Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa
File:                     471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa (raw, json)
Hash identifier:          eZLC1Z9N/S3NHRs7gpciKmJgDfasvZgr4g7pqW0yyMs=
Subject key identifier:   66:80:6B:24:79:7A:7D:38:75:71:C5:32:89:93:21:FB:39:5A:ED:A5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BACE531F7F0B50207E1B00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ce:53:1f:7f:0b:50:20:7e:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9e98af16-bcf6-4419-840c-e622bf51035d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:5d:c0:dd:c7:24:19:75:24:6f:64:10:2f:
                    e4:b7:d2:bc:29:a8:ad:84:61:61:8f:1a:d1:17:40:
                    48:e4:1c:24:df:11:f6:cc:27:6f:a5:29:46:85:a5:
                    77:3f:51:5c:df:90:79:28:2b:ce:14:c5:ef:37:8b:
                    31:e6:12:ce:49:0a:1f:1d:cb:33:88:db:37:fe:d0:
                    e6:fb:25:45:7d:a8:57:c9:52:f4:ec:f0:ce:dd:fe:
                    af:2d:e3:9f:08:95:a4:91:a7:5a:40:c0:db:4d:72:
                    2f:64:d7:69:7f:3a:dc:87:e8:21:39:63:c2:c8:33:
                    5f:2b:4f:24:5e:e5:3e:27:c0:3d:5e:20:90:2d:31:
                    25:f0:78:98:26:fc:f9:9c:61:1a:5a:9c:3b:92:44:
                    66:51:d3:62:fd:44:7c:06:b0:bf:6e:6b:94:a2:d3:
                    0c:27:b0:4d:78:c2:06:7e:96:e5:46:be:10:95:f2:
                    5e:d0:7e:28:93:f5:f0:fa:24:bf:40:8c:18:6c:6c:
                    7b:25:e7:26:c3:c1:95:61:5b:1a:ae:4e:ad:0f:d8:
                    75:9a:a2:8c:82:14:1b:e8:a7:81:37:08:bf:c0:a5:
                    c2:37:c9:b2:55:e9:8a:95:5a:19:aa:90:54:70:21:
                    c1:4b:be:9c:1b:fc:09:89:68:97:0c:eb:11:c2:31:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:6B:24:79:7A:7D:38:75:71:C5:32:89:93:21:FB:39:5A:ED:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/471c4aa6-9668-34ba-b0ec-cfcc84a63303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:6e:48:0a:a5:41:a6:1b:e8:cd:1b:21:de:26:87:91:a6:
         09:c5:da:f9:ee:30:70:fd:e2:db:48:85:02:d9:5c:ed:e4:bf:
         46:e9:d4:8a:1a:81:9a:a3:1a:d9:47:e8:97:d6:11:ea:3d:39:
         59:e2:10:6e:c1:76:de:72:87:d3:0e:60:53:ac:f5:c1:69:5d:
         01:a7:51:0b:92:78:ab:c0:9e:6f:f2:f4:ca:f7:c1:1b:b6:fb:
         51:b0:4f:60:7b:77:11:95:e1:f5:2a:dc:20:94:98:5f:a8:b4:
         d3:e8:f0:08:e4:a6:84:1a:83:ae:46:2a:84:8f:fd:13:97:37:
         fd:00:1a:1b:69:37:1d:f0:b5:9c:76:f1:6f:8a:60:0a:21:fb:
         25:20:9b:04:35:56:b4:14:41:2f:60:7d:f0:48:36:59:72:ba:
         d3:bf:86:ef:3e:86:ee:0a:0b:6f:bf:97:f2:38:aa:07:95:32:
         69:c4:94:35:e0:a0:20:8b:f8:2f:c3:55:57:53:a5:e9:5a:de:
         3b:ab:c7:68:79:f5:eb:c5:26:c2:44:3d:a1:90:e7:51:ea:2e:
         2f:0c:48:75:ec:fa:69:09:0c:09:b7:07:e1:2e:63:fa:47:d2:
         9d:68:bd:7d:98:67:2c:27:1c:5a:69:30:8a:5a:be:0a:57:34:
         1e:0f:8c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:13:23 2025 by rpki-client