Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
File:                     d49add77-32a9-330b-a617-5437e0eedea5.roa (raw, json)
Hash identifier:          2jA1tDECSW1p3KxpKTO1lF/FbY/iIzlPxif5YUy9whM=
Subject key identifier:   C1:AF:96:B0:B8:BC:C9:F3:CB:96:06:6B:48:A9:D0:CD:F4:86:3F:5B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E62B35C98DF15D8EA5C1D380
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        136.23.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:35:c9:8d:f1:5d:8e:a5:c1:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=43280b2a-da8f-4bb9-8241-19f18e52276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:31:82:cd:74:5f:72:52:1d:5f:c6:e7:26:
                    a2:af:8f:ad:7f:b3:90:47:ad:db:05:a2:05:c3:ad:
                    15:48:ad:a1:f0:95:6b:69:b6:24:ef:d5:2a:7f:6d:
                    18:d4:2a:70:32:a8:5b:0f:54:3d:51:e8:82:0a:a2:
                    cf:41:21:57:1f:e6:ba:18:ca:92:87:35:1f:9f:22:
                    5d:03:cf:c6:81:89:dc:8d:b1:68:be:3f:b3:ef:ae:
                    3f:26:44:56:76:7a:47:40:cc:cd:b0:48:df:d6:7b:
                    ef:d9:a0:bd:9b:c7:d0:af:41:4d:48:e0:c5:03:09:
                    35:e7:b9:dd:7f:31:53:e1:a3:8e:97:4e:46:99:7b:
                    96:ba:36:68:f6:44:20:10:5d:81:3f:77:4f:d3:10:
                    61:e7:89:24:16:fa:66:bb:e8:80:c1:d7:6c:1e:78:
                    41:3f:8e:b0:74:ce:35:33:8c:0c:cf:60:5b:b0:e9:
                    a9:ee:b4:fd:0d:79:17:3d:54:1b:75:f1:45:a0:db:
                    08:c8:96:64:26:8a:e9:aa:fc:ca:0d:6d:6d:32:31:
                    56:4d:16:f7:4f:90:1d:f3:79:2e:50:b7:59:a8:78:
                    11:5d:27:66:d7:d4:d4:03:1d:c4:db:d3:45:1b:68:
                    e7:ff:1d:99:91:0c:96:a7:ec:9b:f6:13:91:3e:a6:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:96:B0:B8:BC:C9:F3:CB:96:06:6B:48:A9:D0:CD:F4:86:3F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d49add77-32a9-330b-a617-5437e0eedea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:aa:0a:77:90:29:04:a2:90:41:64:3c:6b:b4:3c:33:bc:
         35:62:d9:f3:3e:31:20:ef:65:a9:88:1a:c0:7c:fe:25:09:71:
         9f:ec:5b:40:e3:a7:69:bc:e1:30:df:5d:22:5d:c0:34:91:70:
         fd:81:a8:cc:fb:92:3d:04:15:2c:38:06:a1:d3:3f:e7:1a:90:
         60:4b:58:17:3d:7a:7b:ef:3f:c2:0a:6f:76:c7:dc:08:5a:be:
         34:43:71:31:e4:fa:9f:eb:72:c5:c4:d6:cb:b0:d9:e7:93:a0:
         b6:60:c3:08:fa:88:08:3f:4b:29:f5:c7:77:69:7f:9d:15:56:
         38:fb:50:ee:72:5f:d3:c5:77:b5:90:3a:07:d0:09:fa:69:fd:
         68:69:74:e5:58:a6:2e:ab:ef:c6:29:c8:5f:01:6a:b5:2d:4f:
         38:10:32:07:bf:cb:a7:68:50:96:9e:73:c5:fb:93:75:c9:a6:
         55:b8:15:2d:ef:be:69:f5:e9:6c:31:9d:f3:f3:28:39:4b:cc:
         54:6d:dd:45:dc:ef:61:25:cc:1c:a8:e9:5c:65:da:dd:b6:8c:
         7c:b1:8a:69:0a:89:bc:16:56:dd:24:2b:02:64:0b:df:1f:fd:
         0c:d7:ab:f4:47:d1:37:d0:f4:0c:86:ce:ac:cf:96:ae:4f:24:
         ee:03:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:41 2024 by rpki-client on console-ams.rpki-client.org