Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa
File:                     ea1d6bf4-6241-3563-8031-b59b1000bf89.roa (raw, json)
Hash identifier:          2Yfg5EALACRXBViuoGy72yInCmsMMUbf/UdAmeCnCCM=
Subject key identifier:   B3:AA:7E:D6:A5:43:BD:B4:5F:B9:E9:D9:B8:4C:31:BC:EA:36:AA:5B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847E094E05755F6309B9B05EA80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36492
IP address blocks:        136.22.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e0:57:55:f6:30:9b:9b:05:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=5baf68b6-558e-42c6-bea0-539e8d924877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:c0:65:1d:ed:0f:a4:3e:b6:f5:e0:72:98:
                    cc:29:2a:0b:6f:40:5b:c3:34:3e:ae:23:5b:1a:f7:
                    57:b2:32:12:7c:0f:05:dc:5c:f5:2e:47:38:b7:eb:
                    e8:7a:88:e9:66:62:7d:5c:99:16:14:8e:c9:2f:30:
                    36:89:1c:fc:7d:26:f0:6b:3e:db:9f:59:af:5c:0c:
                    7d:cf:af:17:3a:7f:ff:b3:c0:f6:03:b7:83:06:37:
                    64:39:f2:9c:88:41:c0:31:0c:f5:14:4c:cc:a8:54:
                    61:99:90:6e:9b:31:f3:d0:c3:16:ca:f8:02:b2:91:
                    2f:dc:8c:42:d0:22:6e:a3:8d:b7:68:1b:e4:b3:71:
                    8b:82:ef:77:a3:76:95:01:62:d9:4d:33:ab:52:a1:
                    ef:c1:2e:51:b3:5c:8f:23:3c:21:1b:8e:02:50:be:
                    d1:3d:4c:83:ae:26:c7:d2:cd:ff:97:c3:2b:ec:64:
                    95:50:f6:c6:7e:c0:e1:7b:51:b7:ad:d0:4d:ac:e0:
                    ea:3a:d8:b5:aa:d4:52:2a:99:58:1f:b8:58:4a:11:
                    69:c2:0d:9d:77:e8:55:14:6b:ff:ac:cd:66:c8:8b:
                    a7:64:bf:30:10:99:0f:b0:41:19:7f:81:08:be:af:
                    14:ff:4b:4c:78:0d:66:6e:5e:59:17:94:e1:ca:58:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:7E:D6:A5:43:BD:B4:5F:B9:E9:D9:B8:4C:31:BC:EA:36:AA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ea1d6bf4-6241-3563-8031-b59b1000bf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a9:e3:15:37:f7:db:44:bf:fe:55:a7:e4:2f:4e:c9:69:ba:
         23:1f:c2:f6:c8:32:26:a3:fc:2c:fd:f1:1f:61:cb:d0:70:6b:
         54:64:f0:2b:e2:ab:fa:e8:e8:b6:25:dc:60:6d:32:b8:ad:f5:
         eb:20:13:64:f4:e5:ab:61:fe:90:f9:44:1a:4f:b1:3c:18:16:
         d6:a6:db:6e:be:ea:75:3e:99:13:8f:91:82:9f:78:fd:36:22:
         f6:40:62:48:db:59:32:70:37:2d:7c:88:2a:ad:21:e4:5b:c5:
         72:58:ff:55:c5:d6:d9:4d:f9:f0:71:b1:e5:60:9e:db:9f:45:
         ac:0b:95:9a:1e:2e:65:a0:b0:44:ed:87:9e:96:60:5e:c3:85:
         3e:30:69:9c:15:a5:cc:1a:3b:3e:87:4d:e8:48:35:b3:0a:0b:
         fe:fb:b8:c4:c8:87:2a:20:44:18:8a:cf:23:dc:c1:91:41:63:
         dc:44:22:ab:d6:6e:77:68:05:fc:d4:b8:25:7c:c8:ee:58:7c:
         00:27:8d:1f:8b:27:77:68:99:38:73:84:5e:46:be:47:75:ef:
         fb:ab:3c:c9:fe:fa:9d:43:b6:bf:04:35:d9:7a:87:e0:6b:b6:
         fa:a7:d9:ac:fd:18:f2:86:ab:9d:9c:73:e0:6f:33:3e:88:85:
         7f:35:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:42 2024 by rpki-client on console-ams.rpki-client.org