Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/70765981-beaa-37a9-aad8-080af992939b.roa
File:                     70765981-beaa-37a9-aad8-080af992939b.roa (raw, json)
Hash identifier:          AfKvqpbzoyBhLZpQX9GH1ARerInJHrdzgtqwgaMZaY8=
Subject key identifier:   F2:FE:DD:FE:80:70:F6:4F:D0:67:EB:16:6E:1C:5E:30:25:70:86:7F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58221B8CAE5EBF21CC58D80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/70765981-beaa-37a9-aad8-080af992939b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:21:b8:ca:e5:eb:f2:1c:c5:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0261023f-486d-4b16-b6c1-d2be6a1095f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:a0:c5:a9:e1:c5:2e:2a:89:5b:a3:53:05:
                    12:21:8b:3c:6f:09:cf:39:7c:11:b3:e0:ee:e5:cd:
                    5f:d4:38:5e:ae:7b:39:7a:5e:a5:37:e9:46:f5:81:
                    7c:eb:4f:41:32:59:3b:34:b2:87:8f:3e:de:56:05:
                    1f:fd:9b:5e:e4:29:16:44:c4:76:7c:48:a9:ec:7b:
                    1b:fd:6e:6e:91:0c:b7:d6:27:3b:02:7c:c3:c3:0c:
                    e9:7b:b3:60:79:bb:93:c8:02:ed:2c:0b:70:e8:f0:
                    49:13:9c:0c:9b:29:50:23:b5:de:a5:65:a5:e0:4e:
                    67:b2:b4:42:eb:2f:20:b5:54:38:2d:74:60:88:88:
                    b0:8f:68:51:b6:63:09:17:25:02:2d:d8:9c:78:8d:
                    e5:42:c0:6d:f0:a6:ad:b2:e7:c3:2b:97:c4:2d:80:
                    43:ee:e2:c2:f8:12:c3:35:80:6f:a9:61:76:65:0c:
                    dd:ff:c4:b4:80:be:77:c9:5c:41:07:3d:09:f7:30:
                    ba:12:bf:0d:81:4a:4a:ff:da:2d:3b:40:af:c6:10:
                    db:f3:de:b7:82:57:7e:65:d3:72:a8:a1:03:f4:e7:
                    bc:79:21:f5:86:02:0c:e2:ea:0c:fb:05:68:09:ce:
                    74:26:d4:a8:5e:76:3b:10:21:e2:00:16:08:95:01:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:DD:FE:80:70:F6:4F:D0:67:EB:16:6E:1C:5E:30:25:70:86:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/70765981-beaa-37a9-aad8-080af992939b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e2:1c:a1:85:c0:9d:2e:35:42:fb:c1:55:9c:52:16:27:b0:
         b2:0d:d9:ba:50:34:a2:d6:f3:29:9d:b0:99:6b:90:73:36:29:
         0c:2c:53:61:5e:54:e7:cb:9b:87:ee:d6:8f:e8:32:ea:94:76:
         8d:8f:5a:71:b3:2e:a6:52:7d:3f:92:5d:f3:be:04:43:a9:3e:
         d7:59:8d:6c:e8:3d:0f:b0:9d:17:d6:27:0e:05:86:8a:11:07:
         1b:44:8f:18:26:34:13:0e:5a:a4:1f:0f:03:25:12:11:0d:61:
         b5:31:ee:98:64:f1:16:d7:62:d4:15:af:37:7b:f4:28:39:03:
         3b:fa:1a:f4:54:1d:9b:45:77:e4:ab:47:c7:58:97:62:5a:ee:
         2c:09:fc:47:65:74:4c:7b:df:a1:40:32:a0:48:39:dd:55:6a:
         4e:89:86:19:5d:5f:2e:7e:24:67:aa:66:e7:3b:19:53:6f:87:
         8c:08:c4:e4:e5:3d:1d:6b:6f:66:16:70:fd:a5:76:94:84:1c:
         e5:cb:2f:2b:79:be:ab:19:9d:f0:3f:4f:8e:fc:40:0a:8b:b8:
         fd:77:f1:c3:85:6a:f9:e0:f7:de:6a:86:92:65:7c:60:1c:04:
         07:ea:ad:9b:4b:c4:63:20:fd:13:ba:36:79:b4:f8:1c:c1:19:
         a8:5c:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:23 2025 by rpki-client