Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b4773d1f-8fb1-33b5-967b-2082d2501fe6.roa
File:                     b4773d1f-8fb1-33b5-967b-2082d2501fe6.roa (raw, json)
Hash identifier:          ViSEAw3ksWf6ZM+Z2y6N8YTgtCx4MSOc6wf7u78noE4=
Subject key identifier:   33:BA:BC:93:D5:08:5A:52:E2:1B:78:E1:95:20:86:F7:83:C8:02:15
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E094D80F302F89D549D92D80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b4773d1f-8fb1-33b5-967b-2082d2501fe6.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d8:0f:30:2f:89:d5:49:d9:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=765eb9fb-6635-4a39-98a9-b739c896f347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:83:22:5e:ae:04:3a:92:34:aa:e9:01:d1:
                    4e:24:e1:46:55:e7:56:5d:c4:ed:3a:e0:48:62:c3:
                    30:09:0e:f9:5f:cf:25:2b:ff:0d:1d:f4:81:e1:ae:
                    6c:7f:c7:2c:f9:95:cc:e7:37:f4:88:ae:0f:f8:99:
                    e2:25:8f:a0:36:ba:d8:c0:19:86:22:e9:87:86:81:
                    ac:16:de:a3:d9:c1:e8:3f:0d:de:51:05:7e:5d:fc:
                    7c:57:9d:bc:38:90:d5:0a:4e:b8:1a:87:39:19:18:
                    29:f1:2e:1d:15:5a:b8:de:15:b8:8b:99:78:cf:99:
                    79:6a:30:1c:89:a4:4e:47:55:a9:19:f6:cb:28:64:
                    16:d7:80:46:ae:dc:3c:f0:17:48:92:10:76:c7:57:
                    80:63:1f:d9:99:97:3c:95:1d:61:f8:3b:6d:01:db:
                    d6:4c:0a:98:90:09:4a:8b:96:a2:09:69:fd:a2:3c:
                    c5:b6:e5:f0:f1:91:ad:4c:b3:89:a7:6c:9d:6a:f5:
                    77:0b:25:4b:66:55:2d:94:92:3e:93:b0:7d:cf:89:
                    44:6b:63:7e:d9:8b:6c:4f:bb:07:40:b6:2b:a2:71:
                    6c:bf:cb:ba:5d:25:e0:f5:6e:21:8a:77:d5:c5:5e:
                    09:a8:38:4b:4c:10:0e:1d:17:b8:78:b9:f3:cb:b1:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:BC:93:D5:08:5A:52:E2:1B:78:E1:95:20:86:F7:83:C8:02:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b4773d1f-8fb1-33b5-967b-2082d2501fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:ea:19:f2:43:b2:c6:66:9a:9f:e6:d3:d7:25:ed:94:fa:
         05:3b:37:23:04:ad:4d:45:5d:3d:6c:76:f2:d4:bf:27:3a:af:
         8f:18:0f:23:ad:ed:20:84:fa:75:20:74:d5:6a:f9:da:a6:23:
         5a:0d:6b:85:32:67:7a:e3:31:b2:f3:b9:c2:42:9b:f4:e9:d5:
         1f:46:bd:c6:fc:b5:00:78:bd:8d:30:45:ba:27:a9:4e:40:e4:
         76:d6:20:47:ec:23:ab:f3:73:0e:66:19:b6:96:f4:dc:42:71:
         0b:66:4a:50:b7:f1:4a:36:88:2c:25:a8:b6:e9:aa:82:95:66:
         b9:19:ae:52:58:5a:d5:44:98:37:f3:5e:75:85:0a:7c:02:7a:
         04:4f:7c:f7:83:32:e3:b9:98:1c:3d:0e:da:a2:c6:c3:cd:30:
         4d:f0:5c:7d:3e:86:44:53:1d:62:1a:64:c7:8a:39:74:fb:cf:
         cd:25:41:40:61:51:06:e4:c0:d1:82:bf:69:11:86:ee:a6:ef:
         0a:e0:c1:e4:b1:79:7e:11:7e:d0:fe:81:31:d5:66:1f:e2:4b:
         73:74:35:8d:5e:ce:72:38:5e:50:07:db:09:ac:73:f9:e4:a7:
         27:2b:f2:69:4f:50:df:76:d8:1c:b6:35:77:c9:89:ee:c7:5b:
         f0:0d:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:36 2024 by rpki-client on console-fra.rpki-client.org