2:7c:d1:ed:9c:73:2e:dd:81:
                    3e:44:58:cc:44:c9:f4:5d:07:58:6d:33:55:5e:7e:
                    28:86:80:b5:01:20:e6:f3:9d:80:83:0a:aa:1e:5a:
                    48:1f:16:54:13:e7:53:dd:71:bd:f6:4a:b4:79:31:
                    58:df:44:b7:1f:74:f0:58:c6:10:ec:a8:9d:18:98:
                    ff:9e:e9:31:92:16:6a:44:f7:72:1f:0c:b5:50:42:
                    4c:67:01:fe:5c:d3:83:3e:de:83:a3:d4:f4:05:d2:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:8E:7E:61:76:01:84:30:24:ED:0D:5E:68:C0:27:13:52:26:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:3d:6e:85:16:bb:f9:59:e8:5a:ac:c9:62:e0:88:ec:e9:
         84:50:63:28:2e:79:d5:05:57:2a:1a:d9:90:fd:cd:8c:ef:a3:
         ef:9b:11:84:b6:a0:23:35:4f:09:e1:31:d8:18:e1:7d:bc:44:
         a2:68:82:e3:18:25:30:51:66:34:6d:a0:5d:18:6b:0e:d6:10:
         f6:8c:06:b2:07:af:d9:07:35:95:63:85:80:73:e4:ba:a0:f1:
         45:3d:01:87:b2:c2:e4:07:c2:7a:18:de:1c:49:d5:9b:8b:45:
         c3:82:92:43:7c:1f:db:6c:9e:46:28:5e:02:f7:6e:1d:52:0d:
         78:2e:6f:f9:1b:e5:80:ca:3f:09:db:8e:bf:06:f7:05:b0:90:
         e6:c9:ac:89:1b:ab:0f:06:30:f5:47:f1:6a:84:2b:43:cb:d8:
         8f:9c:2e:a7:d7:4c:2b:a0:31:04:c0:06:95:e4:75:d6:39:3c:
         03:7c:a3:0f:9e:b0:96:e1:5f:5e:bc:3b:b8:c9:60:86:8d:a6:
         40:5a:3d:c2:d2:a6:ae:45:c3:d7:64:20:0c:36:e8:1d:b1:1e:
         92:0d:d6:b4:02:16:28:8c:1c:71:9e:5a:19:0d:a7:bf:30:14:
         a6:82:e6:33:d9:05:e6:a3:80:6f:80:bd:30:33:59:7f:e3:00:
         f3:fb:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org