Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
File:                     2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa (raw, json)
Hash identifier:          C3jXx5j7yXImEdro2kILljX1uiJWgTuNVpHrLizcHMU=
Subject key identifier:   1A:D1:61:BC:22:8C:97:EF:9B:E8:0F:BA:51:4E:83:66:F8:4D:1A:7E
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F43285848F22C639270C11E53B863D400
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     40244
IP address blocks:        94.26.84.0/23 maxlen: 23
                          2604:7c00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:63:92:70:c1:1e:53:b8:63:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=86c33770-cf16-428b-87b5-49781b3af095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:dc:a0:46:ef:a3:5a:c9:da:de:02:98:08:
                    5e:da:83:f7:54:8d:d2:80:c2:6f:c0:99:74:00:bf:
                    e4:c2:cd:3b:3b:98:b2:4d:d2:70:1f:ac:ff:d6:28:
                    42:d7:ea:c2:ca:8e:9f:86:a5:a8:a8:72:2c:48:fb:
                    f9:ee:77:45:be:a6:b4:3d:32:8c:79:7f:27:22:13:
                    87:bd:14:fa:b2:1c:1e:cf:21:65:4b:3b:08:df:58:
                    23:55:f6:e1:95:a8:cc:23:d9:33:4f:4e:39:65:fc:
                    9f:e7:82:78:7f:e2:a8:d5:f8:45:1b:17:c9:84:a8:
                    dc:69:5a:e0:52:99:0e:c8:77:5e:20:a7:46:25:fc:
                    2a:8e:14:51:a3:62:0f:77:4c:8d:3b:66:d7:8e:f2:
                    8e:73:21:64:51:59:69:ad:04:d9:75:a0:fa:bf:55:
                    f7:84:b1:19:89:9e:d0:bb:7e:2a:98:6b:57:be:61:
                    5b:f6:5b:1d:77:59:94:0f:88:5b:54:4d:44:aa:a4:
                    29:bc:40:0f:13:2a:28:57:b9:b5:83:83:a2:4b:7a:
                    e4:f7:dc:bc:ca:8c:28:5a:c5:46:44:7e:4f:84:f9:
                    1c:5f:ad:a3:20:23:98:a0:ea:39:85:c8:51:ce:4c:
                    c6:e8:22:14:6e:53:54:37:53:c2:f0:d6:ea:39:45:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D1:61:BC:22:8C:97:EF:9B:E8:0F:BA:51:4E:83:66:F8:4D:1A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/2f594fd4-774d-3a12-a9c8-cb7ae700a552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.84.0/23
                IPv6:
                  2604:7c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:f8:23:dc:ff:39:d9:82:0f:be:33:e0:7e:14:f9:e0:cd:
         e5:d6:cb:2b:ce:a7:eb:83:4b:d2:95:08:9e:b4:16:4b:58:a7:
         10:8f:90:3f:fc:16:32:92:a0:a6:f2:7c:09:08:77:4f:93:bc:
         82:cc:ef:bb:ef:27:a1:db:8d:5f:b3:cd:56:66:21:6d:c2:57:
         71:26:c1:51:4c:1e:1a:fc:c0:c8:09:9c:8c:47:a2:9f:dc:3c:
         d6:b3:e0:e7:0d:19:d8:63:ae:8c:ed:14:c0:cd:18:b6:11:44:
         b7:69:5c:ca:59:87:ec:12:ab:e0:41:82:2e:6c:41:64:01:11:
         2d:a7:ee:20:35:96:83:d7:b9:54:86:83:83:05:12:6d:38:79:
         07:d6:67:a2:27:d6:15:fa:18:b5:49:2d:8c:ff:33:f5:e6:50:
         ac:04:5a:f5:19:d8:72:63:33:8a:de:3b:2f:de:5d:9e:96:00:
         b5:85:30:02:76:63:56:62:3b:d0:57:7c:d9:54:cc:4f:85:b5:
         11:62:89:4f:17:89:dc:39:af:62:be:75:5f:9f:17:b5:b3:c2:
         bd:10:72:26:9c:53:b0:94:a5:60:9f:33:c3:76:65:81:3d:db:
         de:18:25:61:ce:69:4a:e4:13:ac:c3:04:da:47:6e:42:16:fb:
         15:02:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:00:02 2025 by rpki-client