Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae480c8f-c1c0-30b5-a643-c74982d153d3.roa
File:                     ae480c8f-c1c0-30b5-a643-c74982d153d3.roa (raw, json)
Hash identifier:          DTArg+svdMWtC8MdqjU+/wPcOgmj/IC32MIHnmYzL0g=
Subject key identifier:   A4:0D:6D:A3:7C:2E:F9:E4:04:C3:4D:F6:2F:F6:D1:69:B0:AE:DD:F7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454629DF2F9126674FFAE09F80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae480c8f-c1c0-30b5-a643-c74982d153d3.roa
Signing time:             Wed 20 Mar 2024 20:57:02 +0000
ROA not before:           Wed 20 Mar 2024 20:57:02 +0000
ROA not after:            Tue 18 Jun 2024 20:57:02 +0000
asID:                     36492
IP address blocks:        136.23.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:29:df:2f:91:26:67:4f:fa:e0:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:57:02 2024 GMT
            Not After : Jun 18 20:57:02 2024 GMT
        Subject: CN=b3077413-74c2-471c-83b4-f80514cebec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:15:47:81:a9:5f:40:a2:6a:9f:1e:cc:53:62:
                    db:ce:77:e5:14:9e:26:3e:a7:2c:7e:8d:78:1e:a2:
                    79:9e:1a:92:17:2d:72:f2:b5:6a:96:69:43:29:71:
                    90:9f:5a:01:3e:a6:1c:a2:5c:2a:e5:8f:9d:78:2b:
                    62:a4:28:7e:7b:fc:00:25:60:71:8e:c0:04:b0:b3:
                    3d:db:57:44:2e:c2:ba:5d:45:82:9b:8e:7f:f9:2c:
                    52:5e:6c:75:dc:83:f1:f7:2f:50:e9:5b:df:21:3d:
                    f6:a8:be:ae:cb:69:61:ad:dd:aa:4f:27:a8:1e:c4:
                    3e:3a:20:3b:69:b4:69:a7:97:44:bc:f4:55:0e:32:
                    9f:91:c1:cd:72:32:51:42:d7:9a:36:e7:a9:22:c7:
                    13:31:f9:6d:4e:ec:7c:21:be:e7:0c:1c:8a:18:3d:
                    12:2f:e1:02:94:7c:0e:db:97:24:5e:c9:e1:ca:ad:
                    d7:49:22:50:3e:dd:c6:ba:31:14:45:c7:1a:c2:24:
                    0f:e8:3c:45:8d:88:eb:6c:54:00:44:ca:c7:33:d1:
                    8c:0e:c5:03:f4:0b:99:c2:ad:82:08:2d:c2:2d:41:
                    b8:a0:da:40:af:f8:a1:79:fa:6e:b7:d5:92:f4:ac:
                    18:35:e2:68:3a:4a:45:78:94:0c:16:eb:c8:3c:af:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:6D:A3:7C:2E:F9:E4:04:C3:4D:F6:2F:F6:D1:69:B0:AE:DD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae480c8f-c1c0-30b5-a643-c74982d153d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1a:0d:cd:f8:c9:97:8a:2c:07:64:ed:eb:e2:e9:40:c2:cc:
         15:44:04:e6:f8:e3:a3:b6:12:1e:ae:c8:13:63:f5:d2:cd:26:
         b1:42:8e:3e:ea:b5:fd:53:3d:7a:1c:8d:d8:b3:c2:2d:7c:b3:
         df:9c:39:99:f3:81:ad:1c:a8:23:96:3a:b4:a3:6f:5c:b7:22:
         c9:45:b7:85:99:80:82:ba:f8:b4:7d:e5:e6:37:4e:67:da:8e:
         0b:0b:56:6a:85:52:cc:59:f7:99:0f:89:93:16:de:c8:09:8b:
         42:bb:34:4f:7e:5b:2f:5d:91:1f:fc:97:92:55:74:e0:dc:63:
         e6:aa:e8:07:0a:60:24:32:73:51:49:70:0d:84:4c:4d:b6:ef:
         15:0d:42:19:3b:7f:c9:ab:fd:20:71:87:97:99:29:7e:57:d8:
         61:8e:81:3d:90:76:8f:c8:8f:b8:7b:7e:2e:07:28:ee:d8:c2:
         2e:a9:82:fb:f4:5b:62:e6:7c:20:dc:d1:a4:ee:cf:99:6f:9f:
         70:aa:3a:e5:9c:37:80:41:53:d2:45:53:98:90:d2:2d:cb:f8:
         d6:5d:68:9b:b9:30:18:e4:f0:3c:6d:db:55:2a:90:a6:16:fe:
         a8:9a:fb:24:7d:da:c7:e2:ae:80:b0:e7:91:a2:13:a6:62:18:
         ea:57:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:53 2024 by rpki-client on console-fra.rpki-client.org