Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa
File:                     cf4d7e17-7766-395c-ac11-948fea074f37.roa (raw, json)
Hash identifier:          rdo7uNEKAwmaUBT2YUw7wQrUk4IN+gDM40fbOpp2p/A=
Subject key identifier:   D3:21:E0:AA:CF:25:D3:4F:D5:70:7F:AF:8F:B4:1A:B9:51:E0:42:91
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285849A4BB7566E3FF0224B13F7F00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.23.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:75:66:e3:ff:02:24:b1:3f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7083a3fd-d0dd-4ac6-9291-5792085b780e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:20:2b:c5:c1:5a:0b:4b:5f:2f:b8:f2:eb:
                    b7:b5:b0:53:9a:8a:f2:95:43:77:b0:be:b8:89:76:
                    d4:55:86:7b:c1:07:d3:0b:37:da:71:78:49:73:40:
                    9a:bc:37:ad:88:37:7d:26:26:45:27:5a:9a:59:d3:
                    8d:1e:27:07:32:e4:4d:fd:77:52:4e:dc:b9:93:11:
                    7a:3a:b2:8d:22:1c:55:d3:ae:51:78:08:f8:f5:01:
                    5e:81:2e:c5:34:c5:50:af:8d:d0:7b:9f:0c:40:c5:
                    a2:a7:79:03:01:13:2b:d8:16:39:c3:c4:dc:c9:16:
                    c8:ea:06:66:e7:23:4f:98:bb:8d:d7:fc:6e:34:c4:
                    34:cd:42:d9:82:cb:5a:61:9b:5e:d1:31:7c:c7:d8:
                    07:ca:59:e8:5f:38:76:16:63:80:ba:73:6c:9d:73:
                    70:33:d6:60:2a:25:21:0e:02:01:58:4f:00:ec:a0:
                    f3:6f:5d:22:3a:b5:b6:de:29:18:72:54:8c:2e:18:
                    9a:86:d5:7a:ca:ef:c9:48:29:22:45:58:7c:c9:a9:
                    7b:e9:ad:ed:13:3b:ba:f3:19:d6:32:ca:2c:90:31:
                    6b:37:f1:f0:5c:2e:c6:55:15:55:ac:25:1b:75:ed:
                    f3:c5:b6:0f:01:21:cf:b2:34:ea:4f:e2:90:48:ca:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:21:E0:AA:CF:25:D3:4F:D5:70:7F:AF:8F:B4:1A:B9:51:E0:42:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cf4d7e17-7766-395c-ac11-948fea074f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:5b:79:62:39:ed:58:b7:65:55:27:99:90:55:d2:00:2a:f0:
         14:f4:12:5a:3e:a8:ea:a0:9a:d3:49:0c:c7:e8:c2:84:b9:b2:
         1a:a8:34:57:91:a2:4a:2b:af:43:8a:57:ae:33:05:f7:6b:9a:
         48:54:ae:3e:47:bc:ff:38:2a:40:84:f3:25:9b:2e:09:4c:56:
         35:e8:7b:07:6c:8d:95:f9:f9:1a:a3:24:15:85:77:56:43:84:
         b5:67:5c:54:8e:2d:35:b7:be:f5:5e:dd:de:fe:f1:d7:14:ae:
         9e:9a:fb:c5:13:cb:74:86:fe:74:34:1b:0f:57:67:17:7a:1f:
         f1:9f:3a:f0:0f:70:fe:87:ad:6f:b6:75:58:66:99:2d:94:26:
         0b:ed:37:4f:d6:f3:d6:7e:79:a4:6b:5a:c6:62:ab:2a:15:52:
         cc:ea:5b:96:5c:af:52:3a:40:9e:49:7a:cb:e4:fb:fe:75:ee:
         bd:bc:1d:b1:6e:bc:34:ab:5d:d2:28:7e:8a:89:4b:7f:bd:0f:
         06:56:02:e8:05:87:fc:36:4e:d0:b2:8f:37:dd:f4:a4:96:9d:
         da:57:ab:fe:a0:54:6d:30:17:eb:f9:da:99:c2:ef:dc:6a:f0:
         ca:4c:3e:78:b1:cb:8f:7f:da:41:85:1c:98:6c:f1:f7:6c:24:
         e3:a9:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:16:11 2025 by rpki-client