Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c3fe440c-9ec3-3725-be73-07d95f4c69ac.roa
File:                     c3fe440c-9ec3-3725-be73-07d95f4c69ac.roa (raw, json)
Hash identifier:          Q0f03MhRR8AytQyCVIkAErD/YQdGDmImpIgn+rryE+M=
Subject key identifier:   A8:43:56:CB:7F:D9:E9:EA:96:67:93:27:DA:81:B3:A3:B3:0F:6B:7B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B3CC6742A374FEA97BA80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c3fe440c-9ec3-3725-be73-07d95f4c69ac.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3c:c6:74:2a:37:4f:ea:97:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2f3d3645-0de4-45f6-8ee4-a50825801d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:3c:d8:81:c4:0e:06:79:e4:0b:04:cc:c7:
                    97:87:6e:c5:7a:8d:55:28:1d:7b:c1:6c:34:19:27:
                    b7:7b:d1:fe:16:47:5a:12:8b:60:8b:37:20:0c:02:
                    14:a7:3b:2c:30:c5:4d:28:4c:b7:d5:50:d2:4a:28:
                    1b:6f:82:94:c1:a8:09:83:8a:39:90:7a:67:da:ae:
                    7f:9c:fd:81:71:f9:b1:b8:71:50:4c:8a:eb:12:a4:
                    3d:89:a6:71:05:8f:fd:98:e9:27:ee:1b:a6:d4:f7:
                    83:40:2b:36:29:1c:60:81:7e:dc:b3:c8:0e:91:34:
                    94:51:2d:1d:d7:25:e3:4b:d4:0b:27:97:9f:39:1f:
                    f4:45:19:80:d2:81:75:01:06:0f:02:fe:b2:33:dd:
                    cc:cd:24:af:00:10:bc:6f:63:d4:20:bf:80:c5:8f:
                    ec:8b:32:9a:10:cc:bc:55:3d:10:0b:20:a2:64:f3:
                    3b:aa:b1:31:29:25:22:83:08:29:dd:a6:a2:2b:9c:
                    8c:6e:fd:41:b9:88:c3:86:6e:d5:f6:e9:ad:4c:d7:
                    63:8c:da:fc:d2:a0:6a:d7:e2:4a:95:e9:a4:01:23:
                    82:23:c3:5e:87:82:2f:01:25:9b:43:a9:74:cf:49:
                    41:e5:c0:4f:16:8b:cb:a1:1d:b6:2f:fb:d1:57:85:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:56:CB:7F:D9:E9:EA:96:67:93:27:DA:81:B3:A3:B3:0F:6B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c3fe440c-9ec3-3725-be73-07d95f4c69ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:37:0c:07:d9:ed:57:a0:55:7f:84:18:d0:8c:d5:4c:44:10:
         67:dd:92:a7:43:2a:b5:03:12:ef:be:7e:c8:75:6f:33:c9:56:
         ea:01:1a:dd:f5:4e:f0:2b:b1:55:2c:99:81:e4:ea:b7:39:b8:
         1b:69:4f:16:0a:63:56:2d:c1:05:8f:06:23:e8:e2:5f:73:c6:
         88:bf:aa:0e:cd:51:56:26:24:79:fe:e4:cc:51:92:b3:5e:04:
         1c:20:6f:a3:a4:61:66:b1:6a:c5:76:60:c1:89:56:a7:23:b6:
         4d:d3:70:b0:48:ef:7e:de:52:a1:05:de:38:47:3c:62:4a:8e:
         9f:cb:f1:df:98:66:ea:9a:b1:37:88:ae:61:c7:b4:86:5a:19:
         e5:b2:21:e5:1a:6e:46:2c:97:e2:b3:d8:95:b0:3b:2e:a0:49:
         af:31:7a:78:9d:64:5d:e9:fb:ec:7a:f8:33:9d:13:36:fe:94:
         6b:27:fc:2e:bd:51:b9:03:91:7b:2e:f4:57:60:b0:b7:92:c0:
         1d:85:2e:3a:96:0d:82:dc:af:ce:18:93:ae:ab:c9:6c:7e:25:
         1e:10:22:6e:e8:bf:67:9a:d1:72:29:9b:e2:8e:e7:e0:1b:a6:
         7a:0f:7d:e0:52:be:d3:06:bf:4c:66:2b:65:e1:46:bb:13:75:
         65:97:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org