Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa
File:                     68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa (raw, json)
Hash identifier:          kDeF1L8BjYZrDoLDDjksMPTwaCCEAJfN67P3WIvFRKM=
Subject key identifier:   A9:1D:4C:32:D5:04:B5:7E:CC:2A:85:0D:DF:B4:B0:06:31:8C:87:B2
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AB1B96AF9F9BD15224200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b1:b9:6a:f9:f9:bd:15:22:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=0ca2b570-1306-4704-97cb-c9b0ec546cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:14:88:63:b9:fe:4e:67:77:4a:00:12:c1:
                    32:f5:a8:20:b6:01:dc:4e:4c:37:2e:81:7c:18:88:
                    7e:4e:dc:47:6a:02:8c:b8:58:00:0b:df:e9:49:25:
                    ab:cd:55:e6:f0:79:3f:72:1d:b5:b7:89:f7:ca:da:
                    d6:ac:86:21:51:94:bf:4b:3d:72:a0:39:60:c9:f1:
                    83:e4:a4:73:19:da:77:20:31:28:06:63:53:95:cb:
                    21:47:4e:92:fb:2b:6e:27:a9:48:25:f2:00:db:3c:
                    65:42:0c:8c:e4:82:61:fc:da:66:2d:ba:f4:21:2c:
                    3c:fc:62:a7:db:9a:c9:25:ab:48:be:e6:af:a8:eb:
                    85:52:68:d8:01:17:81:72:db:55:7d:41:02:6d:ef:
                    34:00:c6:89:7c:80:ce:e3:01:17:9f:c7:be:86:29:
                    c6:3c:91:fb:07:2e:5e:b1:a6:19:4e:d6:3e:47:68:
                    19:bf:dd:97:e1:ad:60:c7:87:4b:35:89:58:4c:0e:
                    4d:d1:50:2f:d8:70:e4:49:14:89:a6:94:9f:bd:a6:
                    c4:98:09:25:b1:33:a8:ab:34:dc:b9:2e:de:54:e2:
                    f1:e4:b3:d4:09:6c:e4:8c:3f:9b:52:24:f3:34:d7:
                    4f:93:52:97:95:a9:69:70:58:cb:c4:37:ff:17:4b:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1D:4C:32:D5:04:B5:7E:CC:2A:85:0D:DF:B4:B0:06:31:8C:87:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:99:0b:f2:96:20:83:1e:81:7a:06:db:01:04:96:e0:69:
         4a:c1:50:cc:1c:63:eb:42:c5:58:d3:fb:78:6b:d4:15:14:63:
         27:ce:45:41:4b:e0:db:9c:62:9d:4f:ad:c4:69:e3:9c:23:6c:
         a0:a4:07:0a:5d:d5:f4:86:77:ae:fb:7d:a2:bf:de:97:df:2a:
         39:94:f4:7d:06:ab:8a:9a:6e:f9:05:aa:8d:3d:af:ed:d5:0f:
         7f:17:11:7a:d1:8a:3c:06:45:94:74:47:df:bb:91:3f:97:b8:
         b1:c5:0d:2d:08:e2:55:cc:3e:11:aa:99:28:b6:95:54:4b:d6:
         96:09:57:54:3c:fd:52:6e:67:4b:46:16:85:e9:28:94:e2:a1:
         b8:cc:e3:6e:42:37:dc:48:a6:3c:d9:79:5e:09:cb:fa:5a:bd:
         37:85:52:2c:72:12:59:8c:a9:18:42:18:e2:5b:ab:53:3e:cd:
         ec:d3:72:33:f5:f5:64:76:fe:54:4e:5e:7a:95:8a:b3:3b:53:
         9b:4e:64:4a:94:48:df:16:b6:db:b4:1e:ca:91:09:96:9b:26:
         76:98:4f:ef:4c:f7:39:6d:b2:fb:de:be:67:a4:7d:62:c3:55:
         89:01:43:f0:9c:aa:e9:3b:12:6f:5c:c3:1f:9e:d3:f0:f1:e3:
         c7:bb:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:36 2024 by rpki-client on console-fra.rpki-client.org