Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa
File:                     a00b4080-e5b5-330a-89b6-fe1385a253f2.roa (raw, json)
Hash identifier:          5/l6zRkL/WiJKzALvcL5YZhk5q9TK/BwRaS5xhl66jo=
Subject key identifier:   D6:43:98:F7:CC:F4:39:A9:00:B4:9D:53:73:36:E7:2F:27:13:3F:73
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454624BD46D11F5518AF1D15E0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa
Signing time:             Wed 20 Mar 2024 20:46:41 +0000
ROA not before:           Wed 20 Mar 2024 20:46:41 +0000
ROA not after:            Tue 18 Jun 2024 20:46:41 +0000
asID:                     36492
IP address blocks:        136.23.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:bd:46:d1:1f:55:18:af:1d:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:46:41 2024 GMT
            Not After : Jun 18 20:46:41 2024 GMT
        Subject: CN=ae849f37-1f4c-49db-9b34-cef799102294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:73:04:a2:68:84:19:26:6c:01:4c:0f:2b:
                    77:cf:27:f7:fd:3e:10:75:f7:4d:7c:59:17:4d:05:
                    78:03:d7:af:58:d0:16:42:cc:1c:b2:9e:a8:eb:c1:
                    86:3c:2a:ba:ca:ae:a9:70:f1:e5:fd:7d:92:cd:f6:
                    a8:51:6c:07:27:93:29:3c:b2:47:a8:d8:34:1b:0a:
                    c4:89:b7:e2:81:4d:e5:70:75:70:e4:1d:b3:1a:e7:
                    c4:c6:69:1d:c1:68:77:56:3a:bb:95:95:b7:00:a0:
                    9e:80:be:ba:76:4e:f1:f1:ba:82:52:59:c0:57:96:
                    88:26:53:90:60:8f:35:69:0f:be:14:12:59:80:6e:
                    2f:b0:ac:36:1b:02:bd:fc:33:d5:8c:f4:6d:64:56:
                    d6:90:43:f8:9c:28:fd:6b:11:db:e3:c1:c2:37:1e:
                    ba:ef:94:98:a0:46:e5:bd:50:29:15:43:1f:5b:e0:
                    ef:73:e5:c6:40:70:72:b5:66:87:34:51:c5:22:62:
                    07:d3:e9:9e:4a:0a:f2:a1:a1:4c:53:0b:2a:63:87:
                    9a:87:fa:f5:56:96:66:75:ed:e5:93:34:be:ec:fe:
                    84:68:a3:e0:aa:24:51:7d:92:e7:6d:17:ec:39:d4:
                    8b:44:88:c2:72:3c:84:88:4b:8e:0a:da:b2:39:ad:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:43:98:F7:CC:F4:39:A9:00:B4:9D:53:73:36:E7:2F:27:13:3F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a00b4080-e5b5-330a-89b6-fe1385a253f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:2f:54:4f:69:5b:e9:c3:b8:1f:c0:b6:75:df:fa:6e:82:
         bd:9e:77:c1:b6:5f:a0:38:08:0d:d3:b0:3d:3a:e9:55:05:e7:
         70:14:43:ac:25:e9:1c:6a:ef:b1:6c:d7:3d:77:e8:5f:a7:36:
         57:16:85:31:ea:66:58:99:20:a9:f4:ca:7f:b1:92:c3:85:76:
         22:c6:46:e1:d2:33:f0:17:21:71:a3:bb:97:15:5e:6a:de:47:
         f4:02:54:a9:9f:be:8e:58:5b:a8:2c:e3:16:fc:82:f9:c9:a4:
         2b:04:6c:86:91:42:5d:b6:59:d3:51:c5:23:2d:25:1d:f5:42:
         db:4a:bb:7e:d1:76:5e:69:12:40:4e:d4:79:e3:46:5b:c9:7f:
         a1:27:93:b5:7c:77:95:52:02:e6:3f:b5:f2:88:cd:93:c0:5b:
         04:e1:f4:5f:c6:63:72:0b:1f:63:9b:54:12:4d:9f:52:97:89:
         11:50:67:e8:07:f2:fd:cc:31:d3:84:8b:d1:8e:10:79:68:c0:
         29:9d:11:4b:01:78:ed:fe:65:cc:9b:0d:22:f1:4c:52:69:20:
         e6:e2:bd:ca:63:7e:a4:54:d2:29:e1:31:95:f2:c5:0f:7e:91:
         ff:9b:ed:1d:8a:34:77:ae:c7:f9:ba:88:fb:0c:f6:07:6e:dc:
         46:32:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:36 2024 by rpki-client on console-ams.rpki-client.org