Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36147.roa
File:                     AS36147.roa (raw, json)
Hash identifier:          rUcO+hhKdvHZm96u2dZ1zhghGO9oLBcL1HClBKL+uRA=
Subject key identifier:   98:19:03:27:21:1C:80:30:79:C1:2B:04:E2:1C:49:9B:4F:38:0F:6E
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       6AC156F7F92A4AFCD48AB5948C806F247884B587
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36147.roa
Signing time:             Fri 08 Mar 2024 17:49:02 +0000
ROA not before:           Fri 08 Mar 2024 17:44:02 +0000
ROA not after:            Fri 07 Mar 2025 17:49:02 +0000
asID:                     36147
IP address blocks:        23.130.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:56:f7:f9:2a:4a:fc:d4:8a:b5:94:8c:80:6f:24:78:84:b5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar  8 17:44:02 2024 GMT
            Not After : Mar  7 17:49:02 2025 GMT
        Subject: CN=98190327211C803079C12B04E21C499B4F380F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:50:38:40:da:c8:d3:f5:a6:1c:9d:62:6b:
                    9e:25:37:74:0c:d8:be:96:78:b1:d2:9d:55:46:c0:
                    27:49:7c:37:c5:1c:03:93:59:e1:7b:3c:0c:b2:b5:
                    76:ce:ec:cc:fe:62:49:86:24:aa:96:b4:2b:e2:90:
                    02:36:88:42:1f:28:8d:7a:54:2e:a8:7f:47:77:8c:
                    82:5f:d1:3b:0e:1f:ca:b7:5a:80:bf:6d:25:21:12:
                    c6:1e:29:07:3f:4b:69:67:12:4f:a4:13:49:1a:9e:
                    ea:70:2b:85:a1:d3:66:51:07:8c:58:ce:6c:b6:66:
                    b0:b5:fb:53:87:cb:45:24:bb:13:da:2b:35:71:28:
                    af:7c:7a:2e:75:f4:0f:81:92:35:c7:17:76:6f:12:
                    72:45:52:97:e6:11:2f:dd:77:18:7a:72:34:f8:12:
                    48:0c:47:93:3a:e4:f5:2b:a2:2c:2b:86:fc:66:a1:
                    01:e7:a9:55:70:2d:37:ad:72:a6:db:18:e3:d9:8c:
                    d4:32:5a:d2:66:b4:92:b1:18:64:49:14:a0:ae:2c:
                    66:6a:7a:65:94:1a:66:5a:da:d4:81:87:44:6d:91:
                    6d:d4:e4:eb:30:ce:d5:8a:83:d6:e4:29:7a:4d:f8:
                    50:14:38:01:3e:65:2e:79:98:59:6d:be:a8:a4:9c:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:03:27:21:1C:80:30:79:C1:2B:04:E2:1C:49:9B:4F:38:0F:6E
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36147.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:cc:d1:d7:8a:7c:33:5b:60:79:6b:1f:5b:a4:3a:ba:a5:
         65:ec:c7:ff:5c:39:74:df:3d:62:eb:90:9e:fe:9f:31:84:9b:
         fe:4e:d4:98:1b:e5:1e:60:87:30:83:00:11:ce:c5:4a:8c:aa:
         cf:90:c6:b7:b1:e4:74:2a:f7:e9:74:dd:5b:30:18:61:8a:84:
         04:0a:66:6d:9b:e6:f5:45:ed:d9:87:1c:4c:cc:a8:66:95:e6:
         09:ed:bc:a0:29:51:ed:79:12:7a:82:67:12:e1:c1:af:9b:22:
         c8:57:d9:5e:fc:49:57:fd:3d:a3:25:fd:20:60:f8:0d:0c:fb:
         10:7d:3f:fd:ff:d9:ac:9f:dc:57:c3:03:eb:ff:28:c3:81:52:
         34:ec:e9:29:77:c5:de:c7:09:8c:a6:9d:04:8d:54:6e:e8:44:
         8e:0d:2f:ca:e3:fd:83:89:9a:ad:7c:46:e6:65:4c:84:48:fe:
         e6:2a:a6:90:d4:0a:e5:59:9b:1d:30:5b:6c:6e:cb:91:33:e3:
         82:c1:28:af:15:b5:2f:84:7a:fb:12:b8:2e:d7:dc:3a:a8:d9:
         83:31:ee:51:61:5f:65:2f:e8:23:d3:62:7b:30:e2:2f:5d:22:
         b8:5e:6a:c1:e6:28:bb:68:d8:04:6f:96:82:81:e2:62:27:c6:
         10:8a:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:40 2024 by rpki-client on console-fra.rpki-client.org