Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/092ebccf-b33f-3e7c-92e9-4a07d9ae13b0.roa
File:                     092ebccf-b33f-3e7c-92e9-4a07d9ae13b0.roa (raw, json)
Hash identifier:          mI5sd1TEMornrgxIdwnBTsbJzuKUU2BJ2MB+uq+sPws=
Subject key identifier:   FA:21:BC:2D:3E:72:22:6E:5A:06:CF:BC:61:B1:44:E7:64:14:E4:54
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BB66D6DC4976F12E662AC0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/092ebccf-b33f-3e7c-92e9-4a07d9ae13b0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:66:d6:dc:49:76:f1:2e:66:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7fe794b0-80ca-4aa8-9f03-0d4b37a133c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:5f:a4:48:a5:2e:07:11:3e:53:af:ff:bf:
                    c4:dd:d7:1e:01:d6:e0:62:63:4d:30:74:60:c2:01:
                    0a:8a:ab:f5:91:00:d5:4a:d9:5a:e0:8c:b9:2b:32:
                    41:4e:07:bd:46:09:63:75:2a:14:82:1a:69:6f:5e:
                    c8:24:41:f8:fa:ec:38:11:c1:dd:23:f6:79:87:df:
                    ef:60:31:6c:3a:26:8c:01:a6:9f:a9:5b:c5:a6:5b:
                    d4:53:e2:1f:73:62:d3:50:69:22:f9:01:42:a0:28:
                    90:c0:cd:2a:ec:f0:38:01:1a:8e:eb:2d:53:34:ae:
                    ac:e0:9a:2d:57:ba:d9:a9:70:de:95:ef:f0:bd:28:
                    7b:0b:64:6b:0c:69:7e:cf:11:9e:30:93:99:bf:72:
                    69:72:bf:ee:eb:aa:2f:a1:9b:4e:b6:8e:81:16:dc:
                    b4:52:83:ec:fc:23:c2:e6:5d:0f:9f:c5:15:5c:b5:
                    e6:4a:77:aa:07:03:41:29:f5:4d:05:57:28:9b:69:
                    69:c8:bb:b9:ea:f9:ba:56:fd:04:b8:ad:0f:67:df:
                    e2:ef:a4:db:e1:02:37:e5:c3:1c:0c:14:33:28:85:
                    c0:8e:9d:3c:74:1d:a2:cf:17:a1:d3:58:9f:02:d8:
                    26:df:4d:56:c9:b5:d7:4e:ae:40:88:d6:45:2c:8f:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:BC:2D:3E:72:22:6E:5A:06:CF:BC:61:B1:44:E7:64:14:E4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/092ebccf-b33f-3e7c-92e9-4a07d9ae13b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:2c:a9:d8:0f:ff:d2:42:c5:e9:08:6a:b8:cc:62:02:8f:
         88:dd:d0:db:da:a7:e4:e0:5c:79:86:cd:17:7a:75:f7:0c:a0:
         d9:b9:0f:4f:66:1e:a8:46:ff:20:26:75:19:a9:aa:d4:99:fa:
         66:a9:8a:e1:23:98:74:ff:e1:ef:eb:63:61:07:92:c1:8c:ea:
         ab:b9:a1:9e:d3:e9:81:cf:ad:c1:b4:8f:0d:1b:c1:67:7d:ee:
         3f:8b:2c:49:8a:62:d4:a2:0c:2f:ef:24:e7:99:6d:95:5e:b2:
         86:a0:0a:8e:18:82:92:a7:0d:75:a7:97:55:c6:b2:2e:74:ff:
         e8:d4:47:f0:b8:75:2e:a2:c7:ba:e1:07:b6:c1:c0:8b:21:77:
         15:6b:5e:93:d1:eb:ae:c6:e3:48:f2:1e:43:e8:8e:d2:7a:99:
         17:20:cc:2f:65:83:46:69:e9:b8:8b:c1:06:d8:b5:49:55:54:
         1b:63:fa:85:8b:33:be:c9:ea:0e:6c:5b:5f:f6:67:50:89:8e:
         c3:06:aa:b2:57:10:fb:54:fe:4e:88:59:74:06:ac:4d:8b:ce:
         ae:08:cc:07:05:41:d5:e0:08:0b:70:24:a9:1b:ad:31:aa:03:
         8f:e2:ef:9c:8e:e3:98:b9:9c:84:6b:97:7b:91:59:55:a4:97:
         34:60:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:54 2025 by rpki-client