Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/270b1fed-80d6-3c27-9672-747f524f877a.roa
File:                     270b1fed-80d6-3c27-9672-747f524f877a.roa (raw, json)
Hash identifier:          /TdGV0Zqgw9C8nB6r6KlSropp3Wi3R9wPKuRX/e0kYM=
Subject key identifier:   B4:36:35:08:83:3E:66:56:B4:14:EB:8A:77:84:72:DF:56:B1:16:1F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BAC7BE4490E0EA4855CD80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/270b1fed-80d6-3c27-9672-747f524f877a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c7:be:44:90:e0:ea:48:55:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b1bf8f9a-e4c6-46ad-903f-c04681903f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:0d:7b:92:c0:88:37:15:28:26:02:00:88:
                    de:69:65:76:3d:ef:d4:65:0d:38:0d:e5:fe:76:d3:
                    89:13:50:e8:fe:11:f4:8a:a4:93:0d:86:d0:c9:79:
                    aa:a4:61:03:25:01:a9:4b:e1:8c:8e:47:c5:3e:05:
                    ad:dd:12:99:32:42:89:4b:9c:07:7d:be:a3:22:83:
                    a5:4f:7f:e7:cf:bc:a7:f0:65:b7:52:00:7c:6b:2b:
                    80:36:0f:cd:58:82:95:f2:37:39:8e:f4:7f:1d:b4:
                    d1:0d:b6:43:ae:87:6d:8f:fb:8b:c1:e5:16:21:64:
                    32:db:d0:6b:09:8e:43:80:2b:15:5e:ec:ad:da:71:
                    36:1d:fa:ee:25:bb:fd:5e:12:28:da:45:13:44:95:
                    5a:f5:d3:93:ef:38:ac:30:55:bf:98:e5:8b:c1:79:
                    a4:6e:3a:9e:eb:88:20:05:01:7c:51:21:ca:9f:73:
                    6e:0c:3b:68:84:b4:44:93:a8:74:3c:8e:c5:f4:72:
                    0e:4e:b4:0c:43:bf:9c:b8:aa:7d:78:56:61:e4:69:
                    16:c6:15:f6:d6:e8:ef:fb:7b:bc:65:aa:6b:a7:85:
                    3f:75:c1:9b:b5:a0:1f:fa:42:f4:28:21:a3:a6:72:
                    c5:71:b9:97:d3:7e:e3:72:86:e7:c7:19:62:70:d0:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:35:08:83:3E:66:56:B4:14:EB:8A:77:84:72:DF:56:B1:16:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/270b1fed-80d6-3c27-9672-747f524f877a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:58:3a:ee:14:b4:33:7a:c8:3f:61:d8:e8:20:7a:c5:8b:
         2b:2e:7e:4e:8b:9a:df:7b:57:5b:1e:c7:af:6d:de:fb:8e:16:
         96:17:d4:b4:36:fd:9b:7e:6f:bd:07:3f:d6:79:31:02:3a:93:
         57:d5:fe:d7:55:9f:5f:69:13:bc:38:3b:c6:6e:59:c6:14:58:
         e5:29:72:0f:1f:8d:8c:4b:a0:d0:a6:ea:3a:27:23:2e:55:83:
         4d:71:e1:91:8c:0a:19:70:10:1d:26:06:a3:00:ba:24:23:af:
         b7:a1:41:03:48:31:ac:1d:11:85:a5:ea:86:65:de:6c:20:b8:
         e7:66:c3:17:24:17:3c:ba:a5:34:91:10:72:b6:8b:53:ff:91:
         69:9b:cd:84:b0:8c:01:96:8d:5f:59:17:35:6e:0b:42:67:3d:
         18:d3:47:dc:61:9b:03:48:7a:df:04:81:ae:03:08:7c:28:b2:
         98:d5:a7:20:eb:91:1c:c1:61:fc:2c:40:19:b6:39:e7:0f:f1:
         03:7a:70:15:38:11:51:0a:e8:4a:51:07:b4:b1:1c:2d:79:92:
         a1:9c:b7:e9:22:ff:4e:28:70:f8:0d:5e:9b:9d:0d:4f:fd:76:
         e7:da:e4:61:25:58:3d:90:db:85:ba:5a:d5:c1:80:f9:e1:43:
         0b:d4:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:18:02 2025 by rpki-client