Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa
File:                     a00b4080-e5b5-330a-89b6-fe1385a253f2.roa (raw, json)
Hash identifier:          t8Frpup6MS8/LAfYi6cH5mSVAmOzpGLt3vMbSjRbH6Y=
Subject key identifier:   0C:C3:18:1B:EA:B0:20:50:52:BC:5E:60:48:DB:D2:72:63:D1:36:CC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C582097701AD7BC5FCECD200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:09:77:01:ad:7b:c5:fc:ec:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b50fb6c5-d504-496f-9f98-72ba106beb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:66:52:f5:aa:95:38:e6:20:a1:d0:02:4f:
                    f5:1a:cf:d7:39:f2:b6:69:df:2e:8f:fd:e1:a7:a7:
                    7b:b4:fa:36:d3:82:a4:f3:d8:6c:04:5c:d3:7f:e2:
                    5f:36:7d:30:71:2c:23:ac:87:c6:c6:2d:96:c6:33:
                    d1:3d:13:5c:a6:81:fd:6c:06:c1:c6:65:a0:7b:b8:
                    57:a1:56:93:50:8e:12:c5:71:b1:a6:9d:6f:cd:e0:
                    25:0b:1c:e6:4f:de:61:cf:88:64:e1:d3:2a:45:ab:
                    2d:6f:a4:a8:35:28:39:72:85:b0:1a:ee:ca:9e:ce:
                    29:56:68:83:60:fd:77:50:e4:b5:53:3c:21:38:41:
                    bb:e9:1b:37:0d:5f:41:bf:09:27:2f:7e:20:4e:75:
                    5a:d8:fd:2b:33:a5:67:e2:6c:36:8a:60:3b:bb:6d:
                    86:b9:61:1b:f6:f6:75:a7:f0:28:40:15:8a:bf:bc:
                    05:5e:cd:f6:91:61:fc:24:7c:cf:1d:c9:81:38:a2:
                    2b:fa:58:1a:e2:4a:8d:de:bd:b9:c2:68:b0:9e:1f:
                    4d:f5:37:b4:b5:db:9d:fe:c2:f2:72:8b:a2:3d:f9:
                    53:73:2c:b4:3c:cf:00:db:3c:23:51:e0:4b:67:3f:
                    82:cf:94:25:25:9e:7a:2f:42:9a:20:3b:e9:bd:5e:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:18:1B:EA:B0:20:50:52:BC:5E:60:48:DB:D2:72:63:D1:36:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:83:ac:48:5e:e4:15:d2:0d:74:99:04:69:51:39:34:14:
         cc:52:77:83:78:34:7b:7d:ba:e5:a0:92:59:0f:57:96:d5:62:
         ee:f5:8f:ce:7f:f9:4b:4c:ab:d6:91:62:49:a6:14:20:a8:67:
         c5:bf:a2:46:c5:a1:d4:1f:12:2e:f3:ee:8a:57:2b:b3:9e:7f:
         19:a7:4e:88:a1:e7:16:c8:30:f3:9d:55:92:63:42:1b:e2:80:
         e5:ce:16:ec:69:3a:d1:8b:a9:de:53:57:26:fd:d9:4e:b9:21:
         13:11:54:4d:dc:f7:9f:b7:ec:7e:a8:d2:b6:96:79:20:0d:87:
         f4:4f:e8:af:47:15:53:d4:ce:29:79:d7:b6:37:7d:af:b9:0a:
         7a:80:b2:79:c1:09:aa:af:11:a0:28:50:5a:c6:00:90:b2:d1:
         d4:09:cf:b2:27:7d:dd:f0:bd:3d:63:51:96:74:d9:bd:37:bc:
         6a:a6:7d:3c:10:6c:fb:6f:13:d7:5f:5d:b2:a6:13:98:c5:50:
         f0:89:a5:0a:8e:92:5b:83:a0:31:f9:7d:ec:58:74:14:df:29:
         50:97:f1:89:33:a8:50:4d:a5:c9:52:44:84:b5:c4:ec:bb:ce:
         68:80:22:01:3e:2e:46:a3:69:df:9e:89:62:6b:04:3a:65:cc:
         e9:d2:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:43 2025 by rpki-client