Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f7e610b-a87d-3bcf-9b3d-6ba749d4ce16.roa
File:                     6f7e610b-a87d-3bcf-9b3d-6ba749d4ce16.roa (raw, json)
Hash identifier:          HKv4geysj45UVWYrBr/Dge0wygPmrdI3cArRzst2W2s=
Subject key identifier:   AB:B9:15:1B:30:5C:AB:20:E2:AE:9A:C8:77:9D:AD:1F:5F:AF:B6:50
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AAE00EF1097779D72A340
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f7e610b-a87d-3bcf-9b3d-6ba749d4ce16.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.22.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ae:00:ef:10:97:77:9d:72:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=886c03da-4082-4565-865d-2c79bade5411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:31:23:ca:ea:1e:70:1c:5d:64:fc:0c:2b:
                    ce:60:b7:d0:9d:f4:fb:f3:78:5a:6e:d6:26:f0:47:
                    88:fc:11:95:88:98:c6:03:96:ff:84:0c:75:31:22:
                    cb:26:41:2d:87:e3:ad:1b:ce:40:72:91:c9:b2:9a:
                    47:9b:88:f5:2a:3f:0e:3a:c0:ec:15:26:ce:78:0b:
                    28:0f:c0:0b:f3:7a:50:7c:75:68:ae:63:fe:c3:49:
                    62:a0:9b:c5:c4:aa:d8:0e:a2:1a:6b:90:0f:46:d6:
                    d1:06:6e:35:cb:57:82:24:33:e9:93:91:c3:c9:d2:
                    06:e8:b9:6a:63:9c:70:c0:23:df:cd:9f:98:5e:ed:
                    7f:a4:7e:5c:1d:9f:7e:10:94:8a:35:e7:ac:0e:0a:
                    a8:b8:fc:28:4b:4d:97:96:21:d5:b4:62:58:18:b0:
                    66:89:ea:90:82:d1:b5:d6:2f:8b:a6:e4:5b:91:5e:
                    1a:da:95:8b:59:33:5e:5e:00:42:7c:f4:65:ed:13:
                    36:51:cf:7d:cd:40:31:e0:e5:ee:00:bd:ac:d6:79:
                    4d:2c:72:c4:89:f7:30:34:ea:bd:1a:93:65:36:c1:
                    df:f2:10:fe:0a:48:da:26:c7:2c:73:97:40:3f:95:
                    8b:42:d0:6c:18:06:fb:e8:ca:a4:48:35:8b:42:19:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:15:1B:30:5C:AB:20:E2:AE:9A:C8:77:9D:AD:1F:5F:AF:B6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f7e610b-a87d-3bcf-9b3d-6ba749d4ce16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:bc:fb:63:30:cc:6b:6b:ff:83:41:96:56:b4:49:7f:e2:0c:
         62:cb:4f:a3:fe:b4:f4:67:0f:c8:76:3a:73:3e:53:c4:6c:3d:
         c4:ab:6a:fe:bc:21:e8:0c:ee:1a:26:0d:6c:5a:3a:5d:87:20:
         7e:ef:8c:9f:65:c6:77:95:d1:e8:7e:3c:a2:91:ad:3d:18:ac:
         ed:fb:1a:ed:04:cd:17:4c:84:99:1f:02:4d:81:27:9b:cf:d3:
         03:fc:2f:14:61:d8:d2:33:df:83:7d:13:db:20:87:89:20:84:
         df:67:79:b2:e6:3d:17:89:45:fa:ed:7c:5f:ad:91:91:d5:0b:
         4e:ff:e8:ee:06:3b:b1:93:4b:95:82:39:d9:d8:bc:71:1e:21:
         f5:f4:bd:f8:7e:ec:84:f9:92:41:2c:bf:9c:11:82:69:ae:6f:
         0d:fd:4c:5a:18:d8:62:c8:2d:89:6c:66:ee:a0:dc:28:60:8b:
         5f:e6:92:2a:0c:29:1e:7c:68:68:28:b9:fb:a1:58:71:c9:be:
         76:3b:36:52:dd:54:c2:31:ab:7e:d9:f7:e4:56:53:f2:a8:aa:
         a4:96:1c:0d:32:6a:12:d2:7f:3f:2a:4c:0c:c0:24:5a:87:22:
         cd:0c:8f:33:f0:8d:f6:b3:e5:81:78:94:ab:ee:41:d8:99:ad:
         c8:87:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org