Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa
File:                     0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa (raw, json)
Hash identifier:          JCL6PqMkxD0XwDwy0c7Yv10017m2rkaTrbD5RndW/9Q=
Subject key identifier:   FC:CC:5E:00:37:6A:BE:96:E6:EF:D8:AD:B1:F2:18:2C:1F:8C:52:9A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B2F460F79F017EA1B2B80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:2f:46:0f:79:f0:17:ea:1b:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d90be792-2cc8-455c-a266-2c614a2d798e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:95:8f:49:c3:48:c7:9a:58:99:ea:73:cf:
                    13:43:4d:9f:b2:42:42:e6:6d:47:b9:11:07:ef:04:
                    6c:7e:a0:72:44:c2:1d:cb:58:1c:f0:6c:cc:45:6f:
                    1f:dd:69:61:e7:e8:b6:3f:d4:67:0f:0b:d1:eb:96:
                    34:0a:5c:a0:49:47:52:67:44:7d:30:55:d2:d8:d2:
                    9c:b4:64:77:e6:d9:3c:e3:20:21:b3:3a:f1:02:5b:
                    bb:dd:8f:17:e2:c7:d9:7a:72:d2:a3:82:85:93:f3:
                    7e:20:9c:0d:91:f0:58:93:b4:db:66:12:80:6b:6e:
                    f0:c9:53:8a:88:16:2e:f2:7c:b5:90:47:3d:15:0c:
                    76:34:f6:2c:e8:60:23:fa:2d:a7:b9:92:b5:2c:f3:
                    b3:1e:dc:77:2c:d2:09:dc:5e:6c:0f:fb:91:ca:3a:
                    4a:5f:35:cd:af:1d:d3:2e:2a:10:f0:71:c3:77:20:
                    ae:7f:d2:7f:19:25:9e:64:90:1f:ac:21:47:fc:c3:
                    7a:bb:04:03:dd:ee:0d:9a:52:49:16:45:b4:ea:d3:
                    82:5a:4d:68:89:13:07:a2:a1:17:82:dc:14:56:44:
                    a6:e2:4e:d0:20:4f:b8:a5:d4:91:73:ab:47:7b:26:
                    82:f9:93:51:d3:7e:78:fa:32:13:85:39:11:ab:82:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CC:5E:00:37:6A:BE:96:E6:EF:D8:AD:B1:F2:18:2C:1F:8C:52:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0693a27d-1d73-3e3e-aebe-e78d012b5c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:27:12:d7:71:11:a4:5b:8c:ea:d7:08:e6:58:21:72:83:6f:
         38:88:9b:35:f9:2f:26:45:1f:38:55:99:78:fe:90:88:f0:f9:
         00:ef:0c:ec:cc:55:4b:93:04:0c:a0:e5:f0:88:06:99:66:ce:
         56:53:08:bd:d0:ac:3f:3c:ea:be:1a:7c:e8:b0:96:45:7a:0b:
         a3:bb:e7:52:c8:b7:5e:13:51:12:b8:72:af:c5:3b:d2:77:c7:
         27:81:50:67:0d:69:d4:89:55:51:f6:aa:a1:ad:48:d9:da:89:
         90:29:b0:9d:cc:98:54:a3:ae:e6:2f:ce:b8:40:65:a2:7e:7b:
         36:99:50:71:7c:8d:a1:75:65:91:ec:49:59:7e:9a:bf:16:16:
         8f:af:f8:46:ae:de:18:10:5e:f5:07:c9:49:5b:45:07:69:ce:
         1a:7d:a9:5f:3c:f5:13:92:ec:80:76:41:64:37:9c:bf:f6:4b:
         44:80:50:e4:da:91:09:2d:29:40:a9:03:c3:e7:d0:06:26:12:
         4d:b3:95:13:9b:2e:bc:c4:ae:b2:b2:38:8a:d9:49:9f:df:e9:
         f9:b9:95:7e:99:bb:47:43:c5:25:60:7f:a1:79:94:d5:f2:79:
         c5:36:e6:91:66:a6:39:eb:97:19:a1:56:12:39:84:9a:c1:66:
         87:80:c6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:40 2024 by rpki-client on console-ams.rpki-client.org