Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
File:                     26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa (raw, json)
Hash identifier:          xdlyi6IgnV/K6UDQpMS91M/8Cc7TevUgmlYWFrhGJj0=
Subject key identifier:   9C:85:26:8A:3F:DF:C1:3B:A2:98:9D:90:AF:96:65:69:5F:71:17:7B
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848F65BE224336F14BB96556E00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     12129
IP address blocks:        74.126.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e2:24:33:6f:14:bb:96:55:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=4ac0b8ed-11b0-4cf0-aa39-2629a3c51c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:36:c1:a3:3b:9c:99:d4:22:43:ab:58:bb:
                    8a:e2:b1:ba:78:8f:a4:a6:58:1a:1b:b5:5f:55:3a:
                    ce:fc:5f:78:b3:d2:35:ed:0c:ba:4b:97:21:b6:5d:
                    41:97:bb:54:d7:7f:5e:bf:cd:c6:6c:1d:f4:6c:10:
                    b2:d5:e8:42:72:d7:a3:9c:06:37:66:04:8a:8b:cf:
                    0e:0d:20:5b:75:97:6a:23:67:64:30:39:49:bc:8a:
                    b4:2a:64:8a:80:a4:a9:8d:b8:3c:54:76:39:6d:06:
                    c3:47:5f:70:d1:6c:e3:2a:8c:52:c6:04:52:c6:1f:
                    e1:2d:07:9c:41:9c:90:19:09:44:20:06:e2:c8:b9:
                    60:00:54:e2:5a:a6:2f:e5:f5:dc:de:0c:b8:8b:7d:
                    fd:67:40:09:81:0e:d1:63:5d:78:f8:4a:76:50:44:
                    55:bb:87:8c:ff:98:e6:e8:73:2e:de:a0:40:e5:d3:
                    9e:78:ad:66:de:50:53:e0:42:9f:ae:c4:0d:ea:65:
                    32:f3:92:77:20:7b:fa:d2:bc:fd:75:c7:96:91:17:
                    8f:b1:30:ab:91:33:92:47:be:f6:72:5e:e2:59:1d:
                    9f:c9:4b:11:40:4f:46:91:5a:84:6e:48:f5:ec:78:
                    42:0b:f8:c3:8e:7e:14:a7:61:d1:9b:f4:e0:1f:db:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:26:8A:3F:DF:C1:3B:A2:98:9D:90:AF:96:65:69:5F:71:17:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:c3:4a:d1:81:13:23:0c:82:4a:9d:eb:b1:a1:93:4e:47:
         0c:7b:de:df:17:53:e0:24:29:6b:c7:ed:6f:60:aa:f4:c3:24:
         82:7e:a1:d2:91:f3:2e:6c:b3:64:31:89:62:4d:1f:b2:bd:ec:
         39:63:dc:38:1a:28:1f:27:e1:60:c5:e9:da:53:c7:05:43:14:
         7d:2a:58:ab:ed:16:54:aa:4f:0e:d0:a7:69:1f:1d:16:7e:2b:
         b6:20:24:c6:5d:a1:c9:8b:e4:dc:7d:d0:60:be:32:3c:cd:72:
         06:97:af:9c:bd:06:80:4a:f7:c5:eb:c7:bc:6e:36:bb:e1:2f:
         e6:2b:03:11:d9:96:f2:13:ae:e8:90:06:f3:86:4d:92:df:28:
         aa:bf:0d:d3:95:7b:ac:68:e5:a0:17:1e:8c:39:7f:ec:f9:5b:
         ed:49:ad:35:a8:62:2a:5e:31:ef:a7:78:a9:db:25:78:eb:b0:
         de:cb:ea:5a:f0:00:62:b3:6b:ea:cb:cd:6f:4f:6a:0e:a2:d1:
         a6:23:56:44:d1:df:0b:8f:3f:00:9d:b2:a2:3b:cf:30:6a:14:
         4f:9a:ec:19:c6:65:91:c0:27:b1:4f:8c:92:9c:2a:3b:e8:99:
         a6:e7:a4:bd:46:3a:32:9a:15:f4:bd:da:9e:a1:3d:20:a2:64:
         af:f8:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:25:01 2025 by rpki-client