Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac26e68-24de-3e9e-b058-3984c2632a46.roa
File:                     1ac26e68-24de-3e9e-b058-3984c2632a46.roa (raw, json)
Hash identifier:          K/DZEckgK6q75CXPmwKhvgMHbt5yYjVu9yQch+AZ8o0=
Subject key identifier:   5B:11:45:90:39:E5:FB:A3:0B:92:DA:80:11:DF:FC:4E:A3:7B:16:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B965D9C520DAE72262A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac26e68-24de-3e9e-b058-3984c2632a46.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        108.26.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:96:5d:9c:52:0d:ae:72:26:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=249455c8-93cd-480b-9050-cf56f8adf813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:93:cf:d6:2c:f4:ab:c6:ed:22:ce:32:52:
                    c7:dd:60:f1:f9:ec:24:cf:64:17:9d:bc:96:ff:3b:
                    b1:2d:23:8b:00:c0:85:1a:77:ac:a6:85:38:f8:f6:
                    09:fa:d2:aa:16:65:1a:cc:51:cc:df:05:e5:69:0f:
                    76:63:49:0e:e9:45:fb:13:de:f2:c9:ee:41:71:61:
                    b5:af:00:45:e9:64:cf:62:3a:e1:df:3d:e4:20:64:
                    22:66:bf:95:38:31:ca:8a:90:0a:cd:fd:03:17:a4:
                    5e:ac:5c:6e:cf:48:38:21:99:b0:5d:90:cc:08:c6:
                    12:3a:25:0f:e6:32:d7:1c:dd:93:15:0b:23:4f:bd:
                    40:88:23:da:b0:50:b5:b3:55:50:2b:73:f4:0d:ee:
                    55:f1:c7:35:d8:08:16:67:89:ae:1f:ae:7b:53:03:
                    d4:80:2e:a9:7d:35:f4:89:a3:fc:4e:71:4a:75:71:
                    f2:b5:f9:2b:9a:9a:56:77:42:e0:2a:b1:90:df:5c:
                    be:dc:91:fe:5b:88:ab:30:98:18:a6:17:ad:78:33:
                    b7:c9:93:aa:9b:c9:d3:2d:da:7c:47:a4:4b:4d:96:
                    47:86:7b:c6:67:c5:5a:29:66:bb:1b:64:c3:60:e0:
                    c0:1f:44:5b:21:ae:2c:eb:8e:f2:1f:06:d1:5f:b3:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:45:90:39:E5:FB:A3:0B:92:DA:80:11:DF:FC:4E:A3:7B:16:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac26e68-24de-3e9e-b058-3984c2632a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.26.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:89:f7:ca:0f:84:7d:a1:94:49:78:8e:b5:68:2a:d7:36:cd:
         a1:82:2b:b5:dc:81:69:58:a1:34:dd:25:1b:46:cc:a9:de:54:
         69:7e:34:61:28:e1:3b:69:bd:04:89:a5:21:69:71:bd:e7:57:
         69:74:3b:0f:dd:27:e8:9a:b7:9c:8b:d6:69:09:9f:b4:b9:bc:
         65:79:f2:c1:14:c4:16:7a:15:b8:52:b8:dc:bb:b5:a8:fe:3d:
         7a:fa:a0:fe:76:b5:7f:a0:93:32:e7:a9:91:71:ea:a9:07:e1:
         74:a5:ee:3b:b1:d1:0d:ef:3c:d1:b5:9b:f6:8a:1d:21:4b:6e:
         bb:a9:b9:f2:8e:64:be:55:e9:22:16:4d:e7:48:99:92:54:0b:
         ba:52:be:92:14:8d:cd:37:c0:f9:77:0a:41:e7:b5:07:08:06:
         89:35:fe:1d:78:8b:dc:e5:a9:01:d7:bc:14:20:80:a8:68:43:
         d7:55:a1:99:dd:fa:ef:3c:30:8a:bc:4e:95:df:4d:d6:09:a0:
         49:8a:5c:e4:ef:34:f0:f1:67:a8:51:f3:6d:3c:53:0e:bb:0c:
         5f:b8:d2:19:f9:37:8b:e3:3e:47:61:24:40:b8:d9:ef:4b:3e:
         b9:4a:85:30:9a:fc:91:1c:bd:f9:83:bf:27:9f:9b:ec:77:5f:
         5f:3a:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:19 2024 by rpki-client on console-fra.rpki-client.org