Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
File:                     37cc9905-b07e-3ac1-a6dc-921843b37658.roa (raw, json)
Hash identifier:          FbeSF1hNwSZhcA9CxWpVdVhWYqsGyQaZ025hKQD0xdM=
Subject key identifier:   79:27:C6:10:56:99:01:D0:36:BE:EF:17:57:13:E7:C1:5A:B7:17:F6
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58178243D561C95B83A1A40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:78:24:3d:56:1c:95:b8:3a:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=947c471e-3066-40c2-a402-4d232d55958e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:ac:45:e3:25:b9:78:bd:f1:b5:2c:37:ee:
                    74:a7:bf:dc:46:0e:ea:62:47:4f:79:13:5d:58:8c:
                    e8:ea:51:41:29:84:10:90:e0:ea:c1:e9:7c:bc:1d:
                    84:1e:a5:16:0a:03:f6:92:3f:3f:dc:88:42:e5:91:
                    b9:ad:d3:9b:d8:08:f6:b5:44:07:6b:be:55:60:22:
                    cb:fd:a8:c6:b5:1d:13:fd:68:97:ac:38:e0:03:2c:
                    c3:6c:3f:78:b1:6b:6f:d0:9d:4e:e5:37:e6:0b:0d:
                    13:a9:6a:2a:7d:1a:46:68:50:4f:95:61:70:68:08:
                    b4:69:a0:66:8a:86:2c:f8:b7:d7:43:d9:ab:7b:cc:
                    99:84:39:8f:5b:62:52:ef:61:9b:bd:4b:79:10:b4:
                    70:af:e6:f1:f5:56:4d:00:39:89:3e:3f:5d:9d:29:
                    04:95:f6:f5:f0:ca:f2:7c:51:bb:27:72:09:d0:d0:
                    04:a2:7f:b9:de:36:28:ac:ef:3a:a4:9e:cd:4e:1f:
                    b8:32:86:b5:d2:a8:ce:26:9f:5d:85:10:bb:4f:f0:
                    81:40:6a:af:59:09:83:1d:d2:5c:fb:bb:b0:37:f6:
                    37:ca:d6:c3:a9:99:c5:c1:4c:f1:fd:1c:eb:f6:d2:
                    d5:b5:8d:e9:c0:ab:78:d4:01:c9:6e:f9:9a:b5:ca:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:27:C6:10:56:99:01:D0:36:BE:EF:17:57:13:E7:C1:5A:B7:17:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:35:c8:09:37:c3:f6:68:c6:e7:ec:8a:7e:df:6c:1f:18:18:
         b3:6e:0f:d3:59:cf:17:e4:ad:83:76:61:41:63:c1:07:8e:1b:
         58:70:f5:f3:c0:57:c8:da:5b:2d:4a:ef:23:bf:c4:37:73:da:
         68:5d:96:53:8c:95:8e:d2:9a:d0:2b:4f:bb:99:ef:be:18:76:
         15:6c:93:bb:6f:c5:1a:31:a8:5c:08:9c:51:b3:a5:9c:eb:5f:
         db:9f:c0:04:e1:9f:ee:7e:6c:a1:e2:29:61:37:f0:ab:0b:21:
         d3:6c:77:5d:0b:19:ff:fc:87:ef:99:32:38:a6:c5:5c:8d:a6:
         fb:89:70:2e:c8:ad:43:c6:54:68:91:8e:5a:2f:dc:a9:c5:64:
         16:a0:4a:bc:d0:e3:b7:f9:e9:0c:66:af:1c:24:4d:72:89:0c:
         7a:1e:60:dc:32:77:3a:80:57:cf:2f:68:26:ae:59:48:2f:2c:
         8f:22:ac:c7:69:8e:73:f6:d3:77:76:2e:b4:3c:11:83:f5:ae:
         34:61:56:a6:d4:1b:b1:22:dc:07:37:40:9c:1c:c5:c0:30:61:
         ff:e5:f2:27:65:7d:90:30:d5:29:ae:8c:73:37:14:b4:3e:5c:
         37:86:df:8a:d3:07:d5:53:aa:7b:4d:bb:62:97:c3:4a:dd:4d:
         59:83:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:21 2025 by rpki-client