Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0eb7dc46-bc9d-3165-b012-a3a9796fb3be.roa
File:                     0eb7dc46-bc9d-3165-b012-a3a9796fb3be.roa (raw, json)
Hash identifier:          mR69l5V3u8DCMJncX2fYQkDGAWRsiPbxlzpS1hpqyNk=
Subject key identifier:   EC:C4:8D:11:79:C6:C1:E3:F9:9D:44:58:99:D4:CC:6B:E0:08:5A:2A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454626D5C7F4D3B72A918FF100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0eb7dc46-bc9d-3165-b012-a3a9796fb3be.roa
Signing time:             Wed 20 Mar 2024 20:50:54 +0000
ROA not before:           Wed 20 Mar 2024 20:50:54 +0000
ROA not after:            Tue 18 Jun 2024 20:50:54 +0000
asID:                     36492
IP address blocks:        136.23.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:d5:c7:f4:d3:b7:2a:91:8f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:50:54 2024 GMT
            Not After : Jun 18 20:50:54 2024 GMT
        Subject: CN=4d66d708-9b05-412e-93ff-b0f18638ba14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:98:bf:2d:c5:ae:d1:a5:31:45:e0:64:39:
                    2e:33:4a:ac:57:31:a6:d3:77:ed:97:8e:bf:86:67:
                    31:47:99:fc:18:44:51:59:16:55:b4:4f:17:f0:c8:
                    53:76:2c:b9:7f:5d:d6:21:63:38:33:bf:f1:b9:4b:
                    f3:0c:78:2f:ab:67:a3:3b:2f:4f:d6:0e:53:1a:2a:
                    e9:d6:61:01:d5:b6:91:2e:5a:cc:90:c2:a2:0c:59:
                    f0:e5:26:27:c0:af:a9:c0:01:92:9f:a3:bb:99:05:
                    12:23:a4:47:36:72:f5:0d:fc:c1:e5:10:ff:14:92:
                    9d:f4:ab:19:72:54:89:e9:53:04:ae:be:89:d2:49:
                    fa:33:04:a4:42:d8:1f:a6:6e:54:55:f9:37:a5:16:
                    8b:2b:4d:54:1a:da:6a:b3:9c:bb:3c:59:79:02:f7:
                    cf:4a:b6:e7:d5:ad:6a:4a:41:bd:8b:70:53:c7:30:
                    34:3a:14:04:f4:18:8d:be:be:de:32:32:7f:5a:3c:
                    5c:d4:8d:f9:d1:44:f4:73:93:10:3a:56:ca:fc:5b:
                    2e:1f:69:91:af:5b:4a:6e:83:aa:51:3f:5e:99:fb:
                    28:5b:d7:a2:e8:c6:d5:05:5e:c9:18:16:39:4b:f1:
                    9c:6c:c0:45:8c:61:e1:5b:57:fb:34:e6:d6:65:1d:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:8D:11:79:C6:C1:E3:F9:9D:44:58:99:D4:CC:6B:E0:08:5A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/0eb7dc46-bc9d-3165-b012-a3a9796fb3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:77:6f:5a:fe:2b:04:b1:b3:17:d7:82:14:d7:4d:24:0f:77:
         67:b2:d8:3a:1e:73:b5:22:f1:f4:38:29:ce:86:87:44:bf:f5:
         73:f9:9b:15:fa:e1:2d:a0:60:fc:44:0d:5b:5a:a3:e1:04:98:
         3a:aa:80:92:e6:95:d2:97:a2:c8:51:29:df:71:e0:a3:27:29:
         40:b6:5e:b3:ba:c2:7a:4e:18:63:5d:57:33:31:8b:1c:3f:76:
         6b:e5:bc:9e:6e:8f:89:f5:65:2b:7b:7d:07:d3:f0:c8:ac:97:
         24:f2:e1:85:69:04:d8:db:10:f3:30:3f:d5:e2:22:1b:5e:08:
         1b:24:6f:bd:ff:cd:ad:69:6c:e2:30:9c:50:ca:f9:76:ec:2a:
         bb:35:24:4c:4e:b5:a5:ea:c7:cd:e9:7c:44:26:19:4d:f6:7b:
         9d:75:81:10:d1:fd:e6:6c:ec:7d:e2:f4:c5:38:ba:14:01:37:
         6c:b0:80:69:cc:4d:72:cc:0f:41:ff:bc:91:3d:16:11:50:42:
         5a:79:77:09:db:9d:f0:f1:cb:cd:cc:f0:71:79:f0:a6:01:35:
         45:54:19:2a:d2:65:ac:fc:42:3a:d2:0c:2b:aa:b6:6d:a8:50:
         26:fb:fa:e6:75:e1:5e:8e:c6:9f:1f:08:f4:24:2a:ac:46:83:
         11:fa:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org