Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/76168b28-c774-3526-b50a-177e518747a7.roa
File:                     76168b28-c774-3526-b50a-177e518747a7.roa (raw, json)
Hash identifier:          /2OQFk96+yZFPhogzNvUCCZv11Wn3rYXwe1ISr1MIK4=
Subject key identifier:   98:14:36:3C:D4:D0:C3:AA:32:09:42:3F:2C:D1:91:D0:C8:9A:8B:91
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62A9D3A636D7CCCEF8936A0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/76168b28-c774-3526-b50a-177e518747a7.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:9d:3a:63:6d:7c:cc:ef:89:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2a20d9cc-9715-4abc-82db-e0bc4d4a4d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:6c:29:f2:73:ec:6d:9e:bd:e2:0a:c1:8c:
                    f7:99:2f:05:4e:cf:85:ff:cf:39:8f:fd:88:5d:aa:
                    29:03:5b:93:77:c7:fd:1e:3d:a9:eb:e2:37:33:43:
                    2f:a7:34:13:9c:94:11:c9:ba:b9:2e:a3:ca:ea:f3:
                    e4:dc:9e:f1:4e:46:77:1f:63:79:4e:37:c7:55:48:
                    cd:1d:90:e3:aa:ba:df:bb:8f:84:d9:2f:b9:7e:88:
                    85:a3:07:57:d4:41:d3:f3:1b:b8:9b:fe:5b:c7:20:
                    a5:f9:24:12:25:c1:c7:0f:28:04:53:df:4d:b7:d6:
                    75:b9:23:29:23:5b:cf:a7:46:7f:22:42:6c:69:7d:
                    5c:f9:df:c6:3e:98:64:db:67:cd:8c:ba:72:f3:18:
                    c3:db:39:b4:2b:08:be:f5:00:da:90:9e:da:92:a3:
                    52:61:53:dd:a3:90:53:a3:1a:6b:79:53:70:10:62:
                    ec:e4:03:a3:f0:85:3a:61:e6:06:a9:4a:1b:f3:62:
                    79:b7:4b:10:8a:f9:13:82:01:47:80:ef:61:e0:87:
                    1a:cf:1b:c0:1f:ef:3b:ea:21:d9:09:83:54:68:b3:
                    15:ca:1b:64:3e:cd:f2:76:f9:4d:8d:ec:b3:1b:b4:
                    15:4a:cb:30:b6:c8:69:34:5e:b6:e7:b0:9c:46:4c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:36:3C:D4:D0:C3:AA:32:09:42:3F:2C:D1:91:D0:C8:9A:8B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/76168b28-c774-3526-b50a-177e518747a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c0:9d:2d:1d:cf:47:8d:b7:9e:8a:0c:c1:6c:ce:97:d4:77:
         9f:3b:dc:d4:c7:ed:8c:3f:cf:b2:9a:61:52:b9:00:85:4c:95:
         c7:45:0b:d1:e9:44:47:11:6d:7a:5d:a0:3a:9b:3a:56:1c:1f:
         94:69:01:29:0d:33:f1:a3:93:8e:e3:74:2a:4d:2e:bf:21:7d:
         1f:3f:4b:db:cd:04:33:6d:af:06:f3:3e:70:17:5a:1e:1e:3c:
         86:34:c2:09:7d:47:75:ff:09:e3:fb:39:68:d3:b5:be:fe:3c:
         a9:f9:22:14:af:20:02:97:5d:57:de:6c:70:dc:31:77:43:d5:
         c0:47:6f:88:71:b9:53:6c:e7:9a:05:68:24:1b:67:1d:0e:e6:
         18:03:bc:05:0a:35:b1:35:c6:07:9d:f3:eb:19:19:6a:6f:ff:
         61:c3:ad:4f:22:f7:d3:d0:49:0d:ff:29:39:66:41:3d:7e:46:
         95:2f:2f:5a:f3:de:bf:0e:06:a5:b0:de:20:2e:1c:fe:5f:8a:
         df:20:0a:62:5a:53:f4:5d:f7:22:47:15:d6:f4:1c:d2:8b:2b:
         db:4d:e8:d3:3f:3a:48:28:6e:1f:1b:55:b3:e7:c1:99:d7:21:
         bc:60:d2:56:3e:ba:a9:bb:54:ba:46:db:af:3d:f6:f8:49:8c:
         5c:ab:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org