Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/17884b62-647e-376c-897a-490cbb53f766.roa
File:                     17884b62-647e-376c-897a-490cbb53f766.roa (raw, json)
Hash identifier:          bw1TLnLjyQkxWlyZiqel4eFXYWtIq3uFYDk/fRTcYHM=
Subject key identifier:   14:41:62:6D:4F:1A:A2:27:86:77:2E:A0:B4:F7:F7:B3:37:81:FF:26
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C581769545B512888B9EF880
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/17884b62-647e-376c-897a-490cbb53f766.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:76:95:45:b5:12:88:8b:9e:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ffac7ffa-ce57-4906-a065-a75a743ecdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:2c:64:01:44:d0:c3:ce:3b:27:b2:28:87:
                    d6:31:25:a2:70:4c:84:88:1e:77:56:ba:06:05:3e:
                    d2:82:70:61:4a:4a:2a:51:4c:35:f0:ea:95:4a:08:
                    9d:54:21:d9:9b:31:de:ea:87:99:e3:2b:85:21:d7:
                    83:0e:b9:6f:b8:23:f8:52:2f:22:de:21:30:bc:a7:
                    b2:8c:ee:7b:b7:53:82:8e:65:31:2c:93:50:20:f9:
                    ce:eb:36:24:58:e1:c5:6b:cf:73:46:13:af:ea:c9:
                    38:47:3c:0c:b0:6e:2e:69:6f:ed:94:e0:1d:dd:c4:
                    93:54:a7:96:90:12:dd:61:f9:d4:35:61:82:ef:5b:
                    94:28:f5:fa:17:4a:53:ec:25:3a:56:91:59:fc:d0:
                    d2:18:4a:91:2c:9a:d8:98:ad:a2:a7:2a:87:5e:da:
                    a7:ad:70:55:f3:0d:d7:a4:ad:77:7b:87:9b:eb:6b:
                    e7:26:70:34:45:2c:ab:b2:4c:3f:32:4a:60:06:25:
                    0f:3d:81:ae:15:89:9a:63:d3:3c:ab:78:a2:23:72:
                    0e:e1:4f:2e:1f:e9:d7:58:b8:c5:7b:90:ca:ae:bc:
                    01:12:e7:a4:7b:3d:64:6f:1a:9b:97:f7:07:26:22:
                    a5:39:10:50:87:b5:6f:57:25:f0:2f:4f:ed:42:ef:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:62:6D:4F:1A:A2:27:86:77:2E:A0:B4:F7:F7:B3:37:81:FF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/17884b62-647e-376c-897a-490cbb53f766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:0b:4b:3a:01:a1:28:f8:20:03:a5:13:02:25:b6:3a:80:
         2d:c4:74:52:e9:a9:41:8a:2a:9f:f1:de:e6:6d:da:5b:b4:13:
         27:fd:82:ba:e9:75:22:12:7d:5f:f9:06:43:52:0b:1e:61:51:
         6e:72:a3:83:18:d3:d6:14:22:95:a2:a0:c3:a9:c1:60:f6:99:
         b6:b5:70:d4:e4:bc:de:ac:e9:46:9e:60:08:0e:dd:a9:60:68:
         c7:b9:bd:b8:97:7e:37:ae:1a:a2:8c:d4:f1:be:f7:ac:ae:9d:
         5d:3d:69:6d:cc:2a:91:c7:5b:b9:af:4f:85:69:0e:a3:fa:f4:
         bb:be:51:eb:da:99:8f:2f:b9:98:06:f5:8c:91:52:c3:3f:d9:
         35:ac:2d:7a:aa:cc:d2:e5:54:13:54:0d:bc:80:bb:6e:58:2a:
         1a:6f:f9:70:a9:e7:cb:d8:f9:42:6e:67:f0:71:10:77:19:ec:
         55:d4:9b:6d:d1:03:25:b5:1c:3e:6c:95:de:03:67:7f:7b:06:
         07:90:8d:df:45:49:2b:96:64:1f:bc:0d:72:fa:f2:05:f0:71:
         1e:8a:c3:c8:02:27:cd:d4:8e:1e:66:35:e9:a7:48:f5:4c:5c:
         31:3c:e8:99:61:29:10:96:64:1b:00:0f:63:d9:b3:1b:2f:d8:
         19:d0:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:45 2025 by rpki-client