Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa
File:                     d40b4235-7364-3fdd-8573-b909b87a9577.roa (raw, json)
Hash identifier:          +wwYO6+f1RLouKH3mQr1Hsu3yrb9EdmrZmUmr1K1vhI=
Subject key identifier:   C1:FF:BE:71:82:AE:64:A5:10:C1:0F:FA:47:7E:A4:F9:7E:D7:80:83
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285845462D0C5F08B767A345729F40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa
Signing time:             Wed 20 Mar 2024 21:03:26 +0000
ROA not before:           Wed 20 Mar 2024 21:03:26 +0000
ROA not after:            Tue 18 Jun 2024 21:03:26 +0000
asID:                     36492
IP address blocks:        136.23.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2d:0c:5f:08:b7:67:a3:45:72:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 21:03:26 2024 GMT
            Not After : Jun 18 21:03:26 2024 GMT
        Subject: CN=384b1e5a-fc4e-4fb0-9875-3593b5903166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:67:dd:c9:5f:ab:35:a2:84:43:d3:77:d8:
                    7a:04:16:96:ef:94:ea:14:40:4f:ac:4f:d0:88:60:
                    22:51:65:a1:d0:16:bd:d7:ca:22:b4:7d:bb:d0:11:
                    dd:d2:5a:30:d2:90:09:9f:25:7f:af:6d:37:40:18:
                    34:8a:4e:8d:0e:d8:d3:12:9f:ef:f9:f2:94:0a:ff:
                    65:a1:c4:e9:89:14:8f:3c:4a:73:e3:32:c4:5d:85:
                    83:67:2d:2e:4d:d7:ba:28:70:e1:ca:e4:9a:9d:8c:
                    0e:87:8b:26:bd:78:04:83:12:18:c7:25:1f:4a:8e:
                    a2:03:ca:a7:7c:22:f7:96:0f:8d:5c:0c:88:34:4d:
                    eb:9c:4b:91:48:9f:e3:e6:43:99:0f:99:48:b4:67:
                    c2:fd:50:5d:56:23:57:dd:3b:33:0a:1f:51:ea:0e:
                    bd:2a:4f:a8:ce:8f:6c:70:17:d3:9b:bc:f0:5f:f5:
                    51:7b:fa:ae:1b:05:21:c3:88:ed:81:d2:a2:fd:96:
                    f6:f5:c3:31:ab:c2:f1:63:43:2b:5e:f3:ea:84:04:
                    ce:bf:f8:af:f4:61:96:ac:8a:0e:d7:f8:84:82:67:
                    55:97:f8:34:3b:9f:55:98:64:c9:b3:f4:b2:65:a2:
                    c0:84:e2:f2:58:b7:68:89:4b:35:89:2d:12:7b:d9:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:BE:71:82:AE:64:A5:10:C1:0F:FA:47:7E:A4:F9:7E:D7:80:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:f2:99:b3:9a:74:8a:12:b8:12:bb:56:10:dc:5f:8b:cf:
         7b:66:8b:e5:72:15:49:3c:2f:ed:18:56:d6:f1:db:8b:27:9d:
         48:58:60:8d:95:0a:98:05:e9:bb:c1:8f:ba:fe:4c:22:de:b7:
         56:40:64:99:70:d3:46:c5:bb:a7:9a:0b:fc:c0:32:bd:6e:70:
         f4:fb:99:3d:38:db:48:e1:9b:ff:fd:98:13:01:48:a2:cb:aa:
         23:3e:cf:00:f9:92:7b:b9:2b:5d:2b:1e:d9:9e:88:b5:3e:9c:
         f3:b4:9d:90:1a:4a:e2:0b:0f:43:73:37:c3:8d:fd:20:4a:4d:
         1d:a6:4d:15:49:ff:2f:f9:30:7b:d8:a5:aa:2d:b6:ff:ab:b9:
         a4:0f:26:9a:14:5c:c9:a2:31:7a:0b:f0:cb:7c:73:fd:f6:c7:
         40:e2:47:d8:bc:6e:49:eb:9e:72:d7:7b:d6:02:d5:7d:8d:2d:
         f0:b0:2b:46:5f:6c:0b:16:e1:ca:50:72:00:cc:98:a1:8e:cb:
         75:25:21:5d:2c:cf:42:8e:70:bf:83:fd:b0:70:49:4d:41:83:
         2f:98:2c:a5:8b:e0:0c:da:dd:05:00:c4:06:76:c3:8a:eb:8c:
         aa:01:4c:a0:7f:58:6c:fc:cf:4d:87:e1:aa:cb:3e:4a:e2:d3:
         e2:c6:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:27:54 2024 by rpki-client on console-fra.rpki-client.org