Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa
File:                     ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa (raw, json)
Hash identifier:          1k/N0h8WrMvd4BW4ghDQlJNzrWoYAluw1h4dpBBqGUk=
Subject key identifier:   98:BC:7D:E1:06:3E:A6:CA:12:9B:E7:3F:B6:AC:61:3B:36:03:0E:9B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C5823134A36135E78C28C380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:31:34:a3:61:35:e7:8c:28:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=bb3acc97-cc17-4232-8adf-6a6670f18dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:e9:a3:26:d0:c1:b0:26:52:32:f2:f0:77:
                    91:d7:ab:68:cb:83:42:78:c3:d5:10:26:b0:cf:f9:
                    23:3f:e2:bc:f4:55:68:72:77:5a:d9:a9:0d:86:eb:
                    59:46:9a:2d:98:24:86:d2:db:a8:49:32:48:d5:70:
                    ec:d9:57:12:2a:8a:68:f7:64:b0:e7:84:33:d6:88:
                    08:72:14:86:12:6e:9e:77:78:57:f1:f8:32:c6:7c:
                    5a:d3:ef:10:3b:1d:28:e9:84:4f:be:e3:55:e9:57:
                    32:7a:18:ab:e5:4a:6d:03:d2:b0:35:fd:46:00:19:
                    74:fc:36:f2:a5:7b:38:3a:3f:43:f3:0e:bd:33:fc:
                    28:d1:9e:01:84:b7:b8:32:5f:b2:ca:e6:f0:f4:08:
                    65:e0:fe:5b:b8:a2:54:2f:c7:10:c4:97:20:5b:f5:
                    1a:5e:50:19:37:12:f7:65:de:e2:b3:5f:1e:ad:d7:
                    0a:f4:b5:25:8b:df:28:0f:79:13:0c:cc:b2:b7:c9:
                    2e:76:99:fd:a6:65:c4:22:d3:0d:34:8b:29:8b:b7:
                    10:82:1d:d9:49:1d:bc:7c:19:0e:71:90:5e:1f:f1:
                    69:c0:65:9b:bb:3f:76:30:1f:65:08:6e:28:51:9e:
                    59:ee:f0:00:17:84:85:51:1f:d6:de:c6:ae:61:f8:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:7D:E1:06:3E:A6:CA:12:9B:E7:3F:B6:AC:61:3B:36:03:0E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6b:f7:74:69:2b:b2:33:d9:81:c1:25:3b:0f:42:af:98:94:
         25:30:65:d2:d5:6f:29:ec:8f:ed:64:a9:b4:55:7f:67:10:5f:
         17:e3:b6:58:10:9d:fb:7b:87:37:eb:f0:a8:88:c0:3a:09:8c:
         84:da:6d:a0:df:ae:4c:72:9a:35:c3:40:50:26:d9:8b:17:87:
         90:61:3c:42:f7:6f:3c:9a:12:a2:03:b8:f3:58:0d:aa:0a:b2:
         70:08:92:11:8e:17:e7:c4:d0:ac:19:c6:5c:d8:0b:b3:a8:68:
         6e:f8:6c:cc:f5:fc:80:10:7a:98:3c:19:f8:57:3d:2b:12:d5:
         d1:22:2f:e6:88:bd:53:0b:4c:b6:48:6f:62:86:c8:34:c8:82:
         0b:7b:2b:9e:96:45:67:62:8b:f0:a3:19:42:3f:e6:59:12:fb:
         c6:ef:b5:ab:9e:c4:2e:d0:23:23:97:19:8f:9a:95:6b:3f:9c:
         0c:1e:76:d1:ec:63:05:94:0b:f7:6d:14:55:2d:69:32:11:17:
         ba:55:fd:6f:72:02:23:d1:28:fd:ab:a3:60:71:7a:0f:95:6c:
         f1:a1:91:6a:19:74:1b:e2:36:ed:15:31:3b:05:da:98:d5:ed:
         07:77:a2:7b:e7:6e:08:46:c7:14:40:2f:3e:50:58:76:77:24:
         69:91:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:40 2025 by rpki-client