Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
File:                     c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json)
Hash identifier:          dkroWS0JkNzWlB0f88SnWmIhyXnuqxyQCKbHk36EYQY=
Subject key identifier:   7D:03:3C:19:87:8A:21:4F:C3:72:AC:8F:57:C7:A2:80:56:55:B7:9C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845A65AFF0ECB88C5A719EBD4D0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
Signing time:             Wed 24 Apr 2024 07:53:36 +0000
ROA not before:           Wed 24 Apr 2024 07:53:36 +0000
ROA not after:            Tue 23 Jul 2024 07:53:36 +0000
asID:                     206264
IP address blocks:        172.94.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:5a:ff:0e:cb:88:c5:a7:19:eb:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 24 07:53:36 2024 GMT
            Not After : Jul 23 07:53:36 2024 GMT
        Subject: CN=c9b25d9a-4a4a-4308-aba1-61c0498fd1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:08:f5:3c:cd:04:a1:a2:e0:87:c5:07:a8:
                    2e:8f:ec:d7:0c:df:c8:3b:db:e7:c9:72:fa:9d:61:
                    1d:a4:62:97:9e:20:3d:a5:22:5b:72:09:97:33:dc:
                    6f:95:15:98:a7:4a:54:2f:3a:4a:91:d0:9b:fd:f2:
                    e6:a0:71:0f:49:9c:37:bb:28:9f:23:56:bb:9e:1c:
                    2d:f3:1b:c3:20:46:12:a1:b0:de:ce:24:b7:97:e1:
                    8c:a5:21:7a:55:9b:31:80:7d:0e:b3:ec:fc:9d:8c:
                    4c:d3:c5:bb:1c:e1:4d:97:9a:de:29:16:07:ad:e5:
                    c3:75:7b:cd:32:b8:81:74:dc:a6:c5:b9:97:74:7e:
                    fd:de:72:ca:f0:4e:e6:60:50:16:90:05:5b:0b:a6:
                    55:83:a6:3e:c9:cf:5c:10:9b:09:ad:fd:26:e0:68:
                    9f:e0:33:d0:c3:b4:a5:c8:6d:e8:27:5b:44:66:4d:
                    51:49:04:bb:aa:57:b4:40:3b:67:7f:f8:5c:8f:5c:
                    64:c8:e1:43:e6:49:ad:41:75:19:c8:dd:45:e1:81:
                    00:7c:18:1d:d4:30:93:7b:6c:1b:29:bd:f4:36:aa:
                    d5:25:1b:18:04:32:6f:1b:c9:bf:39:a1:b7:38:29:
                    08:49:d6:b4:1c:fb:a3:d1:fe:46:81:66:33:73:27:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:3C:19:87:8A:21:4F:C3:72:AC:8F:57:C7:A2:80:56:55:B7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:73:3c:eb:bd:11:7d:65:40:20:07:2f:a3:bf:05:31:81:cc:
         02:7a:d0:35:92:de:a6:b1:40:0d:7c:d5:55:61:14:f3:f7:78:
         a9:24:d9:ca:af:ef:36:ba:ed:3f:aa:6d:50:ee:22:d6:97:b4:
         12:e5:42:9c:4a:07:5f:2b:94:6e:41:a3:f8:75:da:ab:cf:a0:
         95:14:ea:21:05:4b:85:45:a3:00:af:92:56:d1:e1:25:a7:cf:
         0f:26:96:ae:aa:b9:35:e0:1d:38:89:3b:ef:9a:7d:69:c5:58:
         cf:3d:ac:eb:a7:a5:b1:5d:1e:4d:7e:2f:49:f3:5c:f3:c4:d7:
         c0:58:02:9b:43:af:60:42:6b:cc:9e:c9:d0:4b:5d:91:6e:00:
         0b:45:79:be:c4:59:ff:03:b0:e6:fb:5a:d0:33:e4:1f:67:ab:
         a1:07:ab:ee:49:46:40:95:91:5d:96:91:22:a8:cd:e1:7b:8b:
         d6:3a:a6:a3:e2:bc:3d:f6:de:ad:52:43:48:eb:7d:9b:94:7a:
         c5:ca:48:af:67:eb:6a:98:3e:64:9b:48:34:b5:63:c3:7a:28:
         2d:c0:db:00:3b:c3:93:da:e2:81:6c:27:5c:6f:10:ee:0b:69:
         56:ae:e6:bf:14:19:af:32:ab:a7:91:67:7d:85:46:6d:98:01:
         df:d8:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:54:18 2024 by rpki-client on console-fra.rpki-client.org