Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa
File:                     8a28e187-25ad-32ca-abd7-210aa7b3f414.roa (raw, json)
Hash identifier:          Ij1X6hrt7L1CDaRTqKUzE0QFgU1YZvf2QkOCx2IR+Zw=
Subject key identifier:   2B:33:B9:BD:6D:17:71:46:05:57:09:CB:37:A1:E6:CC:D6:F4:A4:D3
Certificate issuer:       /CN=126268d9-7906-418d-863b-642221ce925f
Certificate serial:       010D0C9F432858474585EF7AD0B5820985330D00
Authority key identifier: E1:A0:45:D6:CB:94:70:C5:40:1F:9C:F1:AE:64:42:26:5E:8A:C4:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     25680
IP address blocks:        205.132.40.0/22 maxlen: 22
                          205.132.40.0/24 maxlen: 24
                          205.132.41.0/24 maxlen: 24
                          205.132.42.0/24 maxlen: 24
                          205.132.43.0/24 maxlen: 24
                          205.132.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/126268d9-7906-418d-863b-642221ce925f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/126268d9-7906-418d-863b-642221ce925f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ef:7a:d0:b5:82:09:85:33:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126268d9-7906-418d-863b-642221ce925f
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=5a354433-9291-4a08-ae88-b7eb3bacefa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0d:e9:ec:ab:a8:3e:d1:a9:31:60:c2:d0:2b:
                    e9:ec:0a:4c:f4:5c:c7:4a:84:31:d1:77:bc:f9:7e:
                    ee:a9:69:fa:34:b1:93:df:40:d9:d5:23:bb:43:57:
                    f7:ea:47:10:d2:52:88:67:10:11:06:b6:82:24:41:
                    68:ac:c4:92:fb:43:27:ee:24:cd:aa:a7:7d:bb:77:
                    5a:7b:0b:c3:67:d8:eb:71:41:5c:4d:f3:9e:1d:1c:
                    21:6b:4b:26:1a:2e:a0:53:dc:f7:06:52:5a:0a:d5:
                    f8:07:c4:a2:1f:24:a8:c1:39:13:a7:f0:89:53:6f:
                    c3:37:00:b0:c5:87:0d:af:fa:b7:5e:d0:de:65:f0:
                    0f:6f:8d:78:69:2b:c0:a1:82:77:17:07:f0:6d:21:
                    f3:fd:2d:85:24:46:35:09:a7:11:5f:fc:6d:44:3c:
                    f8:5f:7f:69:96:9e:38:b7:d2:15:3f:07:7e:c9:bb:
                    c6:49:e1:ff:08:a4:d0:17:0c:a9:d2:9f:78:21:74:
                    b0:75:54:4c:40:88:69:ce:1f:74:14:6d:ab:95:75:
                    2a:5c:5a:96:31:15:f6:e0:d0:f1:11:7b:49:a8:21:
                    77:74:33:57:57:08:0a:f1:16:88:ba:de:6e:78:86:
                    8d:d4:d8:75:e4:c0:e4:6c:fa:a2:db:b3:c2:77:df:
                    94:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:B9:BD:6D:17:71:46:05:57:09:CB:37:A1:E6:CC:D6:F4:A4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/126268d9-7906-418d-863b-642221ce925f.crl

            X509v3 Authority Key Identifier:
                keyid:E1:A0:45:D6:CB:94:70:C5:40:1F:9C:F1:AE:64:42:26:5E:8A:C4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.40.0-205.132.44.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:dd:c6:19:da:b8:01:49:a3:42:46:d9:bb:04:26:0d:90:
         d3:8e:af:dc:0a:cc:74:fd:29:9f:c4:8a:5b:7d:0b:48:d7:fa:
         81:75:5c:6d:76:aa:25:39:8e:79:32:49:56:bd:ad:b6:ac:69:
         35:e2:04:bf:42:1b:59:db:a1:c7:3d:cd:96:40:b6:61:32:4b:
         be:0d:a3:23:94:3f:17:06:47:2c:db:e9:c6:b4:b2:a8:2c:67:
         87:bc:85:d3:ca:98:25:d9:5f:93:b6:65:6a:1f:62:0c:a9:82:
         b5:fd:c7:31:c1:ea:61:24:fc:e4:22:9b:73:86:b2:20:df:94:
         b0:b5:69:3e:24:8e:b2:e1:d6:81:d4:00:1f:ea:f2:fd:ac:8e:
         a0:c8:c3:0c:78:b2:e3:18:37:e9:cb:c2:57:22:34:f9:cb:d6:
         e4:6f:27:91:43:1a:d5:5c:89:94:b7:f0:9f:42:c3:c0:85:d0:
         aa:c1:22:01:e9:3a:9a:e8:f6:b4:b5:92:be:90:5e:47:f3:9b:
         c6:05:a5:e1:5f:33:40:f2:82:97:a7:a7:20:92:77:d5:45:de:
         01:8f:72:a4:ca:05:3c:10:25:d7:29:bc:4a:b9:5e:ef:c7:e9:
         28:ad:ab:6b:4e:0c:af:1d:17:f7:a7:92:6e:49:9d:d9:9b:cc:
         27:9e:65:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:35 2024 by rpki-client on console-fra.rpki-client.org