Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
File:                     f40d0af2-a10e-399c-8b7b-63515888b194.roa (raw, json)
Hash identifier:          IZO0MiD7Nh/mbrc7CFJC/4qkRIn7at8i3rKSbH6jePg=
Subject key identifier:   11:32:03:8B:20:2A:7C:E3:ED:CF:40:B4:F0:48:83:A9:23:B3:55:7B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584540B786292F87814E93D6F468
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
Signing time:             Mon 18 Mar 2024 22:07:35 +0000
ROA not before:           Mon 18 Mar 2024 22:07:35 +0000
ROA not after:            Sun 16 Jun 2024 22:07:35 +0000
asID:                     36492
IP address blocks:        136.22.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b7:86:29:2f:87:81:4e:93:d6:f4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 18 22:07:35 2024 GMT
            Not After : Jun 16 22:07:35 2024 GMT
        Subject: CN=6c67bda9-16b4-4703-b829-f6b06b76efd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:94:c5:e7:de:07:d8:41:9d:21:78:6f:d3:
                    1c:a3:37:4f:97:f2:d7:99:87:79:af:a5:a7:43:6b:
                    08:4c:41:bd:bf:dc:7b:74:5f:cf:5a:2f:a0:37:bd:
                    2c:b6:cb:6d:59:e1:df:7d:11:a4:9c:96:9a:8b:ac:
                    ce:65:b5:8c:29:67:01:fe:86:c9:2c:82:53:ac:b3:
                    73:2c:9f:fc:d1:60:59:b7:82:ac:23:80:ad:90:4a:
                    06:d7:be:ec:29:fe:a2:14:00:a8:57:a4:9f:ad:90:
                    87:f4:21:c5:37:8d:58:d1:55:b1:c5:e3:4e:9d:fd:
                    67:65:24:e5:a5:b7:3f:2d:8a:d6:33:c3:a7:11:ec:
                    99:76:82:4b:ec:4f:34:9c:d5:51:78:1d:d2:d7:b6:
                    bc:fc:69:2e:dc:0c:99:29:fe:6e:de:b8:13:08:ef:
                    78:58:49:4b:3c:22:95:e9:07:95:25:fa:5b:1e:76:
                    bb:ae:e3:75:92:bd:d6:0c:9d:2b:80:43:72:47:05:
                    c8:73:4f:88:ca:1d:c9:3b:a0:57:22:31:80:7a:5e:
                    2a:77:24:3a:86:8e:9d:66:5e:2e:b4:03:52:60:b3:
                    3f:b8:31:9c:6b:8c:43:ab:52:7e:4b:aa:c8:7f:14:
                    b0:04:0f:16:5c:0d:36:ab:31:5a:30:ae:c3:db:ad:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:32:03:8B:20:2A:7C:E3:ED:CF:40:B4:F0:48:83:A9:23:B3:55:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ea:66:81:a9:b5:52:13:e4:63:ea:5d:f5:7f:05:d2:ee:a8:
         dc:f1:3e:79:2b:90:fe:65:96:52:ea:b3:b0:5c:d9:e5:8a:d6:
         40:74:c9:5b:eb:ab:51:01:19:ca:3b:ab:43:e5:06:5f:75:74:
         81:ab:b6:1e:58:d3:ec:8a:1d:94:77:20:0f:bc:6c:4f:50:b8:
         ca:48:3d:39:76:ff:b9:cc:1a:7f:8d:8c:3c:ff:f3:10:e4:d0:
         14:09:9a:89:04:4b:09:16:66:a7:1e:b7:55:b2:6a:24:4f:1c:
         0c:ce:0c:47:13:e6:8a:77:4d:b3:eb:b5:3f:30:71:ac:95:b7:
         98:bc:06:43:30:02:7b:9d:89:a5:a8:31:ab:cc:11:ea:ff:cd:
         70:ff:4e:84:88:81:97:0e:f3:58:e4:16:d7:3c:76:98:9f:af:
         ac:92:e4:8a:74:ef:f8:19:23:0f:72:a5:68:9b:fc:3e:e2:f2:
         62:42:25:ba:29:4d:be:dc:99:f6:77:f1:e6:e6:f4:25:99:99:
         8c:f6:78:93:10:12:29:4d:6b:5a:fa:51:80:9c:61:3a:0e:fe:
         57:c8:15:69:20:9f:e7:78:77:5a:86:58:3a:d4:6b:51:cd:23:
         ad:c1:45:37:32:fe:e7:d3:c4:2b:10:5a:9d:63:e5:95:dc:47:
         e0:c7:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:37 2024 by rpki-client on console-ams.rpki-client.org