Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7b2e816a-1994-3599-bef4-2ea175d77319.roa
File:                     7b2e816a-1994-3599-bef4-2ea175d77319.roa (raw, json)
Hash identifier:          oyS5jYPUr7rRXAfP3bfKtWDPgNeWhIAp7MzzTcEyUng=
Subject key identifier:   1F:85:90:6E:C7:C1:61:EB:30:72:B1:E0:5B:C8:F7:58:85:63:EE:C9
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584546247DC5C714515E44666200
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7b2e816a-1994-3599-bef4-2ea175d77319.roa
Signing time:             Wed 20 Mar 2024 20:46:11 +0000
ROA not before:           Wed 20 Mar 2024 20:46:11 +0000
ROA not after:            Tue 18 Jun 2024 20:46:11 +0000
asID:                     36492
IP address blocks:        136.22.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:7d:c5:c7:14:51:5e:44:66:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:46:11 2024 GMT
            Not After : Jun 18 20:46:11 2024 GMT
        Subject: CN=ebb12fcb-501c-4313-994d-004125efad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:e5:5a:4a:af:14:52:fc:13:5f:42:6f:2e:
                    34:fd:0b:43:80:50:3a:e3:e9:ff:02:c0:86:0c:24:
                    6c:00:a2:d1:aa:ca:4d:69:50:b5:ff:eb:5d:24:dc:
                    3b:85:52:68:b2:c3:2c:67:65:05:5f:5e:55:cb:98:
                    70:50:18:3e:7f:43:57:52:0f:dd:3e:ca:82:4a:4e:
                    db:69:eb:d0:c2:ac:0a:6d:e2:59:e0:06:4c:3c:b0:
                    6b:bf:a3:3e:43:46:74:42:eb:3b:e2:bf:66:42:a5:
                    10:57:07:8c:90:c9:21:0c:27:66:ed:09:84:87:3f:
                    21:77:ca:b5:01:cc:4e:67:db:a4:69:98:95:e7:95:
                    a1:a2:d5:12:a2:cf:fc:a9:cb:42:c8:46:42:c2:a5:
                    04:5e:c7:5f:a7:73:2f:5d:2c:7e:39:1d:32:61:ce:
                    ba:51:b7:b5:6f:42:b3:3a:fd:41:38:a2:d6:37:d6:
                    9f:14:6b:66:fd:6a:2a:a5:e9:7e:1d:7b:df:7c:0f:
                    2f:d0:4f:3e:fc:51:db:f6:ed:1d:26:92:fa:94:fc:
                    fb:43:70:5c:94:b9:89:90:8a:2c:7e:9e:38:04:dc:
                    36:bd:4e:7d:e3:a2:68:69:82:59:e0:cd:86:3e:27:
                    13:a7:7e:81:35:b1:a9:b9:72:47:aa:82:f7:23:40:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:90:6E:C7:C1:61:EB:30:72:B1:E0:5B:C8:F7:58:85:63:EE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7b2e816a-1994-3599-bef4-2ea175d77319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:63:6f:a4:4c:2c:b1:4b:75:ee:ab:6d:38:b3:57:e6:0e:
         8e:17:9a:bb:28:9f:41:83:9e:ac:d8:b9:b6:54:aa:8f:1c:27:
         3a:62:bd:d1:a8:6c:68:c2:cb:72:64:b4:7e:4b:15:8f:9d:f0:
         21:34:2b:e7:9f:48:5c:74:96:f7:20:c9:66:2a:4d:eb:82:15:
         0f:7b:11:7d:8f:02:ce:d1:f7:ae:00:ed:da:13:02:c4:05:dc:
         cf:a1:92:c3:db:24:15:de:a8:ea:72:0e:82:dc:15:a2:f7:7a:
         2b:58:1e:6f:d6:5e:2a:57:09:fd:26:a7:f2:09:03:b5:13:75:
         6f:ca:ba:1d:d8:f1:1d:22:d5:45:1e:83:3b:4e:b1:6f:0c:21:
         a7:38:04:b3:33:4a:fe:d4:f2:86:98:5b:77:a5:8c:79:60:b2:
         0b:5e:7c:c0:73:5f:70:89:5a:38:dd:b1:ec:1d:d6:28:b0:e8:
         0d:03:2b:31:94:f9:ca:a2:af:30:b4:96:b5:d2:0c:56:51:ed:
         96:8c:1f:ad:3a:dc:24:3c:e5:4b:6f:9a:d4:31:3d:6b:9a:76:
         aa:75:66:fa:8c:c9:8b:8a:d2:6b:a0:4a:7e:5a:c2:0c:b2:ad:
         90:eb:90:ec:db:ee:03:44:e7:37:b4:12:ed:53:4a:8e:f7:6b:
         87:0c:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:27:01 2024 by rpki-client on console-fra.rpki-client.org