Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/83aa3d92-dc6d-3ad9-9fd7-850fc3d860bd.roa
File:                     83aa3d92-dc6d-3ad9-9fd7-850fc3d860bd.roa (raw, json)
Hash identifier:          7tIrEy1DXOf43kJCjnXlI+yr3XBTKbUAWOz0VBvUNL4=
Subject key identifier:   29:A1:D9:BB:2F:DC:ED:4B:90:BB:BB:11:06:9E:B3:4B:97:2E:59:5F
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584819CFE0017DF03D7E9832E5A0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/83aa3d92-dc6d-3ad9-9fd7-850fc3d860bd.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     7992
IP address blocks:        159.26.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e0:01:7d:f0:3d:7e:98:32:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=14e938af-6c56-47b3-9575-09336a46bf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:1d:77:df:cc:66:65:29:a8:08:ec:08:c5:
                    ba:6f:f4:ef:b4:1f:dd:75:06:69:b6:01:e7:e7:d6:
                    d5:55:60:52:16:38:9c:37:f0:98:fc:4a:bf:4b:1b:
                    7f:3d:3b:28:17:43:95:96:aa:d5:c2:40:af:05:07:
                    10:d2:15:67:70:4f:77:40:a8:4f:01:ef:62:98:8b:
                    01:a7:b7:a5:61:53:c5:94:40:5d:26:dc:b8:a3:cc:
                    b8:08:0a:a8:21:29:a9:f8:87:e5:91:a5:05:41:f9:
                    f0:24:4a:68:0d:e0:25:d9:99:1c:13:37:40:80:38:
                    d8:ca:3f:35:49:09:eb:da:2f:b0:63:23:53:72:d4:
                    85:c3:e8:5b:3f:58:a3:78:51:99:be:f2:33:d9:42:
                    20:de:bd:4c:57:bd:59:02:a9:29:27:b9:d2:8b:91:
                    b5:aa:5b:61:fd:af:02:5e:87:81:01:2f:27:2f:e9:
                    aa:4f:b2:e2:c3:ce:65:5a:69:3f:ce:c0:65:ef:a3:
                    f6:a0:dc:f2:ca:9d:60:41:58:2b:ee:18:69:c7:d3:
                    a9:16:79:7f:da:0b:1b:f6:80:b7:ff:04:d6:fc:40:
                    f0:8a:16:ac:0b:48:6d:f3:4f:c2:6b:a2:0f:0c:e5:
                    51:f8:73:22:e1:11:fa:5d:2b:80:97:09:78:10:8c:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:D9:BB:2F:DC:ED:4B:90:BB:BB:11:06:9E:B3:4B:97:2E:59:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/83aa3d92-dc6d-3ad9-9fd7-850fc3d860bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.26.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:2c:25:d3:91:cd:d3:14:b9:da:c0:0d:9c:11:78:1f:93:
         af:0e:f3:4c:c4:18:ea:a5:78:4e:3c:dd:34:50:8d:4e:6b:3e:
         0b:ad:6f:67:47:0d:7c:a4:20:b7:ef:36:44:be:fe:39:b6:2d:
         22:ff:52:c6:ff:71:79:ab:ba:e3:36:e5:77:bd:11:10:f6:a7:
         bc:25:09:4e:35:4e:3b:ec:55:7a:31:00:89:02:11:89:78:c8:
         a7:9a:5b:f1:39:51:1e:64:7c:9a:68:b6:da:89:00:a6:f5:2a:
         30:51:47:9a:df:66:22:7b:72:a6:64:02:d3:0f:52:5a:b1:6d:
         20:12:7a:29:73:cf:1a:bb:cf:cd:dd:38:e2:4e:36:b3:87:e7:
         24:d0:fd:24:77:30:6c:d2:c6:6d:2d:2d:15:ec:2d:d0:44:c0:
         8d:6a:f0:6f:c5:32:fd:fc:05:67:38:63:5d:61:a6:24:87:70:
         0a:a6:12:b2:63:27:09:85:7e:00:94:04:dc:67:c3:1c:66:9e:
         14:a2:f7:54:52:b8:33:01:f5:65:fa:b9:64:f8:4d:92:1c:ad:
         f1:72:77:7f:8e:47:45:6a:18:ac:da:2d:22:52:56:e9:61:1d:
         ff:ec:78:6d:16:2a:d6:1d:13:48:6d:b1:8b:8f:aa:ae:c9:a1:
         be:9b:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:56 2025 by rpki-client