Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/55534118-cbd1-3c8d-992d-8014df26b99a.roa
File:                     55534118-cbd1-3c8d-992d-8014df26b99a.roa (raw, json)
Hash identifier:          4IMEz7Dv3nlAOyPXEjlT8Z0aUldJigfoU6WVzshsOgY=
Subject key identifier:   FF:98:77:A6:A1:F7:60:A9:4D:F0:B8:DA:3D:76:C7:C6:40:48:F1:26
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C5816EC828F0FCCBD887C280
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/55534118-cbd1-3c8d-992d-8014df26b99a.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:6e:c8:28:f0:fc:cb:d8:87:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1e3ded38-2af4-430f-a52e-0155e0121eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:98:73:4a:e4:79:fa:9e:04:f0:79:17:5f:
                    bf:9c:0f:51:7a:8e:9b:ef:07:44:8c:50:dd:b1:44:
                    da:91:16:ef:f9:fe:2c:c3:c1:cf:f0:fa:ec:e4:ff:
                    5e:60:20:3a:f6:90:6a:43:08:1e:20:c0:d4:fe:ea:
                    bf:7f:cd:89:46:4f:c6:70:0e:0a:dd:c9:f5:d4:85:
                    95:96:8a:34:fa:15:ca:35:14:64:e3:02:07:62:25:
                    83:bb:61:00:4c:48:ac:48:aa:cd:75:d2:a0:a6:e1:
                    ea:b2:4d:af:b0:cc:d3:2f:10:47:53:94:6c:b3:67:
                    0e:3d:2f:c2:2a:b7:9e:a4:f1:24:d8:da:9e:59:09:
                    8e:01:8e:4d:b7:49:18:44:32:34:4a:96:ea:67:67:
                    be:78:30:3c:40:fc:26:52:f5:49:f4:77:a1:c4:c3:
                    f9:38:89:b8:03:55:29:a9:41:15:d1:4c:ef:97:e6:
                    55:71:d5:9e:37:d5:45:ab:03:25:49:bd:e2:81:c0:
                    c5:1d:40:42:43:9f:c5:b4:39:4d:31:0c:5c:a4:53:
                    15:9c:ac:51:61:d7:70:ed:cd:f9:fe:76:f8:60:c1:
                    e3:46:af:da:5d:68:65:73:bd:83:de:99:56:13:a2:
                    47:44:fc:fa:82:eb:87:3a:13:39:70:d2:7a:6b:60:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:98:77:A6:A1:F7:60:A9:4D:F0:B8:DA:3D:76:C7:C6:40:48:F1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/55534118-cbd1-3c8d-992d-8014df26b99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:f2:be:01:49:95:f5:6f:1f:c7:38:32:f4:ab:a6:f1:ab:2a:
         3b:65:fa:39:ca:90:0a:59:26:80:47:6a:ee:c1:7d:63:3c:07:
         01:c8:eb:bd:eb:03:2f:fc:5d:de:47:53:74:b2:70:52:0f:8f:
         e9:b1:25:bf:a3:ef:5c:2d:20:bc:dc:b6:46:c2:df:39:1f:91:
         04:47:bf:06:1d:7e:94:06:0a:26:49:c4:6a:3a:50:c1:4a:90:
         62:68:59:c0:ef:ce:79:01:69:51:42:7d:67:20:69:81:29:5f:
         5e:72:04:27:6f:bd:c1:bd:c1:6c:83:06:fc:b0:da:d2:0c:6d:
         93:20:68:21:ba:89:7d:23:9c:fe:c8:87:bd:53:0c:6c:30:23:
         06:a0:bc:e5:c4:24:c5:e6:53:a4:51:dd:2f:a0:0b:cb:bc:ea:
         90:02:54:69:7c:e2:6e:09:0a:d7:fe:b3:20:53:a0:c3:f5:45:
         de:3e:6d:e7:da:66:c8:b4:63:aa:49:53:5d:ea:7e:3c:9b:ad:
         09:77:b7:50:d2:ec:42:95:b4:16:a5:79:10:66:a2:dd:1a:3d:
         8e:f0:f4:5e:34:64:a6:14:7d:a7:6b:13:17:0e:75:3e:f1:cd:
         be:18:0f:e4:37:49:d2:43:0b:7e:cf:2b:42:4c:ae:1b:1d:38:
         41:6e:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:07:21 2025 by rpki-client