Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26d59a98-a1f7-36d1-9d7a-26e262097db1.roa
File:                     26d59a98-a1f7-36d1-9d7a-26e262097db1.roa (raw, json)
Hash identifier:          zMbHeZAcx0AuRs7XI8Oa3v20kGMVynYVt/Jhl4GH3Ac=
Subject key identifier:   C7:25:C9:80:E7:F9:99:52:A4:36:9A:DC:45:B7:C7:91:9E:C5:0C:48
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F81D01E4A
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26d59a98-a1f7-36d1-9d7a-26e262097db1.roa
Signing time:             Tue 07 Jan 2020 21:01:37 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     93
IP address blocks:        192.147.175.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:81:d0:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=743c35e7-ec9c-4bc5-afdc-43b849313fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:23:42:ac:fb:a6:34:08:11:b3:81:ce:8f:
                    da:8f:63:3b:1c:ff:fa:04:07:e0:56:dc:90:99:4f:
                    fe:77:b7:e8:a8:7f:a0:2d:d1:7d:f4:85:b8:9c:ac:
                    23:38:bb:0c:ca:a4:dd:46:f7:6b:52:de:21:ca:69:
                    02:67:81:c4:c2:20:dc:cd:73:36:8d:9d:ac:0f:25:
                    24:1b:2b:d4:dd:d4:ea:c4:86:74:70:7f:43:d5:db:
                    01:90:80:2d:79:f8:92:eb:ea:1d:e5:75:8e:00:1b:
                    55:10:e7:f3:6c:1e:2b:9b:9a:6f:f4:94:9c:8b:08:
                    dc:d8:cf:09:4a:0a:8e:fa:d1:69:40:88:3e:b3:6c:
                    03:6d:18:69:0c:93:d4:9f:c4:5b:f9:26:11:42:5f:
                    cb:75:8f:81:9b:f1:6c:a0:a5:d9:c8:8f:d1:67:34:
                    50:42:39:25:cd:40:43:8f:f4:c7:9d:8d:a5:da:e3:
                    87:7c:63:94:67:c3:0c:96:6f:3f:38:ed:40:15:87:
                    99:66:86:ec:27:6f:af:8c:f2:8d:74:e5:64:35:3c:
                    ec:18:22:6d:62:1d:de:a0:01:dd:a2:9a:32:db:18:
                    63:a2:da:f4:25:a9:4d:24:98:fe:b9:ea:de:52:23:
                    5c:f6:f1:16:7e:86:49:d1:17:dc:41:3f:52:56:b9:
                    96:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:C9:80:E7:F9:99:52:A4:36:9A:DC:45:B7:C7:91:9E:C5:0C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26d59a98-a1f7-36d1-9d7a-26e262097db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:44:8d:86:2f:a5:51:6e:ff:ec:47:5b:53:9e:a9:11:42:6a:
         d1:62:df:45:0a:78:05:9a:cf:5e:d2:5a:00:44:5e:b7:1e:6c:
         7a:f5:a9:be:6e:50:b6:76:22:5d:54:83:12:eb:c7:d5:5c:e3:
         08:15:5c:e7:01:7f:35:ea:43:f3:1f:b5:e7:ce:4a:69:f7:8c:
         72:33:53:2d:89:e6:5c:ec:50:71:78:2d:65:93:e7:0e:5b:a5:
         ba:e8:7a:77:db:35:1d:1e:6b:b4:f3:59:4a:70:c2:97:fc:0f:
         b7:49:e2:26:4c:c7:ce:90:d5:e6:52:92:98:6a:80:e3:1b:d7:
         5f:36:a9:91:9d:d2:bf:cc:d5:b3:e8:17:4a:20:0c:53:65:7d:
         9a:bf:5b:56:3a:df:02:df:5f:9f:6e:42:a7:c7:94:6b:7b:2b:
         ed:3a:1d:59:95:65:da:53:4f:ef:66:7a:60:94:90:81:e7:dc:
         50:99:e1:85:cc:ab:81:50:81:6c:f7:4a:b0:6d:3c:6a:12:60:
         10:6a:1e:42:9b:9d:c1:7f:14:c9:17:41:cc:e5:e6:cc:95:11:
         68:aa:9c:6a:0a:8b:75:11:0d:79:9a:11:44:02:81:7a:a9:a9:
         71:64:c9:f5:79:bf:26:8d:78:94:9f:1d:9b:2d:c5:d0:87:7d:
         fa:ff:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:09 2024 by rpki-client on console-ams.rpki-client.org