Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
File:                     37cc9905-b07e-3ac1-a6dc-921843b37658.roa (raw, json)
Hash identifier:          ppWv52wXJTBunKRyhpnZdfjnSfvkfJzYbke06eGKTrI=
Subject key identifier:   04:7C:9A:24:EC:CE:C9:7A:50:FF:F8:D4:DE:92:ED:C5:1A:5C:70:F7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546266E0C07D355C775B51F40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa
Signing time:             Wed 20 Mar 2024 20:50:05 +0000
ROA not before:           Wed 20 Mar 2024 20:50:05 +0000
ROA not after:            Tue 18 Jun 2024 20:50:05 +0000
asID:                     36492
IP address blocks:        136.23.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:26:6e:0c:07:d3:55:c7:75:b5:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:50:05 2024 GMT
            Not After : Jun 18 20:50:05 2024 GMT
        Subject: CN=77b30107-a435-45ef-8224-672d782f4364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:65:bc:b0:ee:8d:6f:e3:12:26:e4:cb:21:
                    82:cf:fa:1c:b9:1f:b2:91:dd:15:29:95:4a:78:7e:
                    7e:10:10:4f:ce:ac:84:4e:45:18:63:f4:58:b2:ce:
                    46:8b:0b:66:a4:65:90:f4:44:7e:4d:35:ec:40:b9:
                    d0:0c:b0:d6:88:fc:fe:6b:a0:d6:c2:07:19:b9:de:
                    50:af:cd:97:cc:f6:22:8e:01:5f:c1:b4:92:da:9a:
                    31:d7:7b:61:d2:7e:b8:43:84:52:37:f6:f4:09:a1:
                    8f:ad:c3:fe:26:ab:d1:42:4c:48:65:e5:45:18:d0:
                    ce:bd:d3:e7:66:33:2f:f6:e3:3b:07:95:f1:da:1f:
                    6c:61:a3:bb:c3:4a:2b:eb:14:41:78:62:cd:18:1e:
                    ce:0e:cd:4a:2b:92:cd:fd:67:e4:ad:c9:0d:e3:7e:
                    0d:21:fa:02:b3:cc:44:f8:b2:4d:6f:98:b6:35:9b:
                    ed:f2:07:e9:78:f5:45:4a:0a:ce:5c:42:05:be:08:
                    09:fd:fc:89:ba:98:c6:1e:57:99:e3:4d:83:c9:94:
                    15:28:85:37:bf:0d:4b:83:63:f8:a6:c1:02:27:c9:
                    17:14:16:d7:94:de:38:81:8d:88:12:04:e5:da:38:
                    a8:17:bf:a2:1b:b3:8d:8c:71:b9:06:15:73:f9:96:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:9A:24:EC:CE:C9:7A:50:FF:F8:D4:DE:92:ED:C5:1A:5C:70:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/37cc9905-b07e-3ac1-a6dc-921843b37658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:9f:63:ff:41:9e:40:27:52:3e:67:65:43:f5:f4:dc:e7:
         f5:ee:b7:55:82:eb:0e:91:4d:84:d8:97:fc:87:ac:df:f7:ff:
         55:7a:21:d3:85:eb:80:cb:4b:81:e8:c8:c7:60:73:90:b7:14:
         ed:a6:c1:67:5a:0a:ba:6d:ff:31:ad:84:c1:41:c4:0a:36:d5:
         e7:28:99:ec:be:30:61:22:7c:a3:cb:4b:85:6f:9d:1d:a1:58:
         ee:21:8f:f5:28:1e:b1:6c:61:72:df:b4:f2:3e:ac:18:f3:74:
         15:13:fe:16:09:9f:44:78:c4:53:e5:2b:24:c5:2f:a8:89:eb:
         90:ef:fe:be:d9:18:62:1b:0a:1a:e7:ba:da:b3:cf:3c:f0:db:
         bb:3a:8c:bc:af:aa:64:c7:17:66:0b:55:60:05:15:0e:88:fa:
         c7:1e:2d:75:26:24:70:0c:61:34:f9:f0:6d:4c:25:6a:ec:98:
         65:ab:13:63:38:4a:73:c2:63:7b:cc:07:eb:53:c5:7e:65:30:
         bb:29:01:c5:b9:6c:77:08:3b:af:93:6f:f4:d7:09:1d:6f:e1:
         53:52:b4:92:79:1b:b1:e1:a4:c7:48:91:83:30:5c:b1:04:43:
         c7:89:76:1e:ed:11:dd:d3:c5:a3:61:b5:b8:d9:5f:79:fa:9c:
         03:5d:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org