Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa
File:                     2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa (raw, json)
Hash identifier:          0U0eblxzsivkxB9LDF4cazjeJHstCbMR2c8o7/Vf0uw=
Subject key identifier:   70:83:82:8B:A3:15:C0:E6:03:61:D3:5E:56:92:67:FF:0D:8E:D1:83
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858491AA6B9780E184B6D73F3C100
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394708
IP address blocks:        74.126.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b9:78:0e:18:4b:6d:73:f3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=504173f3-353a-4d01-892f-ad5458a2eebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:35:0b:2b:42:20:2b:cb:dd:85:6c:6e:8c:
                    88:cd:2d:39:e9:75:13:c3:3a:00:ca:dd:b2:e8:07:
                    b4:2f:b7:50:88:04:44:d9:5c:19:72:be:de:90:e1:
                    7e:a4:bf:8a:98:06:db:c5:a0:08:27:be:0f:56:bd:
                    05:01:8a:51:ce:1d:b1:b6:e2:85:9b:b1:24:ec:6c:
                    00:3a:82:68:21:0e:fa:a1:92:9b:c1:4c:1d:b9:e9:
                    b1:f3:81:17:25:d6:27:03:e2:c1:1d:d2:4c:34:31:
                    83:93:3a:bc:a1:f5:8d:79:ae:b4:b2:d1:10:10:e7:
                    db:d4:32:05:77:6b:3d:f5:49:91:00:22:31:7f:35:
                    e2:75:74:f8:12:39:15:84:8a:45:f1:44:3c:ac:2f:
                    05:d2:a5:cd:19:f0:28:c5:48:a3:d0:37:c4:ca:be:
                    22:2f:8a:74:0d:bc:de:e8:92:cb:6f:1b:6c:bd:43:
                    64:24:cc:e4:db:89:f9:08:14:c1:04:13:22:36:0e:
                    81:d9:96:03:d0:cb:4f:8d:cc:78:71:40:8e:16:e7:
                    6e:85:a5:89:4b:d6:86:63:ac:5c:ad:a1:ec:db:73:
                    2a:a9:61:e3:28:3e:97:c2:37:eb:8e:1a:af:20:01:
                    5a:68:87:c1:db:45:fe:56:cc:61:8a:32:df:bb:e4:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:83:82:8B:A3:15:C0:E6:03:61:D3:5E:56:92:67:FF:0D:8E:D1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/2b26aff4-67ed-3422-9a66-e17ecdf86d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:03:01:12:33:68:c9:fa:7d:80:07:4d:0d:91:b9:3a:b5:
         c8:00:2e:cb:99:a8:50:86:54:e2:4d:a8:7b:5b:33:33:b1:3f:
         2b:e4:c9:f0:84:34:83:e4:1c:1e:44:90:64:85:2d:a2:67:49:
         8a:d1:36:cd:ed:13:29:56:46:91:3e:67:b3:2b:ad:a3:d6:4c:
         6c:ad:a6:b4:58:eb:64:9c:3f:75:7e:c3:d3:64:ce:2c:5d:f1:
         de:fb:4c:23:02:cd:9b:a2:d7:8e:a5:8a:b1:d3:9e:8d:c4:23:
         c0:0d:94:49:1e:82:e1:f5:b7:f6:84:b0:cf:69:24:74:4a:5b:
         3f:cb:29:c7:3e:aa:a1:e9:ee:29:fb:82:08:90:71:fa:27:75:
         eb:7c:6f:0e:a1:09:08:75:01:fc:6b:f3:4f:21:4b:a3:9a:84:
         95:e4:47:f4:a0:86:29:0e:5e:7a:aa:40:3f:b5:a4:59:c7:20:
         59:94:6b:5a:5c:96:c7:ca:4e:7b:2e:49:1e:e7:94:6c:90:03:
         6a:1a:f5:8d:af:0f:61:d6:89:84:53:b9:0f:0d:8a:7e:0a:49:
         ca:f2:b5:46:c1:a1:44:fe:33:97:97:9f:78:72:e4:c5:92:9c:
         7b:7e:01:8b:49:93:a9:bc:99:37:88:31:9a:b3:42:83:1d:d9:
         87:a7:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:47 2025 by rpki-client