Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4ea9affd-2ad1-3772-8753-0abc9a71b3bc.roa
File:                     4ea9affd-2ad1-3772-8753-0abc9a71b3bc.roa (raw, json)
Hash identifier:          DfKOM5QvGMeDeuAsDoPwLe7Sqi0JKb3YKIax/JiQvbs=
Subject key identifier:   B5:6F:5E:09:60:F4:8A:09:3C:A2:9C:9F:05:F0:B1:76:CF:E2:00:86
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BB6BD6C62635ACE8294780
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4ea9affd-2ad1-3772-8753-0abc9a71b3bc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6b:d6:c6:26:35:ac:e8:29:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=33d09a9f-62d0-4633-9a6f-ac7008347338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:ed:48:34:67:82:04:4f:d9:b8:92:16:43:
                    1c:ae:a8:11:62:ab:96:b4:8f:5a:eb:37:77:32:01:
                    b5:11:dc:a6:f5:f2:04:7c:0e:0b:15:78:44:17:9a:
                    08:75:95:31:0f:e0:23:30:6d:f3:c4:a6:16:d5:c5:
                    a7:00:1e:94:2a:7f:8c:10:ad:9c:c0:d6:64:4f:df:
                    bc:be:d5:85:bb:ae:13:b9:49:ec:2c:96:a4:be:f5:
                    d1:4d:3e:c0:96:6c:9e:16:f0:3b:f5:66:e3:63:62:
                    e9:74:03:a6:cd:a2:83:00:7d:62:73:93:02:06:5a:
                    5d:12:78:b9:b9:cb:e0:f2:81:95:18:49:af:c6:df:
                    18:ee:0b:c6:21:f1:a3:03:f9:b4:bf:75:b0:19:f9:
                    ea:22:f7:40:76:82:5e:8f:68:ef:f5:e4:6a:27:6e:
                    e3:54:7c:97:7c:1d:84:a9:c6:57:1f:c0:98:17:f6:
                    78:8e:28:43:fa:5d:b1:49:e4:6c:1b:aa:23:af:0c:
                    95:66:1f:cc:b1:c0:24:aa:f2:89:90:91:df:2e:ff:
                    c6:d0:d4:15:be:70:dc:ca:f9:7a:19:1d:57:d4:5a:
                    30:a0:9e:97:45:4d:07:64:11:36:f0:e9:ff:e9:ba:
                    ff:a9:2a:0d:23:3e:1b:75:8e:ef:e2:d8:7a:3d:17:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6F:5E:09:60:F4:8A:09:3C:A2:9C:9F:05:F0:B1:76:CF:E2:00:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/4ea9affd-2ad1-3772-8753-0abc9a71b3bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:07:94:21:17:e3:7f:07:09:2c:36:bc:09:4c:bf:f2:f5:
         9a:f5:f8:39:59:47:24:fd:87:88:fa:be:b8:d1:ed:ed:f0:28:
         59:48:ce:37:21:04:b2:a6:8e:b6:83:aa:b6:69:a5:5a:ae:c1:
         64:c0:f0:31:b6:6f:a6:41:17:86:ff:1b:3c:94:99:4f:7b:f3:
         aa:d7:da:d9:b8:87:d6:90:16:e8:c2:ef:cf:69:e3:59:5e:a8:
         0e:49:3d:61:83:e9:ff:73:1f:91:7b:ce:4e:49:16:70:b6:9e:
         0e:f7:bf:77:9b:db:a7:a3:1c:1a:15:1c:28:13:e6:cf:2f:c8:
         f1:a4:1c:be:fc:59:7f:2f:6c:b1:ce:77:14:09:34:6a:6e:14:
         85:dd:a6:5c:c2:73:ea:34:42:a4:f7:30:9d:9e:5b:6d:2e:14:
         ec:18:d7:96:0d:b4:3d:b5:15:d4:7b:1b:cf:f2:15:f6:51:39:
         3e:ce:4f:b2:6b:9b:64:51:83:79:06:06:79:8c:c8:6d:85:4d:
         76:c8:22:60:4f:4c:bc:4e:f9:07:fd:69:31:75:3f:09:fe:a7:
         83:03:be:cf:8a:11:79:fc:8a:34:27:19:44:9a:32:c3:d8:6b:
         24:4d:db:3d:f1:c4:df:49:73:36:de:b6:08:3a:fc:b6:1f:b0:
         a9:f8:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:03:10 2025 by rpki-client