Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa
File:                     bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa (raw, json)
Hash identifier:          /9ITkjlLAG0uHGWE1mMXArPmnIzeisjTe8z0u0Op/cs=
Subject key identifier:   6D:41:91:44:4A:02:43:36:24:09:47:BE:76:3C:4F:A9:B4:93:40:AC
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B36CCA560DA14918E4C20
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:36:cc:a5:60:da:14:91:8e:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=00201962-e09b-4169-8cd6-1fe0285658fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:ec:03:ab:29:47:b6:02:fb:ce:6b:b4:62:
                    82:f8:d8:d0:b0:23:bb:d9:1b:18:63:47:55:e4:7c:
                    b7:d5:18:7e:25:4d:fc:34:dd:28:5b:2b:42:e7:03:
                    8d:fb:68:84:d6:99:02:de:ff:a7:95:c3:5c:11:b7:
                    b4:f9:c0:86:31:7e:86:bf:c3:47:07:69:58:14:d8:
                    6e:ec:b0:32:75:8a:6f:c4:e7:6f:60:c8:cb:8f:eb:
                    29:c8:73:9d:82:df:cb:25:7a:86:1f:0f:54:1d:08:
                    b8:47:16:65:9f:6b:76:25:1b:69:6c:4e:90:20:aa:
                    66:e3:a7:74:ef:56:76:b9:8f:95:33:84:e8:6d:ec:
                    81:9b:b7:d9:18:94:12:98:82:90:bc:24:6a:ce:15:
                    7f:d9:81:c5:83:06:61:05:0b:7b:93:14:70:1f:1e:
                    79:f2:58:5b:63:4b:2b:bc:b3:72:36:c5:50:54:fb:
                    97:2e:af:56:59:5b:84:7f:3f:d2:c0:46:60:00:54:
                    1d:5d:15:f2:12:ce:07:a7:6e:af:1a:09:92:52:db:
                    0b:63:fc:49:ee:b4:55:8c:2d:c5:ac:0c:67:50:6a:
                    d3:3b:75:f1:2d:ae:39:eb:48:64:01:42:be:59:e3:
                    d7:95:2e:ad:d3:6d:a4:b1:85:46:ea:34:d5:f6:1d:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:41:91:44:4A:02:43:36:24:09:47:BE:76:3C:4F:A9:B4:93:40:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/bb736556-8033-3e17-86be-0a2b7e7fe3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:98:37:ed:9a:8a:7a:46:91:1a:68:51:0e:da:01:bb:b3:15:
         87:7a:ce:07:9f:57:9f:2d:04:06:0e:e1:e4:d0:e7:b2:de:36:
         ff:24:ef:b6:ae:26:a3:02:b8:ce:62:85:da:d4:dd:da:f0:45:
         a2:e8:a1:e4:5e:25:73:00:fc:47:f4:46:a4:bf:50:ce:e5:d4:
         e7:d2:96:4a:f1:6a:76:0e:5b:48:02:41:30:75:b9:a6:12:77:
         f4:ed:7a:7a:a7:42:04:a7:62:a8:0b:7e:99:5a:a6:71:80:55:
         3c:bc:03:cc:86:30:b2:a7:98:4c:3c:24:85:7b:82:52:6a:89:
         62:51:c3:40:d9:f6:d1:0b:a1:ed:c7:e9:72:25:70:e5:f8:e8:
         33:bf:d3:04:00:85:e5:c7:55:13:19:34:e2:18:ce:2d:5a:44:
         48:ed:9a:e0:56:7c:ef:d0:9a:19:cc:57:d1:54:d7:e9:8e:84:
         ac:39:50:e8:57:46:05:34:0e:81:43:b0:32:a2:36:d4:c0:b2:
         67:4f:33:ec:62:d6:52:dd:df:9b:56:3f:0f:17:35:a3:42:ba:
         38:18:2f:88:a9:2d:32:eb:af:60:b4:66:e7:96:c2:aa:23:3b:
         a2:7c:2e:8b:69:e4:18:2e:09:f4:ff:ef:88:19:93:15:2b:32:
         e8:1f:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:32 2024 by rpki-client on console-ams.rpki-client.org