Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa
File:                     118f5b01-7f55-3165-a8e4-3128d1f6327a.roa (raw, json)
Hash identifier:          CvD45DSoP1KC7elOzZCsQ3LTApXwc+wFPMcl/d2l4Ww=
Subject key identifier:   B4:62:19:DF:59:FC:A4:D7:81:22:CB:14:71:AD:F9:42:C2:A4:81:76
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58215AB2225A96F9076DAC0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:15:ab:22:25:a9:6f:90:76:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fa4d0f72-a940-48fd-9579-3127920a98ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:01:88:eb:30:17:bf:18:87:bd:28:3b:cf:
                    7d:1a:6c:e8:b1:1a:a2:9c:64:0d:29:2a:ea:a9:22:
                    f1:9b:72:a7:c7:29:f4:5b:66:93:26:78:1a:2a:1f:
                    db:45:ff:8e:96:b4:3d:61:d8:f8:eb:31:1b:85:fa:
                    b0:33:98:63:af:b3:fe:f0:46:cc:fa:e0:fd:dd:d1:
                    29:e7:0a:78:83:86:25:41:f6:d4:ce:f4:3e:7d:c8:
                    78:e9:02:8b:7b:eb:54:de:93:b9:51:05:04:1e:10:
                    fc:76:56:c2:53:87:c1:09:fe:a2:36:92:d6:b2:fd:
                    53:a2:f1:00:3e:4f:54:92:72:bf:56:b6:91:b6:5e:
                    ff:ed:f3:ef:4e:be:5d:7e:bf:43:19:71:35:05:10:
                    58:61:2d:dd:b5:cc:5a:1e:d3:03:73:8e:ac:09:94:
                    23:01:ef:cd:02:f5:05:18:7f:b4:fe:cf:66:00:18:
                    62:63:65:6c:4c:aa:51:d8:af:74:96:af:9e:1b:a8:
                    33:10:a8:93:e2:d4:d5:56:d4:43:29:b6:f6:39:28:
                    c9:4f:91:19:18:82:27:9d:51:c1:fc:8d:2f:ee:fa:
                    32:c3:46:2f:e2:ae:d3:4c:0f:4f:1c:5f:0f:d8:81:
                    dc:5c:07:c8:e5:63:11:96:47:bf:71:a6:6f:b5:f7:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:19:DF:59:FC:A4:D7:81:22:CB:14:71:AD:F9:42:C2:A4:81:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/118f5b01-7f55-3165-a8e4-3128d1f6327a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:e0:09:22:96:bf:19:c6:c7:d8:c2:7d:94:6e:6d:3f:a6:
         99:0f:67:86:ec:54:e6:07:66:da:c8:bc:55:bd:d9:c2:a5:1f:
         85:14:91:3d:f0:51:3f:20:a3:bb:eb:a6:0e:35:e7:4b:cc:3b:
         17:fe:5e:40:78:f9:18:db:6e:c3:a8:d2:7f:8c:6c:ff:d1:3c:
         35:2b:62:7c:41:51:4f:05:c7:36:b7:11:ef:0d:9d:3a:b8:c1:
         8c:93:cd:e9:ac:48:7d:ed:4b:1b:0a:d8:fa:b3:5d:bb:0d:1d:
         7e:0f:5d:3e:fc:4a:fd:24:cd:84:a2:bc:51:d1:60:30:b8:f4:
         60:5d:5e:6a:07:a1:a1:cc:5a:c0:cb:7f:92:44:25:cc:a8:72:
         18:0c:ae:8f:05:02:7e:b7:01:b8:a3:f5:4b:a7:7e:c5:1c:aa:
         e0:c8:9d:7c:57:72:c4:f9:e5:4a:4e:0f:9f:4f:57:b7:1e:71:
         be:1e:83:53:18:2f:eb:84:74:b3:95:d6:b6:b5:b2:bf:cb:af:
         f9:13:2d:81:08:c7:c8:c3:db:02:92:b8:27:c9:a4:52:81:60:
         dd:6f:42:74:a6:a4:52:27:5b:ea:67:e3:62:14:54:80:80:e0:
         1a:39:21:97:a5:b6:f5:97:2b:f1:59:2b:9c:1f:23:dc:db:bf:
         98:e5:66:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghWrIiWpb5B22sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmE0ZDBmNzItYTk0MC00OGZkLTk1NzktMzEyNzkyMGE5OGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaQBiOswF78Yh70oO899GmzosRqinGQNKSrq
qSLxm3Knxyn0W2aTJngaKh/bRf+OlrQ9Ydj46zEbhfqwM5hjr7P+8EbM+uD93dEp
5wp4g4YlQfbUzvQ+fch46QKLe+tU3pO5UQUEHhD8dlbCU4fBCf6iNpLWsv1TovEA
Pk9UknK/VraRtl7/7fPvTr5dfr9DGXE1BRBYYS3dtcxaHtMDc46sCZQjAe/NAvUF
GH+0/s9mABhiY2VsTKpR2K90lq+eG6gzEKiT4tTVVtRDKbb2OSjJT5EZGIInnVHB
/I0v7voyw0Yv4q7TTA9PHF8P2IHcXAfI5WMRlke/caZvtffdTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRiGd9Z/KTXgSLLFHGt+ULCpIF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMTE4ZjViMDEtN2Y1NS0z
MTY1LWE4ZTQtMzEyOGQxZjYzMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyB4Akilr8ZxsfYwn2Ubm0/ppkPZ4bsVOYHZtrIvFW92cKlH4UUkT3w
UT8go7vrpg4150vMOxf+XkB4+RjbbsOo0n+MbP/RPDUrYnxBUU8Fxza3Ee8NnTq4
wYyTzemsSH3tSxsK2PqzXbsNHX4PXT78Sv0kzYSivFHRYDC49GBdXmoHoaHMWsDL
f5JEJcyochgMro8FAn63Abij9UunfsUcquDInXxXcsT55UpOD59PV7cecb4eg1MY
L+uEdLOV1ra1sr/Lr/kTLYEIx8jD2wKSuCfJpFKBYN1vQnSmpFInW+pn42IUVICA
4Bo5IZeltvWXK/FZK5wfI9zbv5jlZlA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:44 2025 by rpki-client