Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa
File:                     ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa (raw, json)
Hash identifier:          QcT7FQvQo3v0M5AAuyokwG8Ok6huJm8DskUlcIwxBv8=
Subject key identifier:   37:A4:AA:78:69:25:CF:41:FE:D0:1C:4F:DC:54:15:E0:74:6B:21:57
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B49FFE57313942BE86B40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:49:ff:e5:73:13:94:2b:e8:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=55362948-13da-40a0-85e6-b4a301626a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:f0:2b:1f:fb:ad:b8:62:37:9f:34:af:c9:
                    ac:cc:5d:c6:84:33:d7:51:41:78:df:64:8a:00:46:
                    b8:bc:88:b4:bd:7a:2a:af:bc:6b:c9:7f:18:06:40:
                    d0:e5:47:63:b8:cb:21:f7:47:8b:0f:31:e0:85:3f:
                    ee:2b:64:40:c6:d5:96:a8:54:fe:8c:1e:27:03:27:
                    90:53:66:b8:58:ad:2f:f9:f4:e7:f2:a4:15:0d:ac:
                    fb:f8:79:0d:77:07:81:46:77:42:af:7e:7b:17:4a:
                    7d:59:1a:f9:e1:df:fa:17:98:a7:6b:cd:6c:2c:da:
                    3d:a1:52:e6:f3:a3:92:83:97:99:a2:17:7e:a5:d7:
                    2c:39:1f:cd:d6:be:74:35:52:88:c1:c3:a0:d5:ff:
                    44:ae:2b:5a:db:e1:bf:18:76:cd:70:87:7a:48:bf:
                    84:87:da:f4:49:1f:12:08:9b:84:b9:87:32:f1:79:
                    9f:e1:bd:f0:3b:d0:6c:1e:f4:91:97:44:a0:70:30:
                    1a:10:d9:75:16:58:60:3e:83:7a:fb:5f:10:06:39:
                    44:b4:28:bd:13:8d:25:a4:e4:64:65:07:58:fb:92:
                    0a:6f:bd:b8:15:77:b5:57:a0:c6:16:cd:fd:94:35:
                    2e:cd:46:12:ef:3d:c3:8d:73:69:ef:61:00:de:32:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:AA:78:69:25:CF:41:FE:D0:1C:4F:DC:54:15:E0:74:6B:21:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ce425119-67ab-3c82-b2e0-b1a1c2416fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d0:df:c3:be:41:6a:c2:a4:bf:21:55:87:c8:bc:4b:e1:1f:
         86:6f:f8:1d:b7:a8:72:60:e9:fa:f2:62:61:21:a6:70:ed:a2:
         8e:14:73:9d:ab:e7:02:6d:34:eb:91:90:f4:92:4f:d8:a3:a4:
         2e:6f:4d:eb:35:e5:34:10:cc:98:bb:ab:0e:59:52:1e:06:e5:
         65:6f:dc:bd:b5:0d:44:cb:c2:5e:dd:6a:c8:93:93:43:d6:7e:
         88:97:1d:9e:7b:e9:21:78:ad:89:05:7b:81:76:4e:a8:e0:17:
         5b:8c:83:ca:df:ab:66:d1:b9:45:3b:2c:b2:27:1f:2b:6c:8f:
         a8:9c:6a:0a:e4:7a:02:85:8d:30:39:fc:1d:fb:89:d8:3a:ef:
         c7:9b:78:dd:6e:66:21:e4:f9:d4:e0:71:f9:2d:e6:00:6d:d7:
         0f:52:a2:41:71:1d:d8:5a:41:80:cb:0f:af:82:36:b3:d2:05:
         17:95:d6:0f:33:a5:e3:27:7d:ae:17:aa:fb:bd:62:54:41:de:
         28:9d:10:b5:12:b9:1b:71:42:29:7d:6d:ad:52:dc:b0:a5:41:
         45:1d:7c:be:54:69:89:26:c8:43:5a:16:29:63:46:d4:04:16:
         d3:76:4c:11:77:35:a4:e4:26:67:49:cf:22:a8:55:1e:a3:18:
         50:d3:27:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0n/5XMTlCvoa0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTUzNjI5NDgtMTNkYS00MGEwLTg1ZTYtYjRhMzAxNjI2YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rwKx/7rbhiN580r8mszF3GhDPXUUF432SK
AEa4vIi0vXoqr7xryX8YBkDQ5UdjuMsh90eLDzHghT/uK2RAxtWWqFT+jB4nAyeQ
U2a4WK0v+fTn8qQVDaz7+HkNdweBRndCr357F0p9WRr54d/6F5ina81sLNo9oVLm
86OSg5eZohd+pdcsOR/N1r50NVKIwcOg1f9Erita2+G/GHbNcId6SL+Eh9r0SR8S
CJuEuYcy8Xmf4b3wO9BsHvSRl0SgcDAaENl1FlhgPoN6+18QBjlEtCi9E40lpORk
ZQdY+5IKb724FXe1V6DGFs39lDUuzUYS7z3DjXNp72EA3jJtxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDekqnhpJc9B/tAcT9xUFeB0ayFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvY2U0MjUxMTktNjdhYi0z
YzgyLWIyZTAtYjFhMWMyNDE2ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTQ38O+QWrCpL8hVYfIvEvhH4Zv+B23qHJg6fryYmEhpnDtoo4Uc52r
5wJtNOuRkPSST9ijpC5vTes15TQQzJi7qw5ZUh4G5WVv3L21DUTLwl7dasiTk0PW
foiXHZ576SF4rYkFe4F2TqjgF1uMg8rfq2bRuUU7LLInHytsj6icagrkegKFjTA5
/B37idg678ebeN1uZiHk+dTgcfkt5gBt1w9SokFxHdhaQYDLD6+CNrPSBReV1g8z
peMnfa4Xqvu9YlRB3iidELUSuRtxQil9ba1S3LClQUUdfL5UaYkmyENaFiljRtQE
FtN2TBF3NaTkJmdJzyKoVR6jGFDTJ3E=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org