Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7f782301-ca9e-31d7-9f5f-de1488895b5e.roa
File:                     7f782301-ca9e-31d7-9f5f-de1488895b5e.roa (raw, json)
Hash identifier:          QvwE1gQ1Y9d8KRXC0k9rwp9iXCpQSeEzeJyEEoGlnLE=
Subject key identifier:   05:99:B6:1A:FB:8C:A8:2B:30:1D:20:12:00:3C:D6:95:97:85:1D:8E
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F43285848C9B0DE8F55E37102F95AF520
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7f782301-ca9e-31d7-9f5f-de1488895b5e.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     54668
IP address blocks:        174.137.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:de:8f:55:e3:71:02:f9:5a:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=b00c92e4-0f62-4a96-a8c7-376bd04a1846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:15:1c:eb:18:18:36:89:d7:91:67:03:d9:
                    66:c8:10:d1:0f:bd:60:45:6d:5e:e6:a3:32:74:44:
                    06:38:89:e3:fd:6b:7e:28:cf:ce:b0:c5:e3:c2:5a:
                    4e:34:d4:78:31:5f:36:13:19:d3:42:e7:eb:96:04:
                    96:e0:29:07:ce:58:c8:f5:1b:02:3f:fb:76:33:03:
                    8a:76:78:1f:a2:65:df:4f:5f:ec:43:32:d5:57:bc:
                    0d:c9:a5:47:f6:56:a2:ce:61:d9:5a:ac:4d:7b:40:
                    bb:c3:18:c0:42:5d:c8:ef:73:7b:21:ba:f1:7c:2a:
                    64:84:7d:b7:34:8b:e3:e2:0a:aa:cf:eb:e6:00:29:
                    22:b6:bd:8a:52:f7:b3:90:ef:12:62:0a:be:63:d0:
                    b1:33:89:31:9d:df:5b:c9:da:d1:77:a9:c5:39:80:
                    a2:82:3c:eb:b7:7a:79:80:8c:e5:74:1c:ae:54:40:
                    05:6c:8d:18:b3:8f:66:e7:60:39:45:2f:9b:80:9b:
                    95:f2:50:7a:9b:68:7b:0e:64:17:aa:9d:6f:79:ed:
                    fc:8c:8a:10:61:29:02:00:2b:4f:38:cd:00:15:97:
                    bc:f0:b8:6d:34:5c:96:f6:40:20:96:7a:26:49:0f:
                    dd:42:59:65:22:20:aa:49:43:39:33:38:ea:c7:00:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:B6:1A:FB:8C:A8:2B:30:1D:20:12:00:3C:D6:95:97:85:1D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/7f782301-ca9e-31d7-9f5f-de1488895b5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:60:0e:a3:20:6b:68:81:29:90:3c:da:60:a7:f3:b8:2e:1e:
         51:48:d9:2d:ee:da:40:01:e8:41:3a:fb:49:34:da:67:5f:78:
         b5:f6:b2:3f:e9:e6:ed:6d:a0:00:1e:5c:60:d6:8f:df:22:fb:
         89:13:8a:8a:fb:da:7d:4b:72:7a:3a:39:0f:d9:e7:83:cb:48:
         bc:d4:97:8b:a0:3e:03:23:80:0c:8d:51:89:d2:c4:a2:4a:94:
         10:e9:fe:4c:55:1b:36:ef:4d:86:a4:9b:82:7f:22:a1:16:d6:
         7a:1c:db:ea:3f:91:54:72:31:83:a2:13:28:81:a1:e1:1d:95:
         f1:ab:e2:72:e7:07:7a:ba:3d:25:18:c2:aa:6d:33:e7:af:32:
         41:80:e0:a7:ae:1e:6f:25:eb:63:5c:81:52:6d:f0:c5:fb:a9:
         90:5c:31:b1:97:5c:0b:d2:f8:94:e2:ff:b5:44:a5:b8:54:5d:
         19:2c:87:e5:68:db:92:33:54:fa:e3:e5:f5:b1:4a:0e:a2:bb:
         3a:db:8c:f6:fa:1a:28:46:b8:9a:4c:ba:db:a0:1a:ca:c5:07:
         10:d8:1d:5c:5e:61:b8:b8:8d:26:1b:21:a3:b8:33:03:d9:07:
         3b:c7:22:72:7e:47:00:7b:42:01:e3:bf:84:4a:a9:2e:7d:b2:
         ae:08:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:51 2025 by rpki-client