Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa
File:                     34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (raw, json)
Hash identifier:          uuLiLiGjpJ6iUDHZvSADEVZUxJX7zT2Jw+PhhtQDJxM=
Subject key identifier:   22:FD:9B:65:1E:B1:2B:B5:5B:FF:FD:5E:7D:0F:F6:53:8E:91:35:A0
Certificate issuer:       /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a
Certificate serial:       010D0C9F43285847DB16E7AC36FC79FFA61A5980
Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa
Signing time:             Tue 12 Nov 2024 14:48:08 +0000
ROA not before:           Tue 12 Nov 2024 14:48:08 +0000
ROA not after:            Mon 10 Feb 2025 14:48:08 +0000
asID:                     36562
IP address blocks:        206.225.26.0/24 maxlen: 24
                          206.225.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:16:e7:ac:36:fc:79:ff:a6:1a:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a
        Validity
            Not Before: Nov 12 14:48:08 2024 GMT
            Not After : Feb 10 14:48:08 2025 GMT
        Subject: CN=b58751d6-4b52-4781-85ff-0785ddd92cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:ee:9f:b6:ac:02:c3:25:ed:c9:74:c7:d1:
                    01:cc:c7:d5:72:32:ac:93:07:31:9e:40:01:b9:39:
                    10:6e:1b:07:fd:80:f3:46:72:1e:63:ed:f4:0f:bf:
                    3f:62:d9:3f:80:45:1f:1a:19:74:47:1c:13:f4:67:
                    df:ae:a2:bb:e3:a4:37:d4:47:1b:91:32:08:da:40:
                    7e:9b:57:0b:a5:b7:c6:b6:6b:59:c4:0c:41:b6:f2:
                    df:8b:ee:77:47:3c:2b:75:f7:ea:84:ec:db:ae:eb:
                    65:df:25:23:2f:38:3a:f1:6d:ab:4c:21:e7:be:47:
                    a5:5c:8c:95:f0:83:72:58:2f:10:98:9d:2b:70:6b:
                    bf:68:7d:bb:9d:2e:cb:ca:02:1e:eb:76:74:3c:0b:
                    6a:82:d9:d2:f5:34:f4:90:38:79:f6:62:ed:e4:c7:
                    13:19:d9:a7:1a:a8:4d:bb:6c:37:a8:b3:c8:db:48:
                    9e:26:9f:f2:29:0f:e6:6a:76:bb:c9:8e:a4:fd:6b:
                    97:91:28:10:36:3d:13:13:bb:d9:0c:fd:a3:5f:f3:
                    24:90:ce:ef:28:e5:6f:f1:22:8b:99:49:11:1f:0e:
                    b2:c7:cd:e5:cd:ab:28:2b:97:ef:c7:b3:c6:6f:ca:
                    f7:0f:69:96:ba:fe:0e:09:75:ab:61:51:a3:1e:6a:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FD:9B:65:1E:B1:2B:B5:5B:FF:FD:5E:7D:0F:F6:53:8E:91:35:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl

            X509v3 Authority Key Identifier:
                keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:ff:2f:af:f2:44:65:20:ba:cc:a3:81:9f:b7:c4:27:85:
         2b:ba:e7:36:ae:3a:60:72:e6:91:75:f8:32:6a:ea:b0:dd:84:
         0d:0a:77:de:43:58:6f:33:b3:dc:18:03:cf:39:fc:01:f9:1b:
         03:0a:db:99:66:9e:c9:c7:4d:6d:da:d7:3a:20:96:b9:0e:57:
         b2:98:d1:56:40:12:7e:a0:b9:5d:86:5b:7f:7d:46:8d:d9:7a:
         8d:9b:96:bc:36:83:b2:de:42:22:31:0d:a9:90:13:9a:bc:a8:
         17:d2:5f:30:84:92:0e:d1:37:58:1d:98:ea:b3:51:e7:f1:1b:
         1b:ec:50:20:f0:a4:fa:ff:69:44:ae:0a:bf:a6:1b:4f:80:33:
         21:31:bf:9f:cc:12:a9:74:46:bc:7a:71:f8:88:ca:50:81:78:
         5d:b1:92:96:08:41:74:09:93:f4:63:59:7d:9d:6f:ff:9d:c5:
         31:cd:ab:b0:89:12:46:1e:a5:f1:58:5a:62:71:f9:1a:2a:da:
         7d:69:fb:a1:e3:ec:ce:45:38:f0:b7:fd:81:70:82:7e:23:67:
         2a:d2:2a:f1:9a:b4:65:dd:83:8d:84:ce:c8:4d:ad:53:a3:03:
         bc:a3:39:64:d8:94:cb:7c:de:d3:34:e2:ec:08:65:dc:7c:5b:
         94:e7:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org