Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4795e54-648a-3afe-8394-41da6403103a.roa
File:                     a4795e54-648a-3afe-8394-41da6403103a.roa (raw, json)
Hash identifier:          PfEd4Ryn6ToJMtye4ql4eYemayd0HQLr9nJ0dBHBZ+s=
Subject key identifier:   1F:4D:E9:18:C2:34:E5:E9:1D:52:26:8A:67:0B:0C:71:D6:C5:44:A3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285841B1B19C12FEF4C369F9407E00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4795e54-648a-3afe-8394-41da6403103a.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sat 08 Apr 2028 04:00:00 +0000
asID:                     63376
IP address blocks:        140.174.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:b1:9c:12:fe:f4:c3:69:f9:40:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  8 04:00:00 2028 GMT
        Subject: CN=fe06b748-3f36-47c8-a4b1-7b177b36b555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:bd:14:c7:04:87:77:fa:18:38:a9:4c:38:
                    17:ab:41:c7:68:68:13:3d:da:b7:e9:c8:ef:5d:39:
                    24:71:50:8e:22:50:63:8b:11:c1:15:5d:95:d3:26:
                    92:4b:ee:02:5b:f8:d2:b0:27:03:1c:0d:ca:93:c5:
                    f0:e9:af:a7:b5:cc:66:bf:9d:9d:ae:ff:a1:c3:08:
                    cf:73:62:56:ad:cb:40:56:f9:ac:ac:97:7e:9e:dc:
                    ac:aa:61:12:17:b2:24:09:c0:b1:47:14:aa:9a:42:
                    84:5d:f2:c0:cb:d3:cc:ce:2f:cc:c0:85:46:38:05:
                    7f:7b:82:c2:93:3b:cc:ba:62:e6:b7:99:bb:62:68:
                    94:49:cf:d1:9c:e6:78:6b:18:bb:d2:82:14:84:2f:
                    ba:79:c4:d4:0d:a5:84:62:b9:5f:d3:53:03:0a:62:
                    a5:1a:24:1b:ae:54:89:90:5f:17:89:a9:23:54:51:
                    ed:03:8f:42:b0:d0:f1:35:b5:f0:2c:20:32:14:68:
                    60:eb:6c:fa:bf:13:cb:ce:e6:c2:d2:23:59:fa:9a:
                    07:e2:69:4e:93:e1:ae:8f:27:2b:68:16:59:32:97:
                    62:b5:a7:c6:ae:4b:51:75:0c:27:2c:d9:06:63:9a:
                    1f:e9:58:df:96:6f:6d:38:3d:3c:00:8e:b2:a9:11:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:E9:18:C2:34:E5:E9:1D:52:26:8A:67:0B:0C:71:D6:C5:44:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4795e54-648a-3afe-8394-41da6403103a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:ce:70:30:d3:b9:e9:c0:5d:1b:14:a2:b3:d9:2d:a4:dd:
         14:f1:cb:74:f9:4f:d6:ff:44:46:97:c9:ed:b4:2f:0e:06:46:
         36:48:5f:9e:3b:f7:4a:9a:12:5b:23:71:05:e9:74:63:13:53:
         74:82:61:2d:fd:18:84:16:0f:ae:b4:61:28:33:59:29:91:09:
         9b:c4:cd:fc:53:22:a2:96:79:a5:dc:6e:19:94:18:09:09:a3:
         b3:d3:2c:b7:40:f8:44:f6:e9:e9:9a:43:34:a0:9e:41:60:87:
         2a:cc:8a:3a:3a:0f:b7:c7:d0:ec:39:df:10:b5:e2:9a:b5:df:
         96:2e:dd:1b:49:ca:ac:35:ad:29:9c:9d:31:53:cf:ad:5c:47:
         34:15:64:c1:47:fc:37:c8:c9:a0:65:82:03:65:91:9c:d6:c5:
         ba:e6:c9:d3:f2:67:55:c7:fd:e4:26:54:2f:1b:0d:00:23:e4:
         35:9e:f2:78:b8:83:48:fa:a9:1c:a9:0b:fd:43:b6:53:dd:80:
         ec:0a:2d:9a:83:72:a3:e3:bb:fe:4c:cf:48:04:b4:43:08:c3:
         6e:90:82:ec:27:b6:6c:66:92:67:a5:99:ce:d1:c0:b2:58:25:
         bc:d1:cd:35:de:23:1e:4f:0f:e6:e6:90:19:b2:f4:27:23:a0:
         af:27:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:16 2024 by rpki-client on console-ams.rpki-client.org