Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa
File:                     40a6d6bb-41ed-32c1-91dc-72834cad1777.roa (raw, json)
Hash identifier:          Xb67/+UjzfkCkr4euMc1CUQgt25mLzwSPUYkX8Tch8o=
Subject key identifier:   98:F3:2E:B4:D9:5B:DB:1F:DF:5C:85:AF:AB:89:BA:3A:A1:A8:B4:F8
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462CF578324AE11FABD95160
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa
Signing time:             Wed 20 Mar 2024 21:03:15 +0000
ROA not before:           Wed 20 Mar 2024 21:03:15 +0000
ROA not after:            Tue 18 Jun 2024 21:03:15 +0000
asID:                     36492
IP address blocks:        136.23.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:f5:78:32:4a:e1:1f:ab:d9:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:03:15 2024 GMT
            Not After : Jun 18 21:03:15 2024 GMT
        Subject: CN=a1e71e31-37df-4d58-87bf-5ae58f4d5af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:f8:cd:d6:10:cf:a3:b1:36:81:b6:87:e0:
                    29:a7:0a:74:6b:cc:74:a3:9d:2d:8c:96:00:7a:89:
                    18:16:34:c5:35:cb:3a:fb:4a:31:01:51:d3:98:99:
                    e7:87:58:03:8a:a6:a1:08:a6:e6:a3:56:17:c2:bd:
                    6f:65:4f:4d:3a:e8:c5:72:73:b5:b3:fb:9c:40:79:
                    3b:a7:50:c9:02:83:9d:8f:56:c4:72:7b:73:83:32:
                    6c:06:f7:cd:6a:6d:49:c0:ff:e6:f8:1e:29:01:e6:
                    db:23:48:b1:61:b7:37:ec:a2:3a:5c:2a:f2:66:01:
                    86:b4:76:3d:87:18:78:f8:79:52:d6:b3:f9:1d:1f:
                    14:a7:de:a8:99:9d:8e:60:be:10:29:80:d4:e2:fa:
                    41:70:24:30:d8:8f:61:84:40:f0:4a:50:ee:d2:0a:
                    df:3c:9f:36:26:c2:31:b1:80:f3:9a:68:60:4a:5c:
                    a5:6f:49:61:1b:d4:cc:c3:b4:a8:ca:42:15:21:68:
                    d5:1b:3c:b2:1b:a4:4c:a1:bf:69:d3:45:30:f0:05:
                    66:3c:23:1c:fb:13:2d:96:bb:49:9b:9d:2a:0e:c4:
                    cd:52:6a:6e:f8:09:c0:4c:c4:93:29:c7:42:08:0f:
                    a7:00:a6:a4:c3:3d:6e:b7:b4:81:71:fe:6d:fa:8e:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F3:2E:B4:D9:5B:DB:1F:DF:5C:85:AF:AB:89:BA:3A:A1:A8:B4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/40a6d6bb-41ed-32c1-91dc-72834cad1777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:b1:12:71:d4:9c:e2:f0:3a:c9:f0:1d:1e:e5:4f:75:79:
         5a:b6:5f:f5:65:96:b8:48:f9:e7:d5:ff:9b:c9:e8:6e:71:5f:
         c9:e5:9c:56:84:03:59:69:ef:0a:47:f4:3b:50:f8:f6:b5:77:
         c9:6d:d4:1d:50:4d:00:f9:c1:62:f2:9c:d9:7b:6c:99:ab:0f:
         2d:c6:0c:07:4a:07:93:a1:8f:a1:d8:3f:31:b8:95:a9:be:6d:
         17:c8:a7:66:70:90:76:1a:56:27:24:90:23:85:d6:cf:ae:0b:
         b5:f0:5a:c3:6c:93:6e:78:91:bc:94:da:27:8f:97:12:81:56:
         fd:62:a0:e6:6a:36:e4:42:86:01:c6:d9:06:92:49:a5:46:88:
         d7:89:ba:bf:85:a0:a6:a3:de:2d:9e:78:6a:bb:a9:ba:ab:47:
         c1:84:51:b1:3c:a4:06:4d:42:84:1a:1f:70:c6:5b:5d:95:cd:
         e7:49:9d:e0:e2:6e:26:af:93:85:4f:fe:04:6b:ad:fa:b6:d6:
         76:ac:c2:57:7f:67:28:55:b5:ca:88:6c:7d:74:36:d1:73:b3:
         f1:7d:23:cd:81:fd:02:ef:c9:be:26:07:dd:39:0b:ce:66:71:
         61:f6:ce:a8:30:04:60:ea:4b:25:7e:78:0b:9a:17:fe:40:a6:
         22:c5:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org