Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa
File:                     4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa (raw, json)
Hash identifier:          uGTI8psPogBEpqaxR5ngUTuGfyAPdy8RB+85OcboFWM=
Subject key identifier:   D4:E6:06:33:76:01:22:58:88:1E:BF:51:DD:8E:67:72:64:8B:CF:58
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454628C736C0126AC01C441200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa
Signing time:             Wed 20 Mar 2024 20:54:49 +0000
ROA not before:           Wed 20 Mar 2024 20:54:49 +0000
ROA not after:            Tue 18 Jun 2024 20:54:49 +0000
asID:                     36492
IP address blocks:        136.23.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:28:c7:36:c0:12:6a:c0:1c:44:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:54:49 2024 GMT
            Not After : Jun 18 20:54:49 2024 GMT
        Subject: CN=1bd7f099-bbdc-492d-8a53-56c00dbca21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:8c:2b:1d:f9:39:51:b7:70:53:1c:58:9b:
                    17:ee:a8:8d:d2:f8:1a:52:d4:21:dc:29:d8:5c:36:
                    cd:ef:54:1e:b2:36:a9:b0:d0:fd:36:e4:ed:e2:2f:
                    88:92:c1:d0:58:ff:fb:52:66:33:d5:64:0d:38:5c:
                    d8:aa:d4:48:cb:bf:25:04:25:e7:b3:6f:61:48:40:
                    95:69:69:53:0e:b9:50:08:b7:e0:3b:90:b7:8b:13:
                    6f:38:95:78:36:ca:f2:76:3a:21:2c:b7:4e:45:17:
                    31:0c:a7:4e:17:49:ee:d2:21:60:09:37:03:57:b0:
                    84:f5:08:41:81:3b:9b:b6:b7:11:2a:20:ed:10:e5:
                    42:61:40:bf:41:c8:5f:a8:e1:34:40:a8:93:b5:a0:
                    7e:df:f6:98:66:0a:e0:d7:34:ca:17:dd:9e:23:02:
                    26:a9:aa:08:02:99:15:09:ad:e9:21:cb:83:d6:86:
                    d7:2e:ac:31:df:42:cb:c2:29:3b:c1:8b:44:3f:07:
                    12:b1:2c:7c:19:53:89:c3:d0:53:b8:88:4a:d9:2c:
                    06:1c:6e:1f:2f:e0:3e:78:44:52:d6:bf:13:65:78:
                    da:f6:ac:ad:8f:4c:ad:34:39:c7:51:39:92:2d:5d:
                    51:53:d7:a5:24:80:2b:63:8d:2e:ee:cb:fc:d2:7e:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E6:06:33:76:01:22:58:88:1E:BF:51:DD:8E:67:72:64:8B:CF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4b5e978e-52c6-30d5-9a91-e81d31b5f758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:83:21:8d:16:8c:6b:df:2e:9d:ed:2b:57:fc:20:73:e8:8a:
         ce:75:52:49:01:4b:52:43:74:da:1a:dd:14:79:ac:fc:b0:5e:
         a0:61:b1:26:f1:a0:56:42:a9:4e:02:bb:1c:cc:cb:c4:2f:50:
         9a:bb:8f:bf:f9:0d:20:d5:d7:c4:73:db:37:bc:b8:03:18:c1:
         a9:66:16:30:34:97:8c:dc:e7:76:3d:24:b3:4b:a0:03:f9:0b:
         87:d2:c0:b3:e4:98:60:19:ad:a8:e9:8e:e2:ec:30:0b:90:c7:
         18:f5:a2:0c:6a:1c:b8:3c:10:86:9a:5a:bc:cb:95:45:3c:3b:
         71:47:2a:0f:8f:32:b3:26:91:99:dd:af:14:58:81:dc:86:ed:
         fa:67:66:39:7e:b6:0b:a7:1f:9b:17:59:a0:c1:9c:76:27:80:
         48:04:67:0e:79:a9:84:a1:d2:14:a0:64:28:0f:cf:3d:ba:3a:
         6e:0f:be:2a:81:b0:a3:f2:fe:4f:55:a7:78:4d:6f:1c:3f:79:
         c8:1a:2b:e6:9a:fc:94:93:73:cf:c0:ae:70:a1:ec:8c:cd:78:
         be:d0:ca:dc:cc:0c:07:21:ce:df:e6:de:12:80:b8:d1:f8:d9:
         bf:b3:01:e6:8a:1f:c2:de:42:00:d2:da:b3:d7:50:b7:5c:57:
         b8:88:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org