Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/713b41ce-054e-339a-86a5-6e48f0236e30.roa
File:                     713b41ce-054e-339a-86a5-6e48f0236e30.roa (raw, json)
Hash identifier:          JTIgIQAVDQsHL/x19WW6ylBlXbJHHzhKTKJQjyoEA/A=
Subject key identifier:   65:9D:0C:95:71:69:A5:11:5F:61:3B:16:E0:37:E7:49:16:58:7D:84
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B318BBBCA54EDB3FBFB80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/713b41ce-054e-339a-86a5-6e48f0236e30.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:31:8b:bb:ca:54:ed:b3:fb:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=3692a9d3-9950-492b-90b5-21d250f07385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:8e:e2:83:8e:54:67:55:96:9f:1b:a6:dd:
                    cc:cc:98:f1:e3:29:c3:1f:d1:c9:20:7b:ff:b9:db:
                    62:b1:3f:1a:0d:67:e0:5e:03:d5:be:2c:a6:98:d5:
                    62:00:db:df:89:93:d8:7b:df:e9:94:80:6a:f2:35:
                    09:d4:03:b4:89:89:d9:cd:34:38:40:bc:ba:f5:66:
                    46:01:bf:45:8e:b3:e4:df:fd:e0:3a:3e:d6:ef:19:
                    b7:3f:fd:3e:69:74:5c:a3:46:a2:14:bd:e5:ed:01:
                    97:48:a6:88:3b:9d:a0:3b:26:82:fd:9e:f1:cd:3b:
                    1e:00:61:f7:d9:70:4a:1c:6c:fc:8b:0c:20:1e:28:
                    59:c3:bc:ad:cb:1f:17:8d:a4:b2:e7:1b:0d:12:e4:
                    3d:18:a8:ca:4c:43:28:d0:38:5e:1d:7d:1b:e0:2a:
                    a8:00:e1:f0:6c:c4:48:b8:1c:86:ca:fe:98:4e:be:
                    82:12:e1:05:e8:02:83:84:df:f4:bc:fd:05:f4:df:
                    5d:27:6e:5a:6e:90:fd:df:dd:d2:bb:d0:b0:5e:ff:
                    a4:0f:a7:54:50:c2:24:c7:50:89:9e:be:39:ce:89:
                    3d:97:12:12:f9:90:ce:fb:d9:d8:2c:2d:78:23:68:
                    e8:32:44:56:45:fb:7f:9b:f6:6c:5a:02:54:ca:46:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:0C:95:71:69:A5:11:5F:61:3B:16:E0:37:E7:49:16:58:7D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/713b41ce-054e-339a-86a5-6e48f0236e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:b5:70:68:89:b7:65:49:a7:36:5b:c1:9e:4c:c1:f2:0b:
         19:e8:f1:41:d2:64:b8:8a:27:2c:d5:5f:33:39:6c:91:fe:a7:
         13:af:ed:81:29:68:bf:d2:3b:5e:a4:e4:cd:37:5b:3f:51:ec:
         02:64:e5:f7:39:b8:7f:d9:24:ee:fe:92:1a:1a:0b:9d:30:23:
         7b:93:52:d9:d7:5c:30:1f:12:06:5b:96:89:06:98:98:f7:56:
         a7:d0:d8:ce:69:24:b2:3b:55:b0:15:44:7c:9c:2a:dc:ff:d1:
         55:06:2c:11:75:18:32:d6:a6:cf:36:9e:a0:aa:da:73:be:96:
         d6:fb:4e:06:a9:47:c9:1c:68:60:54:d8:3b:16:6e:f2:50:0c:
         b3:b4:4a:b9:60:10:3b:8a:e7:e6:2c:c4:ba:1f:1a:2d:f3:0d:
         74:3b:35:6b:6e:e5:a9:4c:e3:30:e7:34:32:1e:af:4a:ff:c2:
         b1:35:51:31:8a:fb:b2:25:b7:e4:0e:a1:15:79:26:b8:58:ac:
         81:72:96:ce:07:d1:0a:62:19:8f:ee:29:ba:bb:64:3f:5d:19:
         39:19:b0:7b:05:ba:a8:2d:8b:2c:86:9a:d6:b2:a6:4f:7d:ab:
         a5:62:1a:65:c1:14:32:ed:78:5d:95:ae:ae:1d:e0:bf:a1:bd:
         ea:7c:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org