Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
File:                     2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa (raw, json)
Hash identifier:          gec3KyoIJ+mhKoYIvxuB0BGp/Wd2vWO4sDjwp1RztBo=
Subject key identifier:   F0:F5:FC:14:D3:09:C6:9B:E9:25:A2:8E:5D:23:A9:EE:61:A9:E6:CF
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F432858473360944C02A8859896C71FA0
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     40244
IP address blocks:        94.26.84.0/23 maxlen: 23
                          2604:7c00:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:94:4c:02:a8:85:98:96:c7:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=12ab009d-f714-429a-b5e6-a801bab1c709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:71:eb:df:27:ec:c2:c5:8a:14:cc:7d:2c:
                    7e:e9:62:02:44:37:13:45:40:e1:2d:d6:68:c4:82:
                    df:f8:1a:93:22:93:8a:10:fb:87:49:94:81:7f:6e:
                    9f:25:09:16:ee:44:80:79:7f:cc:39:e5:44:79:bc:
                    8d:2e:29:ca:26:ea:4d:95:4e:1e:c7:7a:ef:44:94:
                    1c:69:c3:6b:b0:89:af:a3:5c:6a:cd:a8:97:2d:7b:
                    0b:e7:ca:19:19:89:98:c7:1a:b3:97:4b:da:88:24:
                    e3:e8:55:cf:0f:9e:8e:46:6f:d2:69:ae:61:6f:d5:
                    8b:90:1c:c4:52:46:f2:c8:9b:38:07:65:66:91:83:
                    69:ca:cf:1a:22:4f:42:ab:37:c2:d7:b3:85:c9:57:
                    39:85:06:c3:6a:b5:a5:60:47:e6:c4:64:61:fa:51:
                    48:7c:e0:6a:f9:5e:1f:15:04:8a:54:54:37:c8:9d:
                    a9:5c:10:5a:c9:68:3a:d2:c2:d8:52:f7:ec:8c:ab:
                    12:0d:44:98:7e:12:ad:8e:24:d9:af:a1:62:9a:6a:
                    a0:a1:6a:88:59:19:4e:18:23:e9:c8:7a:dd:de:2d:
                    66:15:02:a1:0d:bd:8b:c6:7a:e4:87:98:98:14:82:
                    e3:63:41:d2:09:a3:a3:d0:79:09:fb:fe:60:75:f0:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F5:FC:14:D3:09:C6:9B:E9:25:A2:8E:5D:23:A9:EE:61:A9:E6:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.84.0/23
                IPv6:
                  2604:7c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:25:14:bd:8a:e9:73:31:57:89:cc:14:50:ec:83:98:9e:6f:
         9d:f5:c6:17:5b:b2:59:36:55:ce:93:7c:1c:77:b4:72:01:8b:
         7d:a3:1e:c3:b3:7d:93:89:5a:3f:13:84:28:a6:08:96:fe:b0:
         aa:5f:ba:39:91:b7:2e:bb:0b:a3:5d:f2:20:8e:24:0b:4a:c9:
         cd:f1:21:e8:b3:4c:26:8e:f0:32:b3:04:d9:de:3e:d0:53:81:
         10:b0:da:54:a7:da:11:f7:1d:b1:a4:5d:21:56:94:b3:bb:bf:
         bf:d8:4a:9d:e7:2e:72:4e:fc:22:e7:8e:a9:96:09:4e:28:1c:
         8c:75:30:e8:e3:68:16:bd:e0:12:66:fb:c7:eb:0e:dd:bc:c0:
         1c:1a:2c:86:1f:5a:4c:56:3b:37:15:68:12:31:34:db:33:fa:
         37:e6:bb:79:e7:dd:80:0e:d2:df:94:72:ed:82:6e:08:56:57:
         1f:63:9e:50:cb:ed:21:29:0d:3b:d4:20:df:b8:40:c8:c1:52:
         47:85:f9:0c:34:b4:5a:72:e3:82:33:9a:74:7a:aa:75:41:23:
         2d:aa:2f:c5:d6:b2:5e:d9:23:b9:d1:d4:21:38:d5:54:13:a2:
         46:08:c5:24:e6:80:2b:4b:12:fd:67:1a:3e:c4:51:2b:9f:8d:
         fd:d1:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org