Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
File:                     26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa (raw, json)
Hash identifier:          EEDMzP9FPJkoguSVy7lSj08xX2QLo608f9u1CsiqKI0=
Subject key identifier:   E8:41:08:98:45:5C:70:EE:86:C2:30:E6:65:F7:B2:79:A0:27:8D:DA
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848159FF203FBA294060027F1C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     12129
IP address blocks:        74.126.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f2:03:fb:a2:94:06:00:27:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=6f36f3f2-0e67-4a7e-a731-a9417451776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:3f:26:2f:fb:53:77:83:34:fc:9d:61:c6:
                    ac:e5:e5:b7:99:a1:70:c4:44:5a:0b:53:d8:e5:df:
                    6b:2b:01:72:6f:f5:75:d0:b6:a6:90:e0:15:fb:5b:
                    cb:8e:a0:0c:07:85:02:cf:48:3c:03:c3:12:7a:34:
                    79:06:4b:f3:e7:7a:01:f1:33:93:85:32:69:02:bc:
                    c0:33:57:28:f9:ed:fd:02:d3:21:de:12:a7:f6:44:
                    2d:d0:fb:d1:3b:4b:e4:cf:de:8c:d1:26:61:18:dc:
                    34:db:68:cd:87:00:54:67:24:17:de:a8:90:90:7a:
                    17:1e:f4:f1:b5:80:f9:17:e0:35:52:ce:ee:d1:c1:
                    4e:dc:e3:bc:25:7f:1e:a1:63:0f:78:64:4f:7d:28:
                    8d:82:73:03:4a:e8:6d:28:3c:69:c1:21:84:84:dd:
                    6c:92:a6:fe:c1:9a:b3:1b:78:e2:3d:02:9f:75:40:
                    44:71:6a:22:3d:19:9b:46:86:b8:81:3e:16:63:8a:
                    76:f8:0a:c3:cc:d2:6b:6d:d5:94:24:fe:52:4a:90:
                    37:c3:46:0e:1b:0f:c0:e4:62:66:69:a3:d6:a2:fa:
                    51:06:66:f5:a0:20:ed:a8:11:7a:84:91:fe:e9:16:
                    e7:e0:12:9e:18:38:54:10:33:28:33:af:84:43:ab:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:41:08:98:45:5C:70:EE:86:C2:30:E6:65:F7:B2:79:A0:27:8D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/26324ab1-7a63-3fe0-bf28-e1f51e7312c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:0a:dc:9b:b8:2c:69:33:22:ae:ad:f9:a7:19:79:51:c1:41:
         1e:e3:3e:b8:f7:e2:1d:04:f0:ab:6e:9f:1b:01:29:e5:79:b0:
         f0:78:1f:5d:4c:7e:95:e4:70:e8:0c:b8:4c:bb:65:e1:b0:9a:
         62:b1:10:bc:8b:9d:b6:99:94:4d:bf:9d:e8:d7:23:f3:6b:79:
         9f:5a:d4:30:0b:7d:9e:b5:bb:b8:2f:50:9b:60:f2:c0:be:36:
         81:9a:df:e0:76:da:3a:03:bc:13:53:92:99:df:27:23:39:c9:
         e0:a5:cb:72:02:ed:26:35:5d:9e:ce:74:65:f1:72:7e:e3:e6:
         e1:85:a2:97:6f:d9:ee:e5:f8:11:ba:5f:0e:69:a5:aa:82:15:
         c6:2d:62:ee:39:35:d4:d8:5e:31:db:f4:f2:bd:4d:1b:92:65:
         76:4a:fc:79:41:58:ec:f7:ab:e8:95:f8:26:75:cd:19:93:dc:
         aa:38:28:42:de:4a:cf:d2:c1:56:27:28:ad:c7:2f:06:a9:20:
         66:eb:89:7f:f2:8b:d8:08:58:da:5e:89:e0:a6:d5:17:1e:ff:
         84:5a:67:45:68:80:85:d3:f1:74:30:47:d6:7c:e0:e9:2e:3d:
         aa:23:be:bd:50:34:3b:83:42:d7:6c:69:ad:b5:e5:5f:06:32:
         2c:9f:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:26 2025 by rpki-client