Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
File:                     630c9798-0269-3e7f-bafe-971b39e013ea.roa (raw, json)
Hash identifier:          2Ga9BO9EPS00Zzij/kiKGmmRC9TgzLqzz5Qad7M4EiY=
Subject key identifier:   82:C6:8C:7F:56:40:A4:F7:17:8B:8A:FC:10:34:DA:16:81:91:26:08
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584565583A6F1AF66396E63D2340
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
Signing time:             Mon 01 Apr 2024 01:00:26 +0000
ROA not before:           Mon 01 Apr 2024 01:00:26 +0000
ROA not after:            Sun 30 Jun 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:58:3a:6f:1a:f6:63:96:e6:3d:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Apr  1 01:00:26 2024 GMT
            Not After : Jun 30 01:00:26 2024 GMT
        Subject: CN=e5ce4e7a-cecd-4cc8-84ea-4f282fcb8285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:16:32:b3:3d:1e:2d:03:8e:cd:37:bf:b3:
                    5b:da:c9:1d:a7:05:af:8c:41:48:66:56:c1:26:de:
                    f8:28:71:da:c3:46:84:4b:2e:7e:f4:e1:8f:59:27:
                    10:80:42:34:03:50:75:e7:f7:99:29:f4:fb:53:15:
                    65:63:94:19:b0:09:3c:39:38:30:da:53:5a:41:81:
                    3a:f5:4e:a6:46:ca:61:bb:4c:9c:39:1a:3c:0f:14:
                    d3:46:92:b7:8d:3d:db:1d:6b:12:4b:aa:e1:72:15:
                    be:dc:a7:4e:65:d0:10:86:4c:1b:4a:7a:6f:51:88:
                    b6:d5:d8:2b:79:9b:ae:1c:ea:bc:70:78:44:73:49:
                    3b:7a:f9:e8:99:b9:76:29:e5:e4:ad:2e:66:21:8a:
                    39:1f:eb:33:60:2b:e6:5c:17:e4:86:40:ac:17:d8:
                    3a:5b:47:83:62:2f:24:e8:78:e9:1a:82:39:ad:5a:
                    37:0f:a6:e4:e3:82:65:5d:52:1c:ae:b6:73:f3:c1:
                    b6:ff:33:73:1c:03:f5:bc:ce:43:0b:2c:37:44:39:
                    bb:da:10:5d:c5:b4:7f:ca:b2:13:98:27:22:64:4e:
                    46:0a:5d:f4:fa:f4:6d:94:06:0c:14:0e:d1:27:3b:
                    ed:36:7c:d2:19:d2:44:70:e5:d2:46:c3:25:81:f5:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:8C:7F:56:40:A4:F7:17:8B:8A:FC:10:34:DA:16:81:91:26:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:e3:5e:26:31:69:b9:b8:b8:5c:20:ad:cd:c9:7b:b8:97:
         35:0c:5a:53:08:42:63:be:7f:8c:e4:80:7e:46:29:77:4b:85:
         14:4a:49:bc:c0:65:25:95:95:71:1e:13:82:4c:7c:fa:1d:3f:
         de:1f:c9:ba:96:90:dc:05:4b:04:d9:97:5e:75:e0:77:64:49:
         89:71:a3:e3:4c:a1:51:83:84:4d:24:2d:2e:71:07:d4:dc:cd:
         a9:3c:7d:8d:04:b5:50:5b:28:d8:0f:89:bb:fa:b2:8e:59:60:
         1e:6c:d6:7a:6d:c3:54:97:c4:6e:46:da:e4:68:af:6b:21:33:
         ac:50:97:77:fb:69:c6:b7:f3:65:de:43:52:6b:5b:15:a5:c1:
         d3:2e:b3:93:e9:3c:f7:cb:ab:c9:0f:e3:51:69:f5:a3:3a:be:
         8b:10:71:75:e4:f9:7b:59:cf:b3:7e:2e:8c:50:4e:c5:1d:83:
         8b:99:65:86:d2:c8:75:1c:c6:ff:a9:01:a2:d6:1a:7d:5d:9b:
         d2:25:42:68:f4:34:25:d5:2d:7e:4f:3f:e7:14:f8:19:e1:aa:
         cf:7b:10:1a:43:d7:b2:4d:c8:b2:8f:9f:8b:7e:76:62:ca:be:
         5d:98:53:bf:b8:e9:e9:8f:4b:c3:20:64:d4:88:4d:5e:01:d8:
         82:57:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:57 2024 by rpki-client on console-ams.rpki-client.org