Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2c8f0040-a95e-31a6-a4f5-5a7365ccbe99.roa
File:                     2c8f0040-a95e-31a6-a4f5-5a7365ccbe99.roa (raw, json)
Hash identifier:          a8hsvYA+qE6ItpN57pEIXQY7mSkBukMDk7II3Tvd/Eg=
Subject key identifier:   E5:C7:22:11:B2:1D:95:E8:18:1B:D4:D1:02:A2:51:41:54:65:8D:7B
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BAD21C69CFD49151780300
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2c8f0040-a95e-31a6-a4f5-5a7365ccbe99.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d2:1c:69:cf:d4:91:51:78:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a2abfa29-6d90-4932-bb61-e1d44150ed04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:11:31:71:4d:fa:f0:35:89:f8:a7:82:68:
                    42:6a:bb:45:1e:08:bf:86:3c:bb:07:ca:c3:c3:81:
                    26:57:be:c3:b4:4a:3e:45:8d:ad:37:03:ef:35:01:
                    03:98:35:58:48:3d:65:dc:ea:5b:79:89:51:b0:30:
                    8d:87:94:22:63:cb:f4:6e:ad:50:a7:9a:0f:0f:cc:
                    53:5b:7e:1a:11:1a:ee:08:8b:60:6b:9c:13:fa:ec:
                    6f:0e:9e:81:cd:8b:cf:23:2e:b2:90:11:bd:f4:81:
                    39:1b:a9:d7:c2:77:b8:45:70:ed:0f:eb:66:fe:fe:
                    2f:79:6f:70:e8:20:12:8f:72:f3:3d:98:86:a4:c3:
                    d8:54:d0:b9:4e:59:ec:97:46:c4:c8:58:75:61:14:
                    0a:f4:bb:60:b1:b6:b4:d9:f2:cc:f2:b3:c7:6b:a2:
                    32:f5:8a:02:17:05:b3:48:b0:b7:51:64:f8:0c:78:
                    9e:c7:6c:36:a9:71:b6:af:1b:54:93:54:37:4e:29:
                    b2:49:3f:d9:f8:98:fe:31:05:6c:02:0c:06:0b:7c:
                    2d:69:c5:49:ba:aa:92:1c:66:f4:d0:24:37:16:d7:
                    44:c1:63:8b:90:2b:08:22:06:14:77:4b:ce:c0:43:
                    2f:e7:40:a3:91:fc:ef:db:56:d2:07:be:47:7f:23:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:22:11:B2:1D:95:E8:18:1B:D4:D1:02:A2:51:41:54:65:8D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/2c8f0040-a95e-31a6-a4f5-5a7365ccbe99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:5f:b2:5c:61:77:d6:96:ff:af:ef:53:f1:39:d6:19:16:
         10:b7:8a:ac:f5:30:3c:37:30:f7:3c:db:88:85:8d:0e:c2:50:
         6f:8e:84:1b:b3:57:96:f1:d5:d6:fb:9d:8f:a7:ed:9e:f7:78:
         86:c0:cc:4f:82:50:1d:a3:c3:17:1e:28:c8:a2:fe:2e:e6:29:
         c8:2c:9b:82:86:98:93:73:46:fc:3d:57:93:d7:ca:73:38:76:
         f4:06:1e:23:8c:99:68:dd:0e:80:c6:87:a9:8b:e2:60:f0:34:
         a7:69:f3:62:fd:51:67:8f:d7:58:1b:d5:10:52:4e:31:18:75:
         cc:93:5c:70:f6:42:e4:16:3f:c9:6d:3e:c0:e2:08:3a:c2:e1:
         54:46:c7:e5:10:1a:50:26:08:8b:8e:08:b1:db:95:7d:fc:7a:
         68:d0:c8:92:19:68:11:b2:88:ed:57:03:2a:a1:30:a6:cd:04:
         ff:35:14:44:d5:e3:73:96:9d:a5:05:ce:1d:e1:6b:3f:06:83:
         dc:40:53:06:83:4a:6e:0f:05:0f:51:42:b6:c3:94:59:d5:09:
         d3:65:89:5e:a6:57:dc:ae:78:5b:0a:a9:e9:99:16:81:3d:5f:
         78:74:9b:cc:e0:d4:5b:af:1d:46:e7:d6:db:56:14:db:77:0f:
         11:d7:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:02:40 2025 by rpki-client