Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa
File:                     0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa (raw, json)
Hash identifier:          KjmJFmszWvdStgTRGMCIWSDlplnmHkrC5kyZQZF6YVo=
Subject key identifier:   00:A4:35:90:6C:2D:51:C9:3A:C2:AC:A2:D6:77:55:1A:7B:D9:27:F5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C581FE0E33453A0F58815380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fe:0e:33:45:3a:0f:58:81:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6ad35db0-5b41-458d-b009-0ebb7ecf1efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:98:f9:6d:d6:70:50:e9:c2:de:6d:04:7f:
                    f1:fb:86:9f:70:53:a3:38:2a:dc:7c:cd:2f:0c:f3:
                    23:a0:95:84:0f:91:03:25:2d:9c:6f:c9:5c:8a:58:
                    99:3b:7c:2f:b6:87:1e:64:5e:fd:57:07:4c:c1:b8:
                    11:24:23:ba:a9:f6:5c:1e:fc:41:95:4f:17:ad:1d:
                    8b:41:1e:26:54:06:ba:41:43:23:98:71:96:d0:af:
                    47:59:49:d9:9d:15:96:1b:36:54:dd:eb:62:bf:70:
                    ef:0f:15:21:94:63:07:57:16:28:43:a3:8d:6e:32:
                    d7:18:f0:8a:03:6e:e5:e5:f7:3c:5d:9a:4b:2d:ed:
                    88:9d:98:20:06:18:a9:cb:28:56:c8:54:44:b5:f0:
                    dd:f5:53:8a:84:f2:ee:ad:37:ac:6c:ee:8a:6d:32:
                    da:2d:0b:26:83:13:8c:39:fc:4a:9a:10:23:7d:33:
                    7c:81:64:f1:65:8a:07:1c:f8:8a:39:4e:e8:04:0f:
                    85:9c:7b:a5:f9:a6:22:9c:96:1c:3d:39:d3:88:54:
                    43:bb:0f:fa:f6:94:cc:8f:cf:85:2d:cc:ad:9a:9c:
                    ed:63:26:81:48:3f:63:b9:d1:c0:ee:f9:84:87:00:
                    c3:39:4c:fd:a7:80:5d:a8:67:99:75:8a:d7:c1:da:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:35:90:6C:2D:51:C9:3A:C2:AC:A2:D6:77:55:1A:7B:D9:27:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:27:a7:5e:68:1b:db:84:7f:41:90:df:7a:eb:3e:ac:00:4e:
         0f:b1:05:f9:ab:93:5e:82:5e:39:f8:14:88:21:ee:ea:c6:d3:
         1d:e5:1b:93:9e:36:ba:86:11:58:d0:e0:04:72:8e:67:bf:48:
         8c:11:10:75:fc:c2:b3:94:3c:1a:74:40:39:c1:78:43:d4:9f:
         46:92:25:dc:d6:eb:62:55:f7:7e:ad:c4:f4:07:38:0f:5c:26:
         3c:47:0f:db:9a:ae:ae:8b:a2:e2:eb:cd:e9:a5:1a:97:94:de:
         77:cb:ea:bc:90:5c:d7:a0:fb:59:d0:1b:68:59:8f:e5:3c:67:
         98:75:cb:86:d4:31:79:6e:82:db:90:0c:3a:8a:55:03:b5:32:
         df:f5:ab:2e:42:c1:cb:e7:07:41:2f:e1:ff:b4:57:94:2b:00:
         df:c2:75:34:00:bf:83:a0:13:7a:e4:d3:c7:f5:10:3f:d6:2c:
         47:96:51:1b:02:07:b1:76:00:ce:e2:ef:f5:22:d5:d6:39:d8:
         3d:c7:7a:80:54:02:21:24:fe:7c:be:97:cc:93:fd:10:da:62:
         54:a9:ed:f3:8f:83:2b:b1:5d:35:b4:39:85:e3:7d:3d:0a:ca:
         64:f7:55:69:14:18:f6:fe:18:cc:2f:62:55:b8:36:38:0a:50:
         b4:e0:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:31 2025 by rpki-client