Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa
File:                     e52a90f5-af15-3ad5-87aa-d20655f58420.roa (raw, json)
Hash identifier:          YOSoVqMFaCxhar1xtFaL/cHhmk3+vj8Nk5ya0ZF58IM=
Subject key identifier:   14:09:1C:46:7B:84:C1:95:77:7D:D3:06:5F:9B:8C:70:B3:89:DD:36
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C58202C93A890D7D5324BC80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:02:c9:3a:89:0d:7d:53:24:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d2070c1e-7042-4b55-872f-c8abf2daf9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:36:bf:9c:0f:c5:51:71:fb:e4:38:e7:47:
                    22:21:75:4d:8c:74:2a:d6:9f:6b:51:e5:0e:8e:55:
                    54:6b:a1:85:83:5c:8c:db:e5:c9:fc:52:fe:9d:ac:
                    8a:af:b6:25:00:34:11:87:14:94:e0:2d:f5:2b:9f:
                    68:2e:07:62:a7:e3:40:c0:a8:14:a8:97:b5:29:1e:
                    49:b2:39:06:9e:40:ae:52:4e:02:d7:81:d3:f9:1d:
                    64:c6:56:d2:a7:cb:06:44:87:1b:44:9e:3c:c0:29:
                    70:08:eb:00:b2:a0:7b:6d:e0:de:56:10:ca:1b:17:
                    fe:30:7c:5c:9f:a4:da:d3:53:b6:a2:83:63:28:3a:
                    87:c4:81:b9:3b:4f:fb:74:06:dd:8a:21:dd:5e:09:
                    33:1d:36:50:5d:f5:3e:8c:16:2f:e7:0f:00:6f:49:
                    f3:7a:dc:89:6a:38:21:df:e3:9a:ff:d9:ad:e9:46:
                    8a:af:36:3f:db:d7:07:06:4a:9b:62:eb:59:1d:2d:
                    ff:52:77:8e:d8:ae:8d:eb:2a:57:d3:64:e7:c8:5e:
                    88:04:91:10:e0:64:76:d9:42:42:e1:2e:fd:8e:64:
                    84:7e:ae:eb:27:8a:fd:f9:6d:be:fb:0c:e3:df:b0:
                    79:ab:aa:5d:ac:81:f4:61:12:eb:fe:3f:d8:4e:0b:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:1C:46:7B:84:C1:95:77:7D:D3:06:5F:9B:8C:70:B3:89:DD:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e52a90f5-af15-3ad5-87aa-d20655f58420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:69:45:44:ec:25:a6:d7:76:ef:d4:87:78:24:8e:0e:b9:e0:
         51:84:c2:29:a2:86:a4:af:b1:87:b3:b5:22:74:5a:76:e1:a4:
         10:ce:98:d4:77:1a:eb:ec:94:06:60:f9:de:c8:a4:4f:b5:ce:
         7a:69:ba:73:bf:f7:27:e7:83:c2:8f:c6:7f:84:b1:65:d0:c3:
         87:b9:1d:b0:ff:5c:9a:f9:56:90:05:87:5e:cd:4d:3b:97:4d:
         eb:54:ca:71:2b:cd:5d:32:c6:3f:9e:58:61:f4:02:7e:28:9b:
         8c:04:dc:e3:9a:54:87:0e:b4:a6:5c:c2:52:45:9e:17:c2:64:
         ca:68:d6:05:eb:4f:c5:56:54:3c:85:83:e2:2a:1c:21:b0:eb:
         4d:0d:79:8d:7a:44:c3:68:95:13:30:2e:09:a2:7c:dc:f1:90:
         28:2b:75:f3:02:6c:84:b0:d3:d5:e9:fe:07:17:bc:31:99:78:
         3b:04:e1:a8:15:ce:2b:b4:16:b5:6c:26:95:6d:ab:95:77:06:
         f2:64:93:2a:ac:e2:3f:5b:32:92:85:38:28:c9:c3:07:f0:92:
         7c:92:9d:07:3d:37:86:c0:9d:70:1a:2f:f7:06:30:f7:90:b5:
         7d:54:09:7b:0d:61:0a:95:e5:2c:8e:78:73:ed:a8:68:33:9e:
         db:00:e3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:03 2025 by rpki-client