Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24b636fd-298a-39e5-84ad-bf1023c82c78.roa
File:                     24b636fd-298a-39e5-84ad-bf1023c82c78.roa (raw, json)
Hash identifier:          i8w97N0yc9J4UDN5W6a16D1GFIU3/6gYTy8J2EJ/zh8=
Subject key identifier:   2A:8D:A9:32:CD:20:6F:AA:1E:DD:96:5C:8D:FE:07:7B:C8:60:4B:F5
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BAD5509CEF7C9BAD07D100
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24b636fd-298a-39e5-84ad-bf1023c82c78.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d5:50:9c:ef:7c:9b:ad:07:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0ed0ebab-037a-4ccc-98d5-4a963aca6013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:dc:be:25:ef:5c:57:12:93:d5:79:c7:c7:
                    b9:75:1e:9f:a8:17:12:85:c1:bc:a1:a8:e4:50:b6:
                    a3:cd:48:14:8d:fd:6d:d8:ac:76:31:1f:c8:a0:4c:
                    cc:8f:ce:92:22:87:42:08:d9:1a:c0:dd:a2:08:28:
                    79:d4:5a:c1:d4:ab:17:8d:0d:42:ad:f3:a8:da:1e:
                    e2:a2:6a:6d:e3:6c:63:b2:80:89:be:d8:d8:28:4b:
                    cb:24:7a:44:77:a1:fd:e4:f1:77:6b:52:6f:79:67:
                    45:ec:1f:a3:e6:ff:e7:ba:64:50:5c:94:62:07:23:
                    35:e9:55:bc:1a:d3:66:85:32:88:08:d6:61:1f:e9:
                    bc:83:83:46:81:5e:0d:b8:32:9f:ee:57:b8:48:46:
                    4b:df:3b:11:37:d9:e2:e0:a6:65:3e:10:c9:e8:40:
                    77:e2:19:3a:bb:2c:c3:c2:b6:8a:07:ee:95:35:51:
                    2b:8b:07:53:46:8b:f0:22:cf:3d:a3:d2:84:26:2d:
                    80:98:f4:28:d9:23:70:fd:46:cf:24:08:16:e2:0d:
                    e1:43:61:3e:05:92:69:9f:c9:6b:a3:9b:ff:1b:2f:
                    63:69:eb:f6:b2:9e:33:89:9c:75:43:c7:b7:91:1d:
                    3b:8e:72:a2:66:e8:48:92:a1:37:2c:88:f3:71:8d:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:A9:32:CD:20:6F:AA:1E:DD:96:5C:8D:FE:07:7B:C8:60:4B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/24b636fd-298a-39e5-84ad-bf1023c82c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:39:bc:fe:2e:5d:53:8c:b7:99:90:b2:3d:07:e7:82:a0:
         d6:b5:c6:48:eb:47:9b:be:26:00:5c:72:09:b2:60:9d:a1:1b:
         6b:81:54:3a:cd:b7:ea:6c:17:69:84:61:93:5e:99:b7:2e:c4:
         95:42:6d:e4:90:7a:63:c2:cc:db:d3:73:1e:64:29:5f:25:00:
         d1:c4:86:03:dc:e0:5a:9b:92:cb:b2:95:27:62:b4:ad:bb:d0:
         c3:8d:71:84:4a:95:ad:e3:0f:f4:de:b4:41:d5:8f:d4:46:23:
         dd:9c:4b:c2:57:4c:d9:d1:85:cb:44:c6:9b:6e:d4:42:4d:c0:
         b6:8d:8b:de:0f:80:7c:5c:9c:5f:a3:20:87:da:54:7f:22:f1:
         c0:af:2a:3c:1c:2d:c7:c1:ee:3c:04:cb:6a:d9:39:f1:ae:c2:
         92:30:4c:25:c2:b5:1b:4e:e9:7f:f6:74:9b:ca:7a:ef:20:f0:
         55:61:e3:69:18:d9:84:ec:3a:06:37:2a:ce:2d:c4:d1:bc:41:
         31:8e:9b:ba:6c:34:f0:ce:72:d4:25:a0:19:dd:d0:f0:27:d9:
         80:5c:fa:4d:f6:f5:1f:80:24:2d:d9:8b:9e:22:d7:fb:95:ac:
         fe:5b:4c:07:fe:1a:47:c3:7e:88:c7:cc:4b:6f:5e:1d:c3:20:
         e7:4a:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:24:16 2025 by rpki-client