Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa
File:                     e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa (raw, json)
Hash identifier:          yAmaMgA0TxsEo2EkZuiv/E3oAYiYDiet6vTBroFNmOA=
Subject key identifier:   FA:ED:1C:D1:C5:B6:40:D2:BE:58:9B:CC:D4:55:BD:33:40:B6:9A:A7
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BACDDC650ECDDF7CCDF000
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:cd:dc:65:0e:cd:df:7c:cd:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7fc62db5-ef7c-47a4-83f2-29003be24a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:fd:45:ec:e3:a0:e8:2e:86:ff:d8:50:da:
                    ef:1e:50:06:22:b1:fd:98:2e:80:4c:91:f6:3f:29:
                    55:19:9f:0a:5a:ca:6d:de:40:1c:d4:bf:c2:9d:5e:
                    4b:ee:a2:55:e1:39:58:35:89:1b:04:83:c0:e5:dd:
                    c8:06:ae:c5:a4:95:3b:de:aa:b7:5f:f9:3f:62:f0:
                    e9:dc:e4:a5:18:ab:a0:8d:eb:03:ba:e4:f4:2e:6a:
                    bb:21:2e:82:af:be:79:c5:7f:fd:cb:8e:db:33:fb:
                    86:a8:d5:ed:5a:c3:6f:bb:c6:e4:5a:e9:29:85:a5:
                    71:d0:e5:07:d4:6f:82:dc:95:76:e2:77:55:18:37:
                    40:48:cf:67:07:97:c5:8f:50:24:7f:8f:45:76:dc:
                    26:5d:ec:53:ae:fd:ec:30:97:9e:13:0e:f3:b9:dc:
                    70:8e:16:88:7f:71:82:e8:57:ee:2c:22:1c:b7:c5:
                    e7:9f:8b:fd:46:f3:46:5b:fa:80:5d:b1:0c:b1:f5:
                    57:a6:46:ed:85:82:97:86:dc:b1:63:b0:db:83:7d:
                    c5:75:e8:6d:d6:f2:ac:d2:ba:16:a3:0b:f7:9d:f3:
                    e7:a8:35:70:cc:d1:a2:f6:4c:47:27:c7:c3:64:b0:
                    02:03:77:e3:99:41:fc:4c:c8:f7:5a:9d:37:87:e3:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:ED:1C:D1:C5:B6:40:D2:BE:58:9B:CC:D4:55:BD:33:40:B6:9A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/e8f1b4e3-de81-3c21-ac96-804b3dd64682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f1:d7:b5:c7:a7:97:20:57:67:12:11:84:87:28:ab:39:05:
         74:e8:ef:05:de:fe:00:af:ff:dc:33:ae:29:6c:51:1a:72:43:
         2c:6d:fb:58:fe:9a:53:9c:10:0a:86:a2:a7:c3:3f:92:00:5b:
         5e:60:fd:09:f5:e3:47:32:a0:2b:ef:45:ba:5b:3e:87:0d:73:
         b6:d0:ac:ef:42:19:70:93:1a:99:7a:c6:5c:bc:d6:72:1d:03:
         85:83:42:3f:37:0d:9c:90:b4:91:26:bd:97:0a:2c:7b:91:81:
         ce:83:fb:44:0a:df:94:60:9c:23:39:99:07:7a:55:9b:5b:95:
         1e:99:1c:93:52:0a:dd:23:36:53:2a:71:c0:cd:ca:2d:a7:e9:
         99:a5:e9:65:cd:ae:39:0c:e1:d1:78:94:af:49:fb:fa:cb:9a:
         c7:9d:0d:77:d5:78:5e:b8:4c:83:5f:2c:11:7a:50:a0:87:74:
         11:76:d6:51:e1:fa:47:22:2f:0a:86:2d:d0:77:48:9c:dd:96:
         b4:cf:67:66:12:56:c4:a2:fc:74:9c:c9:8a:47:89:57:c0:38:
         cc:2e:35:e0:91:a1:31:fe:ea:bd:0a:ea:a8:4a:ca:ab:db:ae:
         01:49:b2:ba:75:18:7d:65:80:55:cd:af:16:9c:12:95:e7:9e:
         1e:1e:5c:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus3cZQ7N33zN8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
N2ZjNjJkYjUtZWY3Yy00N2E0LTgzZjItMjkwMDNiZTI0YTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWz9RezjoOguhv/YUNrvHlAGIrH9mC6ATJH2
PylVGZ8KWspt3kAc1L/CnV5L7qJV4TlYNYkbBIPA5d3IBq7FpJU73qq3X/k/YvDp
3OSlGKugjesDuuT0Lmq7IS6Cr755xX/9y47bM/uGqNXtWsNvu8bkWukphaVx0OUH
1G+C3JV24ndVGDdASM9nB5fFj1Akf49FdtwmXexTrv3sMJeeEw7zudxwjhaIf3GC
6FfuLCIct8Xnn4v9RvNGW/qAXbEMsfVXpkbthYKXhtyxY7Dbg33Fdeht1vKs0roW
owv3nfPnqDVwzNGi9kxHJ8fDZLACA3fjmUH8TMj3Wp03h+PSVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrtHNHFtkDSvlibzNRVvTNAtpqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvZThmMWI0ZTMtZGU4MS0z
YzIxLWFjOTYtODA0YjNkZDY0NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBciMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3x17XHp5cgV2cSEYSHKKs5BXTo7wXe/gCv/9wzrilsURpyQyxt+1j+
mlOcEAqGoqfDP5IAW15g/Qn140cyoCvvRbpbPocNc7bQrO9CGXCTGpl6xly81nId
A4WDQj83DZyQtJEmvZcKLHuRgc6D+0QK35RgnCM5mQd6VZtblR6ZHJNSCt0jNlMq
ccDNyi2n6Zml6WXNrjkM4dF4lK9J+/rLmsedDXfVeF64TINfLBF6UKCHdBF21lHh
+kciLwqGLdB3SJzdlrTPZ2YSVsSi/HScyYpHiVfAOMwuNeCRoTH+6r0K6qhKyqvb
rgFJsrp1GH1lgFXNrxacEpXnnh4eXHc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:13:55 2025 by rpki-client