Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1acda134-481b-3fe5-bd1a-1df0bdd6416b.roa
File:                     1acda134-481b-3fe5-bd1a-1df0bdd6416b.roa (raw, json)
Hash identifier:          9ACF/l1wy4cGgkheOB/bducle7CcndM+7plKsYJ4GaE=
Subject key identifier:   7E:AE:51:21:E2:93:9B:85:48:77:46:F7:22:BE:81:CF:CF:50:30:32
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584540B64577D2774898E6F02380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1acda134-481b-3fe5-bd1a-1df0bdd6416b.roa
Signing time:             Mon 18 Mar 2024 22:05:04 +0000
ROA not before:           Mon 18 Mar 2024 22:05:04 +0000
ROA not after:            Sun 16 Jun 2024 22:05:04 +0000
asID:                     36492
IP address blocks:        136.22.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:b6:45:77:d2:77:48:98:e6:f0:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 18 22:05:04 2024 GMT
            Not After : Jun 16 22:05:04 2024 GMT
        Subject: CN=24a59e12-3a0a-4895-b28b-29e1da71cf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:eb:35:c4:97:18:a8:79:ef:30:81:58:cc:
                    15:58:b9:60:05:72:90:bf:ef:8b:5a:88:03:7d:3e:
                    bb:2f:26:6f:68:66:0f:cb:40:30:9e:cd:92:f0:7a:
                    8d:91:35:d0:ef:9d:f9:90:84:33:f0:37:ca:e0:57:
                    7e:a2:f9:d8:67:3f:31:55:16:fa:ea:1e:5c:ba:81:
                    09:9b:fc:7e:26:15:ed:a5:db:3a:69:1f:36:40:e5:
                    7f:e5:5e:2d:24:04:71:50:c7:e2:1e:49:af:c9:22:
                    a2:1d:16:27:4c:4d:1b:a5:4d:7b:2a:57:cd:c1:cb:
                    2e:00:d3:15:dc:2f:a9:e2:0f:ac:8b:7a:a7:8e:58:
                    e0:52:c8:cc:ef:3f:37:fe:f1:2f:b9:12:d0:bc:c5:
                    03:cc:6f:4e:03:6b:96:81:8b:09:4a:63:b0:96:5e:
                    07:92:db:e5:c8:e1:20:e1:03:11:5d:be:92:41:3a:
                    90:0e:c5:37:96:43:bb:c7:36:ce:b8:bc:d8:ce:c7:
                    e0:1f:78:a7:c8:b1:9d:37:79:39:1d:fb:fc:5d:95:
                    f8:51:49:34:bb:74:14:67:54:55:d9:98:f0:9f:3a:
                    7e:f4:b6:5b:f3:10:b7:a8:9a:92:1e:2f:4e:a1:8f:
                    41:1b:a0:79:3c:e0:e6:18:96:37:0a:62:8a:01:8d:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:51:21:E2:93:9B:85:48:77:46:F7:22:BE:81:CF:CF:50:30:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1acda134-481b-3fe5-bd1a-1df0bdd6416b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:42:ba:0c:a2:73:da:26:9e:4c:14:3b:e0:0a:9d:4e:b2:66:
         84:25:08:e3:7d:7b:9c:f2:2f:82:ec:26:b0:6c:f3:84:e4:12:
         16:31:13:35:09:8e:05:7c:6d:12:9a:e3:db:ae:a5:cb:1a:fc:
         f4:58:d2:40:69:c0:da:bc:4f:99:15:4d:7a:d6:43:75:b1:a2:
         15:94:ae:53:18:3e:70:1c:97:a9:ca:81:33:91:99:b4:08:8d:
         48:08:9a:db:30:75:8b:55:8b:36:0c:27:1b:49:4e:ef:e2:60:
         81:70:dc:8f:f1:c9:95:6e:2a:15:9f:74:2b:32:db:88:52:fe:
         a1:88:38:1f:f9:60:87:00:7a:3e:0a:b1:21:5e:53:10:f5:46:
         cb:9a:e7:9d:d3:e7:19:2f:14:7b:ea:c4:52:75:36:1d:99:a1:
         ba:4b:ad:ac:78:75:db:bd:8c:b4:e6:3d:df:ac:39:bb:9c:57:
         48:e6:69:90:25:12:82:7c:c4:39:fd:1f:ca:0c:18:5b:30:58:
         db:83:cd:96:82:40:56:f0:f0:8d:60:47:36:87:27:72:61:f3:
         16:0f:bf:d5:04:43:f2:64:29:7b:06:76:7b:17:c7:df:f6:95:
         b2:de:29:33:5e:94:2e:72:85:df:8d:32:7f:b7:02:cf:b1:04:
         b4:fd:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org