Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/32cb1ff6-f57c-39fa-9830-d4da752fecff.roa
File:                     32cb1ff6-f57c-39fa-9830-d4da752fecff.roa (raw, json)
Hash identifier:          cfzc/yq2VT6WWzzyzfIv/W4viktvcB5bvY6zEfZT0dE=
Subject key identifier:   90:A2:F7:A3:04:5D:F7:AE:CB:BE:B6:DA:92:A4:13:09:AA:87:5D:0B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454626962E7A84486A012BE800
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/32cb1ff6-f57c-39fa-9830-d4da752fecff.roa
Signing time:             Wed 20 Mar 2024 20:50:24 +0000
ROA not before:           Wed 20 Mar 2024 20:50:24 +0000
ROA not after:            Tue 18 Jun 2024 20:50:24 +0000
asID:                     36492
IP address blocks:        136.23.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:96:2e:7a:84:48:6a:01:2b:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:50:24 2024 GMT
            Not After : Jun 18 20:50:24 2024 GMT
        Subject: CN=6765eb90-393e-4c36-b939-2347fffe5bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:32:53:c3:59:94:b8:73:7f:fc:9c:82:29:
                    02:bd:46:78:24:21:4f:c4:23:5a:24:bd:b2:b0:82:
                    6b:c5:dc:ce:8d:fc:f0:39:bb:fe:16:6e:c4:1e:d6:
                    4e:6a:fb:f5:29:fa:3d:2b:ab:62:0e:c1:36:a8:70:
                    a6:11:a1:b9:8c:a8:0b:ef:db:c2:04:4f:57:24:d8:
                    b9:0c:84:a1:1a:da:80:9d:3a:f0:d4:2f:76:ab:3d:
                    9c:08:37:a2:67:9d:1e:89:31:42:65:11:75:6e:ca:
                    57:e4:16:e6:da:11:ff:39:0a:ea:15:97:6f:48:8d:
                    89:1d:5e:6c:4b:03:8d:b6:fb:b6:de:79:8f:8b:1e:
                    ca:14:45:76:c2:ba:95:90:3a:0a:9e:3f:a7:8f:eb:
                    2b:75:35:6a:b5:10:62:9b:4e:03:f0:09:dc:1f:63:
                    88:73:51:31:eb:f8:f5:af:0e:e3:b1:9e:88:cb:f4:
                    c7:5b:6e:47:cd:a1:1b:ce:9d:b9:f6:57:2e:00:0d:
                    89:3c:0e:26:c3:e7:22:7c:ae:aa:40:8f:6d:6a:a8:
                    db:17:46:5b:7e:60:c3:0b:69:b0:d7:b8:16:c9:1d:
                    d7:2f:39:b2:da:87:b2:6e:d9:72:d5:a9:ee:d1:f9:
                    b6:c1:ca:fa:a6:8e:d7:ed:82:7f:24:70:03:59:39:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:F7:A3:04:5D:F7:AE:CB:BE:B6:DA:92:A4:13:09:AA:87:5D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/32cb1ff6-f57c-39fa-9830-d4da752fecff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:f9:f6:93:3e:96:ea:7d:9e:54:12:53:b0:f2:0b:f4:0f:
         e2:ed:d9:2e:9a:2a:ba:a3:82:a3:91:69:41:0b:f1:9b:6c:10:
         9a:3c:56:a1:cb:ef:88:82:38:67:b4:bc:92:c3:18:f0:98:c6:
         8c:e6:85:b5:cd:29:43:22:82:09:93:12:8e:a9:b8:9f:14:4c:
         ff:e4:e6:44:5d:96:59:13:ed:df:8d:11:7b:9c:af:e0:83:91:
         4b:c9:19:e1:cc:7d:ed:a4:ea:89:fc:f3:c6:04:8f:f8:53:99:
         4d:e6:ba:8a:09:13:fc:71:f9:02:90:0c:ae:82:38:06:3b:5f:
         4c:29:e5:97:ce:00:2a:c6:51:7c:c4:d1:93:c9:09:22:d5:14:
         2e:b6:e2:e6:1b:40:30:91:b6:19:3f:ac:61:75:f5:27:89:21:
         26:3f:05:d1:52:ca:77:9d:12:e3:81:0d:82:8e:2e:07:a9:6a:
         7f:73:b6:14:20:7a:ba:a7:bf:cb:19:ad:09:4b:a3:30:14:2e:
         2d:b4:34:00:15:a2:cd:92:4e:06:e9:58:73:40:18:5f:4d:74:
         85:ac:db:f3:ea:47:6b:35:f2:81:83:27:5b:7c:e1:8b:4b:ee:
         18:cf:d2:70:3f:9d:02:04:94:cd:4b:d9:da:9d:f1:e7:02:7d:
         3f:e6:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org