Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a71d76d9-46e8-3b0e-883a-3a17c02d41f4.roa
File:                     a71d76d9-46e8-3b0e-883a-3a17c02d41f4.roa (raw, json)
Hash identifier:          KbYw8W86WLybeqr8E4/9AT70xHbLejB6tNq9G1uo2JM=
Subject key identifier:   29:D5:89:85:82:12:08:C4:39:05:A6:9C:0F:81:96:14:14:A5:C1:A9
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B304E0E4E0F1EEFB3B800
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a71d76d9-46e8-3b0e-883a-3a17c02d41f4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:30:4e:0e:4e:0f:1e:ef:b3:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=9f677134-c24d-44ae-a0a6-20d369268cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:18:5a:e9:9d:53:f7:4d:56:81:d8:d5:fc:
                    02:23:e6:b0:78:d6:23:81:4d:70:a2:4d:c9:fb:15:
                    0c:f1:9f:76:3d:76:97:d0:bd:70:7b:3a:c4:31:1e:
                    9d:80:55:65:b8:36:ff:b3:65:5c:74:64:56:e6:89:
                    c4:95:ce:9f:fd:56:74:f1:7b:fd:93:e8:89:e7:85:
                    80:24:0d:1f:69:47:4f:66:b9:dc:21:d0:ec:51:20:
                    54:d9:12:02:e4:dd:19:d7:e0:a7:74:de:1d:34:33:
                    92:43:03:4a:e3:b5:de:e1:ec:5d:4e:74:5b:b8:d9:
                    2b:6b:bb:6b:2e:de:ab:b0:a9:02:37:9a:d2:ec:92:
                    44:b1:8d:8a:ee:22:da:de:44:00:49:ec:38:a8:df:
                    57:53:aa:92:55:5f:28:5a:09:6a:e6:92:ad:f9:73:
                    04:a3:4d:70:0c:65:01:19:67:78:e8:8c:09:af:4c:
                    f0:98:36:9d:e1:ce:00:5a:4e:a1:ba:3c:1f:d2:70:
                    9c:6d:fb:3f:fa:cb:c0:0d:46:50:33:9e:b6:f5:79:
                    83:a6:ae:36:21:5c:18:8d:eb:a1:72:18:d3:38:18:
                    32:43:3f:3d:2a:5b:5d:b7:75:cf:4c:f8:23:c7:5b:
                    01:37:37:a1:31:40:65:25:5a:a9:33:c7:04:0d:d2:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D5:89:85:82:12:08:C4:39:05:A6:9C:0F:81:96:14:14:A5:C1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/a71d76d9-46e8-3b0e-883a-3a17c02d41f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:df:95:54:d3:c3:98:56:7a:f8:f7:46:8b:92:c7:38:18:29:
         89:10:50:1e:d7:65:ac:c8:46:26:8c:92:d8:00:4f:e7:40:81:
         5e:67:f5:45:eb:f7:0f:15:7a:bd:31:82:c9:40:f5:9b:1b:a0:
         20:0f:0c:24:ef:9e:55:82:f4:b6:16:a3:f7:a5:74:b4:16:11:
         ed:dd:03:8d:a1:47:cd:7b:f6:f8:61:20:ef:b7:8e:fe:76:80:
         e2:56:a8:5f:6f:ed:32:f6:20:fb:d1:0f:99:e5:3c:09:de:0f:
         44:88:98:74:18:ea:78:f1:ae:42:ba:a2:03:9d:23:0d:67:40:
         86:1f:43:7a:7f:09:89:f0:73:ef:09:dd:72:27:15:35:a0:29:
         02:44:21:3b:8f:e0:d5:0a:ce:32:db:17:7c:be:bb:56:d2:f0:
         7b:36:cc:34:5b:70:85:51:4e:78:8f:f2:23:f5:d9:97:12:c2:
         fc:48:cd:b0:57:3f:85:f5:86:62:78:5e:31:c8:38:a4:8b:bb:
         a6:39:3b:ff:79:d1:a1:ce:af:46:2f:80:8b:51:2c:75:b2:e0:
         e1:6a:5f:c6:6c:71:91:1f:24:7a:ab:3e:19:80:3a:f5:81:79:
         19:2e:bc:1c:8f:bf:ce:77:67:11:fa:a9:d9:8c:b0:b8:27:ec:
         50:ce:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org