Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7880c0bc-fd79-3399-a3cb-022ce1a96543.roa
File:                     7880c0bc-fd79-3399-a3cb-022ce1a96543.roa (raw, json)
Hash identifier:          qAQZo4u8bMygU17C0v3xASLuDtcef0I6Se8J2A4/6EQ=
Subject key identifier:   30:21:AC:63:66:3A:F7:EC:1A:0D:73:A2:A0:61:8C:C8:08:9B:B8:35
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B35F002B18CC98D1CA680
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7880c0bc-fd79-3399-a3cb-022ce1a96543.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:35:f0:02:b1:8c:c9:8d:1c:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=7add83bc-c74c-4aad-8f13-442ec9b02e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:0a:38:ac:93:83:e9:16:54:93:75:fb:84:
                    6e:5b:36:66:3e:57:6b:bb:bc:bb:03:5c:d4:c8:60:
                    fb:75:16:5d:8d:33:6f:db:69:45:c9:69:40:e7:c8:
                    f6:46:88:3c:26:51:88:42:da:55:e5:1e:3c:02:c2:
                    7c:f6:4a:e5:06:12:2a:00:cb:e9:27:63:a1:9e:ab:
                    8b:1d:64:2e:75:19:87:b7:04:f5:12:29:c2:65:f9:
                    6c:7a:e7:3b:af:c2:0a:ec:96:21:91:f4:fd:96:2d:
                    bb:02:7f:79:39:94:2f:c1:34:1c:34:9b:bd:01:6d:
                    74:7b:1f:b4:c6:1b:3f:e1:17:29:25:c5:15:f1:3f:
                    24:bc:01:fe:ab:a2:36:73:bb:18:3a:97:48:94:13:
                    86:bb:5f:45:9d:52:d9:48:e8:c9:35:a5:9c:11:4c:
                    db:56:f6:62:e3:c2:3e:91:2a:7d:f2:67:18:b3:1f:
                    70:8e:54:5d:d9:e3:79:9d:20:8e:f8:ad:8f:32:00:
                    e3:26:76:06:d3:dc:a9:4f:af:13:43:bd:5e:e0:8d:
                    4b:eb:03:c9:68:f3:ef:f9:c6:02:f9:8a:0d:0a:d5:
                    88:a5:78:71:5d:e8:51:ea:04:92:b4:89:c1:da:cf:
                    41:e0:1c:00:cd:e7:02:69:bd:59:77:66:30:1a:f4:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:21:AC:63:66:3A:F7:EC:1A:0D:73:A2:A0:61:8C:C8:08:9B:B8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7880c0bc-fd79-3399-a3cb-022ce1a96543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:68:4c:65:cd:cb:69:cb:51:25:da:ba:ba:9c:79:4b:31:16:
         80:9e:75:ee:ff:b8:27:bd:83:37:3d:a2:52:ab:59:b2:e7:fa:
         71:7b:56:b5:df:f2:85:62:e4:53:76:6d:49:05:05:3c:ce:23:
         c3:a7:9b:ac:cf:cb:5f:f1:91:eb:3e:81:34:ee:5f:af:15:25:
         71:65:de:ac:21:75:91:9a:35:c6:a4:e3:8f:b0:8a:1b:67:19:
         f5:fa:f0:9d:7b:5d:9b:ae:cd:0c:42:fa:63:14:c1:24:36:59:
         d9:88:d6:f2:9c:a7:cd:c2:bb:06:e9:c2:f3:86:15:67:cc:76:
         0b:26:af:a3:6a:83:79:1a:f1:aa:14:5a:94:a3:81:99:87:31:
         ab:2d:7d:8b:53:13:73:4b:a3:30:44:62:bf:37:ac:3a:32:8c:
         78:a6:3f:4c:45:68:8d:d9:d8:11:e9:2b:2a:11:ea:3e:cc:08:
         11:13:23:92:23:24:9a:0d:25:4d:83:79:94:98:17:e5:6e:49:
         21:40:a5:08:9c:e4:a2:72:5f:3d:55:01:5b:eb:12:bd:10:bc:
         d9:d3:12:d3:92:82:8a:fa:a1:b0:5b:7c:ab:2b:80:61:b6:ea:
         a4:b5:77:2b:e6:79:be:20:25:c9:17:6a:e7:4e:80:2b:1f:83:
         b4:6b:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:40 2024 by rpki-client on console-fra.rpki-client.org