Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa
File:                     d40b4235-7364-3fdd-8573-b909b87a9577.roa (raw, json)
Hash identifier:          nm/ir64nA3rvttI4Co4d25K7Zy8xGaSU6mhTUF7w8Xw=
Subject key identifier:   6F:3D:E3:22:25:14:12:82:1D:03:36:9A:AC:43:16:C5:EE:0B:55:4A
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62AB68C558ADD369C5D5E80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b6:8c:55:8a:dd:36:9c:5d:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d8eb8422-ffad-4281-afc2-fb3031ad2395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:3a:1e:a3:bc:2d:98:30:85:0b:67:c1:39:
                    f1:d4:d1:f4:1d:11:f9:04:16:05:2f:f5:62:1f:ae:
                    f8:83:f3:e4:17:2d:0a:28:6e:8a:a8:cb:f5:c3:e7:
                    cb:5c:50:60:01:26:bf:ae:7d:32:00:af:1a:a1:51:
                    f3:00:e0:08:a1:37:d5:89:21:71:e6:73:75:b1:58:
                    df:d8:36:e7:dd:84:0d:f4:eb:e0:12:9c:ac:a2:89:
                    16:df:cf:f9:a3:96:87:cc:79:1a:3e:f5:14:27:cb:
                    0b:5e:69:b8:4c:16:8d:a4:0e:46:63:a8:5b:d5:a8:
                    02:ee:cf:8a:7b:bc:94:f8:cd:d4:c7:cb:fb:b8:9d:
                    9b:89:a1:b0:7e:58:13:a7:7d:71:f3:1c:6f:c8:b5:
                    82:26:5a:cb:77:d4:6b:4c:35:97:98:93:3f:e6:be:
                    d3:95:55:6c:22:f8:39:ad:80:b5:50:78:f3:1e:d1:
                    06:e4:91:ba:0e:a3:1f:64:9d:90:2e:07:0a:0f:68:
                    d1:4a:ad:97:4a:3b:03:ca:d4:bd:64:50:1c:22:2f:
                    9b:f7:f2:5d:b7:7c:34:08:47:6f:f6:ad:72:d6:d7:
                    04:e4:41:1a:60:70:58:e1:03:8b:dd:1a:7b:a0:c2:
                    e2:ef:f2:06:c8:23:b6:74:92:aa:16:81:46:33:7e:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3D:E3:22:25:14:12:82:1D:03:36:9A:AC:43:16:C5:EE:0B:55:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d40b4235-7364-3fdd-8573-b909b87a9577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:af:9b:28:58:50:58:4e:0f:fa:fb:a2:af:43:f2:17:1d:c3:
         1c:07:02:d7:1a:bb:8a:26:52:ee:06:c5:52:bd:15:d6:f0:13:
         3f:f2:33:ed:72:03:12:63:16:bc:fc:d2:f8:be:2a:ff:10:fb:
         8e:fe:68:29:ac:95:83:bf:de:d9:57:79:7f:a9:76:e4:4f:31:
         1f:4b:7b:32:a0:ec:82:a0:d7:27:76:b7:0a:e1:ee:ea:7a:33:
         0f:f5:6b:1c:18:3f:25:26:60:b4:8d:5c:a2:d4:97:2d:8a:42:
         aa:f0:98:3a:57:f2:ed:87:09:ab:e5:55:67:43:4a:01:f3:51:
         19:29:55:a1:b9:41:3a:ed:cd:26:d9:d0:af:86:22:37:a9:61:
         0f:8c:00:9b:95:7b:bb:4c:04:41:27:59:59:3b:95:7e:71:77:
         f6:a5:9d:2d:da:a8:fd:d0:78:2d:20:f8:a0:33:1c:f7:38:49:
         47:24:7a:c2:4f:19:56:04:4a:62:86:5d:c2:fd:ba:a7:e2:5b:
         75:70:9e:10:6f:55:8a:66:bc:ef:35:b4:99:5e:5c:5a:eb:ee:
         db:48:e2:de:41:fe:61:26:32:fc:71:f2:33:1e:16:92:bd:20:
         ef:82:27:72:e5:c5:7b:47:d2:75:a5:3e:63:ed:60:ee:26:3e:
         75:a4:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:41 2024 by rpki-client on console-fra.rpki-client.org