Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa
File:                     cfc79083-44a5-319d-87e2-52c2d4747cfc.roa (raw, json)
Hash identifier:          /nIc6Ex480Pv2jyFEGoj3r4fyV4Hn1Xo2lKeLotWUgk=
Subject key identifier:   77:C1:54:99:99:D4:7F:6B:58:0C:35:0B:FF:E9:8D:59:DE:09:03:6D
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E094EA2C48E9B1806DC60FF0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ea:2c:48:e9:b1:80:6d:c6:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=18eb48f7-0f2f-4ae1-a38b-08867a5222d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5f:4f:8a:81:90:3c:be:18:38:6e:1f:50:a1:
                    cd:38:79:13:74:64:d2:72:c9:35:49:2d:71:e2:1a:
                    96:2d:aa:5c:6b:c6:73:d5:2e:28:60:5a:c6:47:c6:
                    ea:dd:00:46:20:d5:de:06:15:96:c0:3c:98:e4:92:
                    88:23:45:7e:4b:3d:6f:f0:5c:15:b0:02:83:ee:2c:
                    1e:5d:97:58:77:f7:f5:69:5d:f2:e4:9f:f4:fd:a1:
                    63:9d:f2:4a:28:49:92:17:df:3e:9c:c6:37:13:56:
                    c8:64:20:67:db:ba:d5:cb:0e:1b:a8:a6:7d:d2:0a:
                    5b:ba:65:56:f4:08:b1:b3:3f:69:11:bb:f3:d6:af:
                    df:3d:74:71:f5:e8:48:0f:43:37:cb:5b:85:1f:55:
                    3b:01:4e:65:b9:fb:42:69:fe:75:d1:25:18:20:b3:
                    18:5a:62:fb:98:e5:5f:56:d4:1e:b7:31:6d:34:ad:
                    cc:48:7a:96:48:d7:75:0a:30:e6:95:47:93:86:61:
                    1e:ca:b4:ab:d3:03:8b:eb:e9:2f:46:c7:de:53:7c:
                    2f:e5:62:8e:54:f9:ce:cd:c9:bb:9e:58:fe:75:df:
                    64:81:ac:13:5d:7b:da:78:e0:bf:67:85:44:a8:c0:
                    c7:ad:8e:88:10:e3:f1:50:c8:db:f5:a6:d3:14:99:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:54:99:99:D4:7F:6B:58:0C:35:0B:FF:E9:8D:59:DE:09:03:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:83:0e:9c:17:fa:71:09:0b:19:84:8b:63:a1:8e:ad:bf:
         5b:1d:e7:04:7c:40:a1:69:ed:c1:39:d6:2b:13:50:31:e0:9d:
         ae:9a:59:cf:26:eb:9e:e7:93:29:fb:e5:e3:43:ac:3b:ff:9c:
         3b:5b:d2:81:ae:2d:a5:41:89:04:4a:b8:48:4a:44:78:59:bd:
         86:fb:df:6a:d0:48:64:dd:97:6b:08:81:46:c9:a3:3d:da:7f:
         11:cf:7b:45:97:1f:9e:0f:73:10:63:bc:cb:f4:bc:87:ac:80:
         1d:f4:cc:7f:ba:64:47:a4:1c:26:4e:a4:ef:0b:2f:f1:3c:8f:
         8a:01:7e:5f:a2:d5:f4:8a:e9:0a:eb:61:4b:b9:db:eb:a6:65:
         6d:23:7e:db:65:9a:7d:a6:e2:a2:19:67:20:17:4c:ba:27:b7:
         17:f4:be:cc:8d:4a:27:94:cc:4f:f7:29:cc:b9:20:71:2a:76:
         37:c5:8a:bc:be:06:06:b8:cf:a5:e0:33:11:02:c9:68:0d:e9:
         78:27:79:34:9e:4e:c2:96:6f:90:c4:a5:74:11:cb:f7:74:6a:
         48:27:2e:db:df:2b:80:13:67:d5:8d:7b:8a:a6:d0:59:8f:be:
         ef:46:71:7d:55:61:1e:9b:dc:25:49:ca:de:4a:11:a0:c6:56:
         9f:de:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org