Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa
File:                     33cccd75-2950-38dc-b3d9-ab775364423e.roa (raw, json)
Hash identifier:          jMVXmRvTqvyWSwaAQN8lXmB+142tYx/z9zdMPd/5vCs=
Subject key identifier:   79:A0:90:0F:80:A5:42:01:08:FB:89:2E:00:20:A9:CD:EF:81:DC:1D
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462DB6774F1342CC91002380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa
Signing time:             Wed 20 Mar 2024 21:04:46 +0000
ROA not before:           Wed 20 Mar 2024 21:04:46 +0000
ROA not after:            Tue 18 Jun 2024 21:04:46 +0000
asID:                     36492
IP address blocks:        136.23.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:b6:77:4f:13:42:cc:91:00:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:04:46 2024 GMT
            Not After : Jun 18 21:04:46 2024 GMT
        Subject: CN=1fe5a755-08cb-43bf-a847-c9f8eed9a9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:3e:64:38:7d:19:f3:7a:75:b7:45:1b:ed:
                    38:23:6b:2b:be:e0:f5:b9:f3:26:51:db:b6:3e:fd:
                    d8:c9:d6:aa:75:cd:0f:63:17:83:f1:14:f1:8a:42:
                    70:48:45:f8:7e:1f:a4:96:79:70:0f:45:09:07:0c:
                    78:ee:34:db:a3:f6:78:e5:21:1a:d9:b2:ed:c8:38:
                    08:bb:d5:b1:05:87:26:cf:88:1c:19:f0:56:73:db:
                    66:f8:e2:55:98:06:23:45:01:76:13:91:f0:a3:68:
                    43:2c:09:97:c8:c1:a8:9b:42:74:e0:88:95:b6:d4:
                    66:c4:13:57:f2:76:4e:5d:93:68:d1:d1:3d:3b:ef:
                    3b:a0:6f:dc:e4:7f:49:cf:b7:83:b1:a9:4f:e2:01:
                    63:79:82:65:02:c3:32:71:1c:6c:98:f0:0a:d7:11:
                    00:8c:35:54:4f:12:f1:54:05:04:90:c1:42:40:76:
                    11:dd:21:07:d4:58:87:df:c0:cb:05:9e:24:94:f5:
                    52:57:f9:0c:b3:47:e2:da:16:b0:8b:e3:40:24:78:
                    a2:cf:da:4b:1d:57:a1:56:9a:3e:31:ae:90:32:e9:
                    27:2e:15:a3:17:9a:28:02:d1:6e:d7:70:30:9e:97:
                    26:38:1c:06:83:a1:ae:1a:ea:c1:d7:8d:8d:95:65:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A0:90:0F:80:A5:42:01:08:FB:89:2E:00:20:A9:CD:EF:81:DC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/33cccd75-2950-38dc-b3d9-ab775364423e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0e:c1:14:05:91:94:fd:82:d8:1a:bb:ab:1f:7f:da:aa:a1:
         a1:e3:97:98:83:7f:69:3a:af:24:37:03:0d:5b:8f:40:79:ad:
         d5:1f:8c:a0:5f:e7:b9:93:07:0d:31:03:bf:37:88:5d:29:fd:
         ac:c8:d0:42:e2:80:ba:ee:51:09:29:ae:08:cc:04:f5:e3:e9:
         26:5a:66:49:51:8d:34:a1:62:07:d3:6c:b0:f4:09:3f:b0:1e:
         60:2f:d1:d1:a2:cf:4f:cb:07:35:aa:22:a0:ff:bf:8f:ef:b7:
         24:08:00:2a:7a:47:41:d0:63:f7:0b:e3:32:51:c1:94:8c:dc:
         93:fa:df:16:e9:b6:f8:5f:7c:d1:12:50:3b:d5:49:dc:99:8e:
         eb:c0:ea:53:c8:53:0a:2c:6f:14:e5:2e:0f:56:d6:ed:7d:ca:
         34:fc:d2:a7:1b:0f:f8:d3:cc:ca:e2:57:ef:ae:58:6a:73:4a:
         cf:a8:6e:bd:5d:b6:23:5e:de:1e:9f:66:8b:a5:84:36:06:69:
         5e:24:36:2b:70:8f:87:2b:38:13:a2:35:cc:ca:aa:a9:7e:89:
         21:91:60:e8:d4:fc:95:3a:e3:13:4c:bb:f5:0b:4c:a5:d3:b3:
         80:45:34:97:88:da:b6:da:ec:b6:e0:84:b5:9f:0d:f3:e3:ab:
         c3:61:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org