Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae6100fa-ab83-36dd-8d57-e4a597ac2e3c.roa
File:                     ae6100fa-ab83-36dd-8d57-e4a597ac2e3c.roa (raw, json)
Hash identifier:          Xb1rC3NSDXz1U4lyWTzlhDQLv+IXRHjGcva8Us+xdQI=
Subject key identifier:   0A:35:4F:E5:AC:25:60:C6:D8:06:79:1B:2E:6E:80:75:28:A2:A7:EF
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BAC6A79A06594466007CA0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae6100fa-ab83-36dd-8d57-e4a597ac2e3c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c6:a7:9a:06:59:44:66:00:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d4072e69-0dc4-42c5-bcbc-b224a81a047d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:91:90:3b:8b:10:61:98:20:cb:9e:8c:a7:
                    27:cd:93:bc:c7:3b:60:17:8e:25:50:23:1d:a6:47:
                    f1:80:b1:2d:0c:f4:b5:27:9c:3c:41:65:50:ba:ac:
                    10:1a:37:cb:ce:95:6b:b4:94:50:15:7e:77:9d:ca:
                    2c:7a:8f:7d:14:e6:65:fb:4e:df:3d:5a:36:fb:22:
                    9d:3d:5a:cd:89:dc:41:5c:25:68:5d:6d:c0:00:46:
                    87:3e:28:23:53:0c:fc:7e:9a:04:87:35:3f:d9:2e:
                    f1:c9:88:09:be:0a:13:83:7a:42:1c:ad:9a:23:19:
                    86:f0:8f:c6:c7:fc:ca:11:44:05:26:b9:b1:27:1c:
                    9f:34:74:b7:4a:1f:59:d0:af:89:ca:b5:9e:79:38:
                    85:05:7c:01:99:a4:69:f4:9d:d4:19:7e:bb:91:19:
                    54:5f:53:48:c3:07:95:fe:87:89:1c:08:5c:38:65:
                    81:64:8f:84:11:fe:53:cd:d8:c9:0c:f2:7e:4d:02:
                    05:98:6e:b7:b3:10:3e:a0:91:e0:40:25:70:28:38:
                    bd:45:01:43:9c:d1:c9:5c:3c:6f:35:2e:7e:d1:dd:
                    de:22:99:c1:1f:cb:f1:3a:25:e1:7f:c8:71:dc:28:
                    de:f3:08:64:d3:b8:48:81:38:85:92:ae:cf:48:69:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:35:4F:E5:AC:25:60:C6:D8:06:79:1B:2E:6E:80:75:28:A2:A7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ae6100fa-ab83-36dd-8d57-e4a597ac2e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:02:20:c3:79:d5:4c:ea:9d:82:40:64:96:db:15:ec:44:44:
         57:d6:56:61:e8:6e:21:00:f3:07:39:59:16:22:20:a2:cc:aa:
         73:aa:dd:8f:1d:a1:5c:a5:bc:a1:1b:c1:e1:67:ba:a0:4a:e5:
         d7:b8:e2:65:3d:57:fa:73:3d:b5:f5:f5:74:ef:23:8b:4c:73:
         78:0a:09:3f:ea:8a:9f:10:20:40:9d:5e:0a:a0:6d:8b:14:20:
         2d:8e:eb:fa:4c:9b:4b:65:52:9f:22:e8:57:98:9d:41:60:e6:
         10:76:5f:a8:0a:f7:5a:c0:9f:c3:d5:79:b8:31:d8:28:39:43:
         f6:42:52:94:a6:4d:15:9e:52:f0:fb:a8:38:1d:4c:26:e6:d4:
         10:c7:7c:2a:49:6f:2c:1c:ea:ea:a2:5c:2c:25:03:a1:6e:d8:
         02:b9:07:bb:34:a6:0c:6b:f5:42:6c:25:d4:ad:c7:9d:d2:6d:
         cb:d3:53:93:b3:aa:04:d4:22:66:2a:84:fa:7e:23:f3:76:02:
         19:f4:a8:df:17:7e:ec:6b:b5:38:bb:f5:15:81:5d:41:b6:e5:
         49:57:80:47:7e:0c:a7:f1:f3:09:5c:d4:70:ef:12:1b:09:30:
         9c:32:69:85:1e:81:7d:bd:d6:b0:5b:a8:7c:da:2b:de:85:75:
         51:22:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:01:07 2025 by rpki-client