Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa
File:                     AS26127.roa (raw, json)
Hash identifier:          7AiAxxET1OReAQHeEKKSjG4HgSiP+kXxBOmC5r9xr5Q=
Subject key identifier:   7A:57:31:4F:DA:41:4F:93:32:49:E8:44:43:89:CB:C8:5A:0E:00:F2
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       4F2D07F823C75856C0549DA99C43DCC6A6FD4B72
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa
Signing time:             Tue 07 Nov 2023 12:23:51 +0000
ROA not before:           Tue 07 Nov 2023 12:18:51 +0000
ROA not after:            Tue 05 Nov 2024 12:23:51 +0000
asID:                     26127
IP address blocks:        50.104.124.0/24 maxlen: 24
                          50.104.168.0/24 maxlen: 24
                          50.106.84.0/24 maxlen: 24
                          50.121.2.0/24 maxlen: 24
                          50.127.127.0/24 maxlen: 24
                          74.40.22.0/24 maxlen: 24
                          184.19.239.0/24 maxlen: 24
                          2001:1960:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 15:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2d:07:f8:23:c7:58:56:c0:54:9d:a9:9c:43:dc:c6:a6:fd:4b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Nov  7 12:18:51 2023 GMT
            Not After : Nov  5 12:23:51 2024 GMT
        Subject: CN=7A57314FDA414F933249E8444389CBC85A0E00F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:70:74:19:4e:0b:1d:ae:c5:34:fd:f7:33:
                    35:19:45:6a:6d:6e:56:2d:49:f0:52:75:26:69:53:
                    02:4c:0c:2b:da:c1:09:2a:c3:dd:5f:29:1a:74:0d:
                    e8:e4:23:c0:10:6e:97:01:09:31:6c:4f:49:f1:e3:
                    43:c4:bb:79:88:58:d2:ec:76:8b:82:5f:20:1c:7a:
                    27:c4:5d:db:52:df:0b:3b:c3:e9:ef:91:8a:0b:00:
                    ca:12:e3:9f:07:c2:ee:96:4e:5e:55:c1:98:5e:b1:
                    58:99:9b:79:94:ff:76:6b:eb:9b:07:9a:03:ae:ef:
                    4a:b0:16:7a:b5:82:b6:d3:e1:7d:02:5f:78:d5:60:
                    3b:a6:67:a1:64:29:a7:8f:24:83:13:e8:98:3c:ac:
                    6f:e0:85:dc:d5:a6:e6:37:62:da:41:ca:1d:cf:2f:
                    2c:4a:eb:66:a2:d6:7d:4e:76:c3:36:5d:c8:d9:4e:
                    16:04:8a:04:f2:4e:fc:5f:7c:d4:93:97:68:91:78:
                    d1:80:35:61:24:dc:3f:f1:c9:f0:ea:9e:88:ef:a9:
                    ab:bd:b9:2b:0d:4b:97:97:c3:1c:fe:e1:1c:8f:23:
                    39:62:c5:02:a2:25:71:4f:59:3d:62:43:16:3c:18:
                    ca:59:0f:df:59:fe:02:a3:69:3e:0f:6b:93:4d:dd:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:57:31:4F:DA:41:4F:93:32:49:E8:44:43:89:CB:C8:5A:0E:00:F2
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS26127.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.104.124.0/24
                  50.104.168.0/24
                  50.106.84.0/24
                  50.121.2.0/24
                  50.127.127.0/24
                  74.40.22.0/24
                  184.19.239.0/24
                IPv6:
                  2001:1960:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:4f:e9:0c:67:ac:fe:d9:56:f0:b3:0b:d9:ce:ec:e3:5e:f5:
         ed:e0:dc:33:62:6c:16:ce:8f:e3:18:f2:5b:40:82:b2:36:da:
         b8:79:41:df:0f:00:1c:6b:1d:e7:ad:92:64:7b:59:f5:bc:95:
         5c:7c:6f:a9:09:d7:fa:41:42:d7:3a:ce:23:bf:30:f4:cd:41:
         2f:b4:fa:50:23:55:70:bd:13:1c:35:c8:f7:a9:08:fe:38:ee:
         1c:e2:fc:24:56:58:7d:fe:4c:10:1b:93:15:f0:e4:db:a2:d7:
         ab:84:93:4b:38:52:d7:5c:1d:71:84:37:db:3d:16:05:5e:e1:
         29:ae:f1:23:fd:d0:9d:34:c1:39:62:e7:65:62:87:0a:bb:8c:
         6b:99:1c:4c:85:bf:e1:9e:63:3d:e3:36:01:cb:3e:8d:84:ad:
         47:55:97:5c:be:7d:56:bb:22:32:7b:61:48:7b:e9:e7:9f:00:
         b4:6c:32:eb:fe:5b:c2:1f:59:b3:1a:47:e7:f8:b9:41:31:83:
         11:28:9f:ae:26:3c:79:b2:0e:6b:f2:f4:9f:78:4c:83:38:d5:
         d2:bc:70:c7:34:3d:1a:e0:d3:27:d2:43:52:45:38:cf:1a:6c:
         3b:eb:a2:2b:38:36:fe:ad:05:d3:45:c7:e8:8e:e3:46:ed:c1:
         fe:2e:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:27 2024 by rpki-client on console-fra.rpki-client.org