Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
File:                     53e29c51-e37d-313a-8354-995124430718.roa (raw, json)
Hash identifier:          rZBQm4IgNNj6Nso0ok/vbk7TYy2P3LO6pKj250re1a4=
Subject key identifier:   BE:86:5B:05:4C:9B:0B:C8:49:9B:B8:82:6E:4A:41:AF:9D:D3:7C:0B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858454C380B7A1CA668A98F5209C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     3949
IP address blocks:        165.254.26.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0b:7a:1c:a6:68:a9:8f:52:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=f96aa00e-f9f8-46db-b591-29e2ff93561b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:9f:5a:ed:76:ae:dc:2f:e1:14:ce:5c:7b:
                    ae:0c:63:da:62:b2:7c:ae:3f:67:d8:9d:c4:14:13:
                    b6:38:b3:6b:4d:af:2a:3d:b5:f5:0c:4b:19:02:e3:
                    4a:c4:40:8b:bb:88:2f:ca:15:96:a1:fd:09:3b:7e:
                    12:d8:0c:19:be:6b:05:a6:1c:60:41:5a:4a:04:c7:
                    90:61:68:b8:bf:ae:72:bf:4c:95:b8:2a:42:c2:69:
                    4e:8c:79:f2:93:41:a5:26:7a:4c:12:2d:ff:9e:b2:
                    d1:e0:42:47:f3:f9:3e:fb:4f:24:39:be:7a:22:cf:
                    fd:dc:c4:c2:10:bc:a0:18:9a:5b:cb:04:0e:f4:19:
                    8f:dd:7a:f0:99:9b:4c:7b:10:0b:1d:92:90:c6:59:
                    de:ff:6d:e3:29:21:12:30:be:c7:0b:e2:6c:33:12:
                    48:62:ad:08:cd:42:8a:b6:7d:09:b3:57:bf:81:04:
                    0d:d3:28:43:9f:05:0f:c0:47:e9:4e:00:d7:e5:59:
                    de:a1:08:5c:6d:d7:2b:3f:2b:8a:d8:b1:ec:71:20:
                    9e:9d:4f:e1:3e:12:09:d4:8b:dd:ac:c5:da:27:2e:
                    c3:d9:22:7e:4b:b7:b6:2f:d6:b7:d0:13:0d:72:7a:
                    d7:ca:2c:b6:9f:b3:64:ad:ba:df:10:c8:9f:5d:df:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:86:5B:05:4C:9B:0B:C8:49:9B:B8:82:6E:4A:41:AF:9D:D3:7C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/53e29c51-e37d-313a-8354-995124430718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.26.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:97:ed:16:da:96:cd:c3:94:7e:24:6b:6f:be:82:eb:f2:
         77:59:61:84:0a:6f:92:62:e5:b5:ab:12:eb:32:e4:ad:30:3b:
         52:96:7c:a2:40:13:4b:5c:95:e8:45:e3:d3:6f:77:e8:e0:f8:
         8d:b4:c6:e0:85:d2:6e:5d:0c:9f:84:03:fe:18:a9:fe:c2:bc:
         d5:7c:c5:e9:f9:98:34:33:16:70:e3:50:ef:d0:25:33:54:fe:
         56:64:fc:e2:06:01:2c:bc:d9:50:cd:4d:c6:1c:15:78:9d:6f:
         8d:83:0f:87:7b:d2:c9:b0:1a:59:58:6f:f0:f9:d3:9f:f9:4a:
         21:dc:d3:85:15:87:12:1e:0a:32:a2:11:e8:94:af:d3:7d:8d:
         e5:d4:35:bd:b2:71:4c:47:e5:ae:a2:51:5f:dd:43:2f:69:a9:
         8d:9a:e4:2b:f0:a8:9b:ce:fe:18:60:f3:62:d6:21:34:02:5a:
         07:ca:83:a0:c5:f3:e9:ed:b3:db:0c:88:e0:ee:7e:79:6d:14:
         74:8a:f2:7b:a8:4f:a7:a8:13:54:3a:d2:42:0d:aa:7b:34:3c:
         61:d4:87:60:05:9c:ab:db:04:56:24:8c:07:f6:f2:fb:20:d3:
         fa:c2:84:7d:01:71:7f:9b:b4:33:09:75:5a:80:ad:f8:e9:0b:
         86:6d:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:59:25 2024 by rpki-client on console-fra.rpki-client.org