Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
File:                     d49add77-32a9-330b-a617-5437e0eedea5.roa (raw, json)
Hash identifier:          Laq3uXYM/Iu+rQUEAsPVKiUSyLgWec9T6JCxG9QRV7o=
Subject key identifier:   D1:35:B8:51:47:08:8F:8E:27:E5:83:B9:66:BE:31:09:BB:B5:31:DB
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858454624754653E9FC16A7DAF900
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
Signing time:             Wed 20 Mar 2024 20:46:07 +0000
ROA not before:           Wed 20 Mar 2024 20:46:07 +0000
ROA not after:            Tue 18 Jun 2024 20:46:07 +0000
asID:                     36492
IP address blocks:        136.23.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:75:46:53:e9:fc:16:a7:da:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Mar 20 20:46:07 2024 GMT
            Not After : Jun 18 20:46:07 2024 GMT
        Subject: CN=50c58e61-c351-434b-a272-e63cf7583a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:3a:9e:8f:01:cb:28:2e:06:4c:36:d4:17:
                    09:f4:48:dd:d1:12:a3:9e:81:fe:84:5e:c0:41:3a:
                    18:b5:f3:14:6b:3c:23:a1:5f:e0:4c:f0:c8:1a:79:
                    2a:9a:00:23:22:22:3a:24:dd:3b:02:0f:d7:9e:e9:
                    2b:53:a8:59:5e:ff:fb:f6:b5:df:9a:e6:ae:66:88:
                    02:37:17:a2:f2:ae:2b:3c:53:eb:a5:6f:42:99:08:
                    d4:49:be:3b:5b:95:5a:d8:4a:d1:14:6f:a6:06:34:
                    ea:80:91:93:ab:37:91:01:92:b6:bf:8f:f4:54:fd:
                    d0:f6:da:53:94:70:46:a4:ba:e4:91:6f:73:89:20:
                    6a:24:c5:b9:4b:ed:f9:85:47:55:3a:69:b7:26:5d:
                    66:58:e1:da:72:6b:f6:73:cb:9f:d7:af:fa:65:29:
                    9c:04:d6:85:d6:ae:af:e5:ef:00:ea:ee:34:e4:71:
                    34:ff:13:99:84:4a:3f:99:08:9a:2e:2b:d7:f0:4b:
                    35:23:66:9c:40:80:f1:e7:4b:1d:40:fd:85:f1:53:
                    7a:01:2d:10:d2:ca:a3:b8:26:1e:57:2a:19:d7:71:
                    58:00:ac:6f:d3:0d:94:b1:b5:d2:25:ad:3d:ee:d1:
                    3e:f8:21:dd:57:96:17:9e:17:b9:1c:71:a3:2a:51:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:B8:51:47:08:8F:8E:27:E5:83:B9:66:BE:31:09:BB:B5:31:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:0c:41:20:9c:7a:7f:58:18:e7:a2:38:ae:c2:01:f2:b6:
         37:a3:05:e5:e9:a8:3c:66:5c:1a:8b:65:95:f4:5d:aa:6e:fc:
         11:d4:78:77:7c:d5:be:45:1f:a1:97:ca:d5:5f:82:da:0d:20:
         9e:c9:63:5a:97:fc:26:9e:a2:8c:2c:f7:c9:97:6b:f9:4f:07:
         aa:fd:aa:9b:c6:d0:86:77:aa:cc:38:10:67:10:d7:00:77:7f:
         00:39:5c:6c:76:d2:83:0d:f8:2c:ae:32:ac:ec:68:3f:da:4c:
         e3:ad:84:6b:0c:85:88:5a:41:cc:38:8e:41:ce:8c:69:ee:d5:
         70:b0:df:c3:7b:35:a3:3a:fb:df:e8:32:11:81:cd:bd:9f:da:
         6d:d3:a0:d4:4b:12:8b:14:fa:e8:a4:9b:d4:93:53:89:d1:f8:
         f8:12:c4:58:f4:aa:cc:af:24:3a:e3:3a:fe:c8:df:ed:af:ab:
         86:59:bb:18:95:df:6b:0b:2c:b5:c8:75:09:61:08:42:d4:12:
         1f:cc:4e:a8:29:32:1d:ed:fa:80:23:97:b8:12:85:f4:6a:ae:
         99:b1:0c:f9:ed:00:d6:e6:1d:fb:99:25:c5:8f:fa:bd:5d:e8:
         51:ee:85:73:43:ab:49:b0:be:0b:ff:91:ba:0e:2a:8a:9d:20:
         0a:e6:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:40 2024 by rpki-client on console-ams.rpki-client.org