Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa
File:                     6a37db04-c374-339b-a7c3-989e21aa23f4.roa (raw, json)
Hash identifier:          tVSPps50kgxMImr+Vu1O6AoDav+6074/8KaX44fvCEw=
Subject key identifier:   78:6B:CB:3B:C0:24:F2:C0:17:81:87:81:7E:77:9B:60:FD:12:6F:DD
Certificate issuer:       /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
Certificate serial:       010D0C9F4328584754E0CC90416A6F9B824FDE80
Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     399668
IP address blocks:        172.98.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cc:90:41:6a:6f:9b:82:4f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f15809fd-7b30-4221-8915-cdb9c40e282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:67:ab:29:6a:eb:4b:5c:97:8b:0b:a0:64:
                    5d:e5:7c:a8:74:53:8c:53:03:59:c0:85:e6:08:c2:
                    78:80:74:dd:59:4c:d5:83:a8:60:54:32:e2:57:df:
                    1d:be:d0:a9:2f:c4:1d:cf:a9:87:de:87:a1:cf:e7:
                    a2:e1:8e:5f:b1:ba:c5:5a:d2:c4:b4:9e:7d:ea:2a:
                    bf:64:c5:f8:0d:52:d6:56:ec:92:cf:54:49:7e:22:
                    d8:ce:2c:7f:92:78:0a:56:c1:21:2a:72:d1:d0:0e:
                    75:a9:c9:73:ea:55:f9:1e:e8:a4:c7:72:1c:d6:99:
                    94:af:cf:9e:c7:0d:00:82:a3:83:99:3f:f7:a9:6a:
                    da:8d:88:81:6c:7d:4b:96:86:b0:5b:e7:e7:35:49:
                    c2:d5:79:4c:fd:5f:46:37:04:37:2c:44:33:01:dc:
                    42:22:a4:0e:3d:f6:16:03:29:42:cb:cb:80:00:c2:
                    da:fa:64:1c:32:fe:3d:69:58:8b:4f:f1:ba:18:5a:
                    a2:0b:da:82:a8:a7:39:bd:15:66:bf:c4:9e:5e:5a:
                    3b:fc:f4:26:39:ba:5a:1c:12:5f:ff:a4:ac:aa:2c:
                    46:f5:ed:a3:c6:81:23:b4:5d:43:fa:40:f9:8f:dc:
                    d7:9e:83:76:9e:5e:1a:de:e9:9a:ed:b7:c6:6b:78:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:CB:3B:C0:24:F2:C0:17:81:87:81:7E:77:9B:60:FD:12:6F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl

            X509v3 Authority Key Identifier:
                keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e7:9b:59:70:ce:ab:2c:22:54:f1:82:dc:4b:02:e1:a8:ac:
         51:c6:1d:fb:f2:bd:81:34:b6:d2:8a:cb:3d:77:4a:41:b9:9b:
         29:da:1b:59:fb:b7:1e:b7:3c:fc:7d:f5:4d:78:56:b3:db:b4:
         02:c5:34:72:d0:85:8c:ca:bc:5c:b8:51:51:6b:94:d7:d0:87:
         5e:07:e5:ac:27:72:f7:ed:20:95:63:8f:ca:25:51:86:05:61:
         10:95:5b:f9:c9:94:b8:37:48:be:ad:31:aa:6b:a0:6a:bd:be:
         19:68:d5:3a:2d:ec:cb:60:72:a3:d1:09:10:5d:98:e3:6c:6a:
         0f:cb:1f:be:40:94:e4:70:45:5c:b5:47:a0:d7:f0:45:44:15:
         59:2b:3a:dc:f9:57:ea:4c:d7:e9:68:45:a1:08:3a:3d:b6:74:
         e3:c2:0c:64:ff:22:87:c7:d8:0d:85:8a:62:b9:0b:37:1c:66:
         8f:96:6e:b1:ff:a0:be:76:6c:5d:b5:53:ce:ce:85:30:9d:f6:
         3a:d9:9a:76:cf:21:e9:4b:42:06:46:8e:72:ec:84:0e:d2:82:
         a8:7d:76:1e:6a:f0:4a:90:95:df:2b:62:a2:9a:3c:1e:f0:e7:
         16:90:ad:bc:a7:18:95:b6:75:36:24:0a:91:62:68:c1:f6:64:
         56:90:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:17 2024 by rpki-client on console-ams.rpki-client.org