Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa
File:                     07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa (raw, json)
Hash identifier:          7m+R8szZs8poloMhFbTpAytax64rzrKtdp87ngVn0j8=
Subject key identifier:   93:E5:34:3D:30:20:E2:BD:C8:87:E5:74:4B:75:71:9F:B2:2B:DD:82
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B447CC7F4B7648203EF78
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:44:7c:c7:f4:b7:64:82:03:ef:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a5ffbc7a-d39d-4071-a089-ab9cc0ac878c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:e3:46:1a:ad:09:ae:dc:86:81:58:d0:d4:
                    9c:71:d0:73:e6:ca:07:c5:8c:16:c1:fd:83:22:09:
                    68:d4:77:7e:dc:69:84:f4:62:ac:7d:82:0e:af:45:
                    38:db:c2:7d:e2:ec:6e:6f:06:2c:a2:1d:b8:0b:55:
                    d0:f1:38:88:f4:2e:52:a6:0b:26:4c:3c:95:92:4b:
                    47:b1:5d:fa:53:69:a7:e6:ab:7f:a5:71:30:7e:09:
                    7c:64:2f:79:34:a9:41:8f:9b:7e:7c:b7:88:c1:c0:
                    8c:29:e0:e4:f2:c6:f5:5b:a1:1d:4d:42:20:b2:e7:
                    56:3c:b3:fc:2c:8b:c7:f7:9b:43:77:57:30:bf:2a:
                    ad:5b:65:1f:38:5b:ea:51:5e:95:b6:bc:d9:e8:84:
                    e6:7f:a2:3c:41:f7:cf:f6:05:37:99:97:43:72:de:
                    b0:0f:27:63:0a:0d:b8:b4:9f:76:d1:b0:3f:e0:eb:
                    a5:81:92:6a:a9:83:03:4b:0d:1f:27:29:f3:93:1a:
                    ba:cc:25:86:c6:a1:cd:39:9b:f9:69:24:2f:66:1a:
                    36:75:7e:65:69:06:02:be:8b:08:60:6f:4c:d3:45:
                    c3:e2:ca:f7:e9:80:ce:35:9a:1c:9d:fb:b7:8b:7f:
                    60:2a:28:77:0b:57:ad:b0:5a:3e:9a:b8:83:b2:5f:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:34:3D:30:20:E2:BD:C8:87:E5:74:4B:75:71:9F:B2:2B:DD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/07e15b06-2c48-3f47-b133-4e94bb31fd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:aa:08:76:0f:e2:63:19:93:5c:e1:cb:01:13:3e:b6:c9:
         70:85:e4:ea:2f:59:1c:3b:1d:78:eb:24:02:bc:4f:0f:cf:2c:
         5e:33:4d:43:b8:d7:1d:89:73:b9:4e:55:49:ad:ce:b4:99:2f:
         ad:56:96:af:ba:11:da:b8:d9:7a:ce:35:7f:4e:13:db:11:6f:
         9a:b4:78:0b:c2:be:e8:a2:ad:ae:83:03:00:3a:26:75:87:94:
         80:0a:73:98:38:ec:84:92:ee:46:92:9b:17:7f:b0:69:f4:4f:
         bb:3c:28:62:61:df:21:ea:eb:ef:10:75:64:8a:06:83:17:ae:
         38:28:dc:f8:17:97:64:0e:31:84:2f:42:05:d6:1a:28:c3:86:
         b3:93:23:14:4f:a0:a1:d6:a0:09:f9:75:e4:84:fc:71:5d:13:
         3d:3d:e7:c2:dc:48:d9:1f:32:33:93:af:f9:dc:46:6e:1f:a5:
         a8:17:40:e5:6e:c7:47:94:40:64:a3:e2:5f:55:a0:4a:94:04:
         ef:70:5d:6e:ca:c6:1e:15:b1:35:3e:76:38:8a:30:77:72:a1:
         10:69:f2:a9:57:f7:89:0c:c2:7e:88:20:35:5c:95:7d:28:c2:
         43:29:db:5b:28:4c:ac:20:59:a5:0c:00:e2:ab:93:c4:8e:9c:
         8f:24:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org