Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/777e2902-d6d5-38df-871e-0423c7e8dc7e.roa
File:                     777e2902-d6d5-38df-871e-0423c7e8dc7e.roa (raw, json)
Hash identifier:          ONdL8zFgPVyLflZFPCmQK3LIw8uPDrlbmn71IxBE8pc=
Subject key identifier:   BA:4A:6B:A2:80:AF:60:41:F2:10:B4:3B:40:D1:51:C8:81:31:CD:68
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462C766F9159B3975A7A2D40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/777e2902-d6d5-38df-871e-0423c7e8dc7e.roa
Signing time:             Wed 20 Mar 2024 21:02:15 +0000
ROA not before:           Wed 20 Mar 2024 21:02:15 +0000
ROA not after:            Tue 18 Jun 2024 21:02:15 +0000
asID:                     36492
IP address blocks:        136.23.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:76:6f:91:59:b3:97:5a:7a:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:02:15 2024 GMT
            Not After : Jun 18 21:02:15 2024 GMT
        Subject: CN=c6c1f0dc-2132-4f47-9871-00085dddbd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:3e:a1:0d:46:32:ee:42:fa:d0:ba:7a:78:
                    b3:95:fc:70:2e:85:5d:f4:6c:e1:0e:84:56:83:08:
                    0b:29:e8:fd:36:14:b1:26:25:56:79:e6:54:a8:80:
                    67:20:3b:0c:6a:78:a5:4e:8c:93:37:b6:eb:53:fd:
                    80:1a:e4:4e:9e:b9:19:dd:50:fb:7e:6c:ee:ee:b8:
                    ba:c7:98:ac:fb:72:2d:48:a5:cc:48:82:20:80:03:
                    c4:72:02:f8:a3:3b:df:34:ef:b7:9e:07:7f:dc:a2:
                    94:cd:93:6a:f3:6c:6e:b6:01:a5:71:6d:ec:88:1f:
                    d7:5e:af:f6:3f:cb:76:90:73:b5:8d:6d:ee:de:e2:
                    1e:2e:0c:90:12:00:30:79:a5:61:0e:5d:66:31:64:
                    1e:ce:1a:38:d7:a6:78:a1:5d:ff:00:de:28:b5:3e:
                    1b:e7:33:8f:81:04:a5:18:02:d0:36:1e:9b:e9:e7:
                    e4:bc:2d:37:c0:d0:f6:53:9f:1b:f4:6f:3e:61:48:
                    8b:4c:c8:2a:b9:0f:8e:b1:eb:6a:09:7d:8c:16:fd:
                    37:44:4f:c8:0d:89:e7:d8:78:4a:5d:5f:48:a4:59:
                    90:cb:5b:dc:48:96:12:f5:b8:d0:5b:aa:b4:23:a9:
                    dd:10:17:6e:30:85:65:af:09:0f:b2:97:13:37:0e:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4A:6B:A2:80:AF:60:41:F2:10:B4:3B:40:D1:51:C8:81:31:CD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/777e2902-d6d5-38df-871e-0423c7e8dc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:8f:9d:64:4f:43:9d:89:cd:52:f2:35:da:32:0e:7a:a6:
         de:3f:81:bd:2f:62:45:44:e3:3c:ed:01:ff:5c:8e:1c:25:22:
         13:32:a5:ad:7b:70:90:9b:84:1c:5a:df:aa:52:f0:6e:96:51:
         b3:a7:90:f8:3c:2a:7f:1e:e9:c8:d1:35:9f:dc:b5:3e:13:bf:
         b5:cd:77:70:23:f2:6e:fd:6c:ca:e2:41:a9:e6:ed:d8:6d:be:
         20:84:c8:ad:a4:9d:57:9b:65:d0:51:ae:fa:82:c1:07:a1:b5:
         4c:c6:8e:3e:e9:a2:11:b4:05:77:30:75:b2:93:6d:68:9c:d4:
         1a:d1:c6:89:56:db:e2:a8:9b:cd:45:b7:fb:3c:b0:90:65:68:
         a2:d7:ae:3d:83:dd:20:24:72:9f:34:cd:5d:3e:5b:82:d2:2d:
         4a:d7:3c:3c:b1:e1:6a:32:9e:b2:05:57:ba:e6:3f:33:d4:22:
         5b:6d:2b:b4:40:48:13:5a:fe:15:83:b4:24:6e:e8:2a:f3:b2:
         0e:3a:99:96:8b:29:fc:d2:33:44:70:9f:5e:e7:ab:5a:a8:c6:
         c1:da:d0:e7:8b:29:45:81:b4:73:9d:58:55:ad:f3:01:e7:ea:
         3c:f4:f4:29:b5:c3:8d:23:e3:7a:0d:00:c6:be:df:b4:60:20:
         14:95:93:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGLHZvkVmzl1p6LUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MDMyMDIxMDIxNVoXDTI0MDYxODIxMDIxNVowLzEtMCsGA1UEAxMk
YzZjMWYwZGMtMjEzMi00ZjQ3LTk4NzEtMDAwODVkZGRiZDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh8+oQ1GMu5C+tC6enizlfxwLoVd9GzhDoRW
gwgLKej9NhSxJiVWeeZUqIBnIDsManilToyTN7brU/2AGuROnrkZ3VD7fmzu7ri6
x5is+3ItSKXMSIIggAPEcgL4ozvfNO+3ngd/3KKUzZNq82xutgGlcW3siB/XXq/2
P8t2kHO1jW3u3uIeLgyQEgAweaVhDl1mMWQezho416Z4oV3/AN4otT4b5zOPgQSl
GALQNh6b6efkvC03wND2U58b9G8+YUiLTMgquQ+OsetqCX2MFv03RE/IDYnn2HhK
XV9IpFmQy1vcSJYS9bjQW6q0I6ndEBduMIVlrwkPspcTNw4axQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpKa6KAr2BB8hC0O0DRUciBMc1oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNzc3ZTI5MDItZDZkNS0z
OGRmLTg3MWUtMDQyM2M3ZThkYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBcsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbsj51kT0Odic1S8jXaMg56pt4/gb0vYkVE4zztAf9cjhwlIhMypa17
cJCbhBxa36pS8G6WUbOnkPg8Kn8e6cjRNZ/ctT4Tv7XNd3Aj8m79bMriQanm7dht
viCEyK2knVebZdBRrvqCwQehtUzGjj7pohG0BXcwdbKTbWic1BrRxolW2+Kom81F
t/s8sJBlaKLXrj2D3SAkcp80zV0+W4LSLUrXPDyx4WoynrIFV7rmPzPUIlttK7RA
SBNa/hWDtCRu6Crzsg46mZaLKfzSM0Rwn17nq1qoxsHa0OeLKUWBtHOdWFWt8wHn
6jz09Cm1w40j43oNAMa+37RgIBSVk5o=
-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org