Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
File:                     26cfd816-2d86-3517-87c3-b35ccc8a1995.roa (raw, json)
Hash identifier:          F1duH/AToAzjHZNVD2ztUfzoTiF9awnnFM0Dyq+xxWQ=
Subject key identifier:   A4:D2:8F:BB:EB:06:20:3F:16:DC:45:20:D0:3E:28:43:B8:EB:AA:6A
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F43285848394C8ED9E52DC992DE82F9FC
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa
Signing time:             Mon 16 Dec 2024 08:42:13 +0000
ROA not before:           Mon 16 Dec 2024 08:42:13 +0000
ROA not after:            Sun 16 Mar 2025 07:42:13 +0000
asID:                     54535
IP address blocks:        156.37.200.0/24 maxlen: 24
                          156.37.201.0/24 maxlen: 24
                          156.37.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:4c:8e:d9:e5:2d:c9:92:de:82:f9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Dec 16 08:42:13 2024 GMT
            Not After : Mar 16 07:42:13 2025 GMT
        Subject: CN=494e98f3-da51-407d-a9f9-a7e2d255ab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:64:22:54:77:83:64:cf:79:7c:75:49:7a:
                    f1:c4:39:43:8a:5e:64:bd:5e:e5:89:88:71:cf:bf:
                    db:64:6d:ba:52:77:87:26:55:70:3e:39:68:bd:9b:
                    95:00:31:17:9a:68:35:26:22:84:bd:d6:c4:9a:af:
                    65:cd:da:bb:36:8d:81:16:08:b3:74:0c:5c:7a:a0:
                    42:c5:ec:39:55:53:9b:18:83:2e:95:73:b8:dd:9c:
                    52:b4:f8:89:20:70:d5:15:3d:0f:93:6e:e7:91:49:
                    b6:b4:63:74:a3:6b:37:9a:37:32:91:e9:77:b2:8b:
                    c1:ae:8b:ac:de:14:48:6a:86:d0:82:a8:10:22:68:
                    32:16:4b:f0:03:c1:07:ae:4c:1f:17:96:ad:31:00:
                    85:8f:5f:7e:85:2e:01:3c:35:05:5b:86:34:01:45:
                    0e:74:b9:c3:8c:a5:e2:67:5e:b1:34:71:2a:26:c3:
                    86:81:fb:3e:d2:71:1c:cb:80:95:24:74:10:c8:af:
                    04:0f:4d:28:f3:a8:a3:b9:7d:41:63:e4:70:2c:b7:
                    14:3b:b3:0b:9f:e5:79:1b:98:e8:86:1e:08:b5:fa:
                    30:22:ca:fe:b6:60:0f:f1:af:92:75:1d:5a:22:84:
                    38:f3:02:22:ed:b2:a1:04:d7:7b:13:72:1b:25:cf:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:8F:BB:EB:06:20:3F:16:DC:45:20:D0:3E:28:43:B8:EB:AA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/26cfd816-2d86-3517-87c3-b35ccc8a1995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.37.200.0/23
                  156.37.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:9f:b1:40:d2:5f:a1:e9:e8:27:37:63:9c:ad:83:2d:20:
         61:b4:24:d3:27:ce:62:03:c2:a0:ac:03:54:5f:d7:36:63:4c:
         fc:dd:42:1e:26:a2:cf:e4:5e:65:71:57:e4:ed:86:50:62:21:
         e2:1f:73:f1:f4:1f:9a:88:92:2d:01:7b:b8:4f:a6:53:03:af:
         9e:29:63:fc:95:c3:77:7a:57:af:b5:d8:f5:f1:51:9c:a0:0c:
         b0:9f:e8:4a:12:b5:e0:99:14:f0:4d:ce:f0:a4:83:ad:c2:67:
         7b:71:cb:b5:73:06:5d:25:fa:f5:1a:74:e7:97:99:aa:bd:d0:
         ac:b1:eb:ea:e9:27:8e:c0:a1:e0:10:81:e9:48:c4:03:a6:77:
         f1:27:6a:0e:c2:a1:24:ac:b2:92:c8:ce:d1:0e:79:bb:cb:4a:
         61:10:5e:18:ad:28:1a:40:ea:e2:8c:8d:18:d6:99:27:68:61:
         82:fc:18:2c:e1:cc:96:81:1f:99:80:1f:be:62:5d:a0:48:c0:
         ed:1b:fc:60:67:6d:ba:41:8b:96:26:0f:6e:61:e1:d2:67:c4:
         4c:81:ca:1e:46:bf:e0:11:2e:47:db:bd:a0:30:a1:32:34:e2:
         9d:a2:a9:a5:8a:19:bd:e6:b2:f2:e5:21:1c:88:d7:b6:4a:7b:
         56:73:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 18:45:10 2024 by rpki-client on console-ams.rpki-client.org