Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05b2e818-d405-3832-88c7-80115e5225c4.roa
File:                     05b2e818-d405-3832-88c7-80115e5225c4.roa (raw, json)
Hash identifier:          e19y6bO1muaEEmDoAQ5weBnqM87NVe36H8V2a6b4W+s=
Subject key identifier:   11:BA:8A:48:92:5D:E7:34:7B:2B:F8:3E:4D:1E:C6:76:EB:A1:6C:D5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845095573CB960B61D5A463CEC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05b2e818-d405-3832-88c7-80115e5225c4.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        172.94.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:73:cb:96:0b:61:d5:a4:63:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=28c6ffbf-0950-4543-88dd-514bbb3eb9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:3a:55:1f:46:d9:90:af:90:ae:6c:2c:10:
                    f6:9a:62:86:21:b6:4d:81:4f:b3:7d:8d:32:b7:48:
                    93:df:f6:ca:60:f9:f2:d4:34:a0:07:d9:7f:fa:76:
                    bb:f2:93:58:59:72:63:87:79:17:f4:a9:a7:26:c6:
                    c0:13:11:b9:d3:9d:39:c9:5e:de:18:68:19:4b:96:
                    28:80:c6:cd:7d:f5:c7:08:84:40:49:d0:e5:66:ed:
                    0c:a2:13:4c:24:f1:96:f7:51:6d:86:2d:29:8a:2a:
                    19:39:66:20:74:95:5c:02:87:bf:ec:a6:7a:05:d6:
                    8c:ab:c6:7e:07:85:ef:e4:47:c2:17:fc:fe:23:fa:
                    4d:2a:9a:ad:80:ad:79:b6:8e:43:49:88:b4:3d:ee:
                    a3:60:21:80:2d:20:0a:e6:7f:17:1d:1f:36:17:ef:
                    4e:0f:83:7d:3c:fc:1a:c7:d9:78:63:8e:95:88:58:
                    4d:00:6b:2f:f0:8e:7b:3d:7d:86:49:ed:c4:6c:92:
                    2a:54:62:06:ad:ed:42:29:d3:a3:fe:d8:65:21:59:
                    2d:8e:6f:aa:a3:8f:e0:91:05:65:56:f2:d3:d2:58:
                    0f:2b:8f:fc:e0:60:2a:bf:ac:e1:72:0c:18:1e:ad:
                    55:71:92:4e:77:bf:5c:de:17:52:71:81:d9:12:ad:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:8A:48:92:5D:E7:34:7B:2B:F8:3E:4D:1E:C6:76:EB:A1:6C:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05b2e818-d405-3832-88c7-80115e5225c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:d8:85:c1:3b:a4:58:a5:65:ea:cd:29:77:75:85:d2:9e:
         77:1e:60:e5:03:fe:82:b9:c6:5b:06:db:26:3d:fb:85:03:aa:
         25:15:27:76:36:5c:48:37:34:ec:9d:6a:c2:bb:0a:1f:00:8b:
         4b:4c:3e:51:2e:ef:d8:a3:62:d2:e8:ac:d0:ea:05:bb:8b:b2:
         53:95:4d:9d:0b:19:2e:f1:66:a5:98:aa:fd:26:04:21:05:a3:
         ee:ab:35:79:a8:1a:1a:c4:67:82:e0:c8:b0:26:2f:8a:4d:7f:
         f8:76:a9:fc:f8:fa:9e:7d:23:56:97:bb:27:ad:84:b4:d0:56:
         01:f1:5f:ee:b6:5b:9f:f5:14:4f:50:64:2d:52:e5:1b:5c:0f:
         c6:9b:88:3e:94:00:4c:a1:48:f6:a8:a0:95:ca:43:05:c5:c8:
         01:ea:30:80:33:98:bf:cb:19:f5:fb:c7:c2:10:d4:87:07:ff:
         7f:4b:0a:a7:14:2c:9e:fa:36:d7:81:ea:fb:1b:d1:3c:84:e9:
         50:bb:17:d4:f3:f2:f3:10:e8:9e:ac:e9:1f:3f:58:8e:7f:8d:
         c5:8c:b3:8d:20:e3:45:3d:f2:5f:75:b4:38:42:ef:95:e7:b5:
         fb:e8:ec:80:7b:a8:a5:ea:00:f1:9a:27:06:81:3f:9c:49:36:
         53:e9:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org