Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e67ff8a4-c1c7-3e5e-8ab9-c232f8fb9653.roa
File:                     e67ff8a4-c1c7-3e5e-8ab9-c232f8fb9653.roa (raw, json)
Hash identifier:          LFdGO9EHGJcW1FgJ5G0YnKg+swsjgNlh5SSJxAZpt+Q=
Subject key identifier:   B9:1C:F8:5B:50:9E:28:FC:CF:E3:E1:09:CA:06:71:24:E0:24:35:89
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849CBCFA1448BACFECB645E6EC0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e67ff8a4-c1c7-3e5e-8ab9-c232f8fb9653.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     3356
IP address blocks:        192.56.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a1:44:8b:ac:fe:cb:64:5e:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=7730cbd7-3132-4c6d-b374-284db58ac497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:51:1c:52:fa:ac:c4:4e:71:c2:eb:a0:e6:
                    12:55:ee:3f:a4:7e:b7:2e:22:a2:a0:21:5d:83:00:
                    76:b7:7b:08:51:df:45:4c:9d:2c:4a:ac:ec:b7:af:
                    37:bd:53:60:7b:88:04:bd:07:f3:23:28:e7:53:f3:
                    41:1e:cf:cc:c7:b7:bb:7f:d2:f8:a3:ce:a9:c3:3d:
                    38:dc:fc:43:10:86:21:8a:07:22:22:2a:51:35:01:
                    b1:9e:1a:2b:12:3f:7b:94:16:45:60:31:56:23:c8:
                    c0:54:b8:6e:f4:2a:ec:c9:7a:ad:17:35:48:6d:42:
                    11:dc:e4:54:34:a6:2c:84:b0:0c:16:d4:7e:61:07:
                    da:94:8a:ad:84:7b:91:5e:14:13:3c:11:0e:a0:8e:
                    61:07:fe:b8:5a:6a:a1:82:c5:40:47:83:c0:6b:60:
                    d7:37:2b:93:e6:37:56:13:89:63:27:3e:b2:f2:2f:
                    bd:92:24:a2:63:3c:18:1e:37:94:0b:d3:21:4a:be:
                    52:1a:c8:64:41:f0:d7:7b:13:6c:c5:71:3c:9b:14:
                    79:93:8d:d7:15:ff:e3:47:e5:1f:0a:e6:6f:7c:c6:
                    c1:34:07:c0:33:7a:8e:f5:6c:e6:c4:21:24:cc:b6:
                    cd:55:c9:20:2b:84:1c:79:a7:6d:fd:c8:4a:83:92:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:F8:5B:50:9E:28:FC:CF:E3:E1:09:CA:06:71:24:E0:24:35:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e67ff8a4-c1c7-3e5e-8ab9-c232f8fb9653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:e3:6c:ba:0a:7f:c3:0c:c6:85:90:0c:13:40:03:6b:14:
         29:d5:a4:1e:52:9d:cb:20:1d:19:c8:b3:6c:2f:ac:e2:e4:25:
         cf:4c:6a:7d:d1:d1:dc:54:77:b9:b2:4c:83:a0:26:ff:c4:a5:
         0f:e4:aa:cd:a7:cb:bb:e7:02:2e:6a:4b:35:a5:41:75:15:cd:
         89:a7:19:16:0a:32:cb:63:52:eb:c4:0a:56:33:47:25:ba:22:
         ab:1a:b9:ee:1e:cd:ce:da:9d:00:3c:6c:2e:ab:48:92:87:78:
         f6:a8:32:f6:05:31:40:17:e0:6d:e8:83:35:9f:7b:66:c2:05:
         f3:12:b3:5b:e9:3b:2f:5a:77:ae:49:0b:d2:98:e4:d8:a7:2a:
         e6:05:91:6b:b0:c0:22:70:9a:cc:a0:8c:e0:b2:32:5c:c5:c3:
         9f:65:6e:b6:11:d9:2a:0b:03:42:74:c4:98:ad:33:aa:5e:3d:
         5e:47:27:0b:03:80:1f:b7:d2:94:60:d3:4d:99:91:62:86:3b:
         f9:1e:38:c0:55:4c:28:3b:19:c5:91:c5:82:31:22:39:be:35:
         62:18:ae:0e:28:a1:4e:6e:f4:6e:7b:70:a2:a2:0c:6c:b9:1a:
         1e:07:30:bc:27:5e:b9:7c:49:92:03:15:75:ba:12:bb:06:4e:
         81:78:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:01 2025 by rpki-client