Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c02c9b6-e569-3472-a415-3846e07003dd.roa
File:                     9c02c9b6-e569-3472-a415-3846e07003dd.roa (raw, json)
Hash identifier:          YbQfQZbG+w28sadueCqlflevYlBPgv1UZF188g4Agzw=
Subject key identifier:   3D:72:B4:4F:1A:51:B3:E9:C0:1C:6C:4C:67:8A:9B:E9:D2:56:01:3E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848ADC61064C0FD05E7BA63F9E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c02c9b6-e569-3472-a415-3846e07003dd.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     15247
IP address blocks:        208.38.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:10:64:c0:fd:05:e7:ba:63:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=7732ed34-b060-4106-a0cb-660fcd9fe06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:7f:c1:44:4d:71:a2:29:00:d1:10:5a:eb:
                    93:10:a1:15:e9:7c:b0:c7:c1:7d:35:a7:e3:d4:c1:
                    c3:9d:fe:58:72:d5:01:9a:ed:6a:4a:e3:29:93:b4:
                    db:bd:98:d5:c4:a5:69:b3:3b:48:de:09:53:41:12:
                    ab:26:26:55:d9:0f:09:13:37:7a:67:b9:6a:4f:41:
                    c3:21:0d:d5:f6:93:9a:7f:ee:cd:63:db:be:52:6f:
                    63:3d:5c:fc:e1:02:79:cc:60:5a:38:fc:f7:ce:28:
                    ce:b5:09:f6:44:d9:56:9e:8a:0f:11:49:f8:90:d9:
                    ad:47:88:ff:21:6d:9d:28:3d:c8:bb:00:26:64:30:
                    eb:09:5c:2a:d6:44:d7:74:e7:4c:cf:75:ef:30:82:
                    cf:c8:e5:32:eb:95:80:67:48:c7:ba:8f:7b:d1:50:
                    a4:f4:e0:20:f1:33:c1:90:8b:59:37:af:1f:7a:b7:
                    c3:4a:21:1c:9e:29:7e:23:8c:63:f1:93:14:bb:84:
                    69:ac:76:25:c4:21:c7:f9:96:34:49:65:ec:1e:0f:
                    a9:0a:c4:8b:1e:be:1b:f8:d2:4f:32:e9:9c:4f:40:
                    27:a6:88:77:bb:95:a9:a6:04:97:00:05:cf:f2:34:
                    19:6c:18:bd:46:4a:67:7c:23:a0:87:a9:2a:be:d2:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:72:B4:4F:1A:51:B3:E9:C0:1C:6C:4C:67:8A:9B:E9:D2:56:01:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c02c9b6-e569-3472-a415-3846e07003dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:a9:3a:6e:88:23:a9:9d:37:39:59:cd:75:7d:ec:07:d5:
         1e:84:77:ee:83:e7:02:92:a8:79:b4:0b:37:fb:7b:c8:5d:ac:
         17:fd:d9:00:25:6c:78:a5:51:c9:56:83:ca:fa:0c:4d:8d:67:
         53:58:71:d0:2d:00:86:7d:69:d7:3c:fd:b4:a7:8e:98:a9:b8:
         71:d4:b4:67:c7:d3:cd:80:dd:75:2b:09:ef:1c:38:32:f0:df:
         57:65:df:1b:53:a1:5a:13:ac:d8:3e:e8:b3:42:dc:12:fb:06:
         37:28:c2:e6:0f:60:29:3b:82:f5:37:6b:f5:1a:18:4f:da:dc:
         6e:22:af:f1:da:79:11:a7:ac:7d:66:bf:a9:72:9b:9f:46:82:
         c8:c6:7b:f1:0a:83:ad:ac:8d:d3:05:bb:a3:90:74:5a:4b:ea:
         73:aa:1e:5f:b6:c8:97:2d:9f:47:75:92:fb:9a:e5:65:6c:12:
         69:1a:7d:99:56:f1:c8:5f:0c:d9:03:cc:51:23:60:ca:60:c3:
         20:4b:4b:19:ff:3f:a3:18:0c:5f:90:3d:6f:3e:27:9f:94:3e:
         70:04:76:43:4e:22:e8:12:bf:57:af:fa:10:dc:f3:d6:b3:e9:
         f4:a3:bc:32:e8:ec:32:b2:55:4e:1d:4b:b6:db:6c:13:03:81:
         e8:2e:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:02:48 2025 by rpki-client