Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/26b53dee-927f-3932-9072-92163ff78f26.roa
File:                     26b53dee-927f-3932-9072-92163ff78f26.roa (raw, json)
Hash identifier:          otBPMgJwtZ5POuXLV/vpmEiLbDFMs0eVTt3qgP5O6RI=
Subject key identifier:   58:80:5B:75:E7:14:7B:8F:FA:3D:CB:06:69:28:FC:DB:C9:F1:58:08
Certificate issuer:       /CN=b520faac-792a-4f70-8f4c-be06a5992ae1
Certificate serial:       010D0C9F43285849AA4F71F792AC9F6F98EFC440
Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/26b53dee-927f-3932-9072-92163ff78f26.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     26842
IP address blocks:        199.120.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:71:f7:92:ac:9f:6f:98:ef:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=679b9ed6-7007-4917-b6fe-3ff46e992912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:b8:7c:d2:8c:83:da:51:93:77:eb:8a:ef:
                    62:7d:9f:a8:83:98:bb:a0:e9:de:8a:5d:41:3f:61:
                    94:03:47:15:a5:63:bc:28:b4:24:86:d8:26:32:36:
                    19:5e:58:9c:f2:21:46:3f:59:d2:92:d8:5d:83:5c:
                    1f:60:d5:17:11:19:ac:60:b8:f3:0d:58:35:8b:37:
                    20:e3:6c:d4:98:2a:e4:e6:a9:8f:dd:24:7e:b3:63:
                    a4:a7:2a:06:a7:aa:68:7e:f1:6d:40:07:fe:5a:58:
                    f4:e7:0b:6f:ba:7c:df:cd:12:ea:a5:bf:71:2c:94:
                    6a:70:ff:2e:4c:25:c3:41:2f:27:d9:94:ae:d0:9d:
                    af:01:5f:8c:26:e9:c0:5b:1d:bc:8e:f8:98:5c:37:
                    fc:a3:b4:42:44:04:49:b8:d3:b2:8f:59:28:d1:68:
                    26:79:c3:1e:ac:4e:3c:66:0e:2c:73:b2:a3:69:24:
                    ba:db:9e:ba:12:cf:5b:1a:cb:a2:9b:05:5e:61:b7:
                    b8:23:87:ae:43:21:e2:2b:0e:ab:ff:1c:2f:40:92:
                    1d:51:da:17:ac:ff:34:28:27:49:72:89:f7:f3:94:
                    26:7e:b4:2a:af:89:fe:68:9e:5b:66:70:1f:5e:d5:
                    b3:5d:36:f7:78:18:6c:78:f1:80:fd:cd:27:28:a0:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:80:5B:75:E7:14:7B:8F:FA:3D:CB:06:69:28:FC:DB:C9:F1:58:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/26b53dee-927f-3932-9072-92163ff78f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl

            X509v3 Authority Key Identifier:
                keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:2c:2f:d5:94:92:cd:00:cb:e0:53:78:aa:23:6c:13:4e:
         f5:03:9c:66:57:ec:97:ce:2f:60:fb:07:a4:b2:1d:95:bf:cc:
         18:8b:38:f3:b1:53:a4:ed:da:f2:99:68:ac:a8:a1:ee:b1:bf:
         ab:9a:e7:50:17:21:24:82:62:b8:e2:97:a7:a2:df:7f:e7:ac:
         1a:e1:b0:b1:60:6d:5e:99:f4:63:04:e0:1b:e2:38:e2:05:8e:
         25:66:85:84:4d:7a:90:69:3c:5a:6f:7c:8c:02:7c:da:ba:08:
         27:18:8f:5b:b4:1c:64:b4:f0:0b:4e:71:43:06:da:9c:3d:a0:
         95:a2:e0:97:87:ec:bd:8b:ff:44:5f:40:e9:d7:d5:cc:92:43:
         44:c3:38:16:e7:2c:d9:9c:84:90:f0:f2:8b:51:d3:2a:19:db:
         c6:94:ed:39:8b:94:f3:d9:17:cc:aa:e9:ca:46:8b:fd:d7:6a:
         4c:fa:e7:fa:c1:50:2e:44:45:e5:81:1e:d2:fb:79:43:fc:95:
         99:9b:c3:63:b2:b7:2b:98:ed:08:d6:75:ae:db:8b:36:d0:88:
         92:f9:98:1e:7b:77:7a:61:52:08:fd:0b:b4:fb:19:8b:bd:7a:
         59:05:59:b2:f8:69:74:82:ed:51:d2:e7:8b:7c:1e:a2:d0:76:
         0e:0d:7d:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3H3kqyfb5jvxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky
YWUxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk
Njc5YjllZDYtNzAwNy00OTE3LWI2ZmUtM2ZmNDZlOTkyOTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/G4fNKMg9pRk3friu9ifZ+og5i7oOneil1B
P2GUA0cVpWO8KLQkhtgmMjYZXlic8iFGP1nSkthdg1wfYNUXERmsYLjzDVg1izcg
42zUmCrk5qmP3SR+s2OkpyoGp6pofvFtQAf+Wlj05wtvunzfzRLqpb9xLJRqcP8u
TCXDQS8n2ZSu0J2vAV+MJunAWx28jviYXDf8o7RCRARJuNOyj1ko0WgmecMerE48
Zg4sc7KjaSS62566Es9bGsuimwVeYbe4I4euQyHiKw6r/xwvQJIdUdoXrP80KCdJ
con385QmfrQqr4n+aJ5bZnAfXtWzXTb3eBhsePGA/c0nKKBu6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiAW3XnFHuP+j3LBmko/NvJ8VgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw
ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvMjZiNTNkZWUtOTI3Zi0z
OTMyLTkwNzItOTIxNjNmZjc4ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm
NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5
MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2
YTU5OTJhZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3jyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtmLC/VlJLNAMvgU3iqI2wTTvUDnGZX7JfOL2D7B6SyHZW/zBiLOPOx
U6Tt2vKZaKyooe6xv6ua51AXISSCYrjil6ei33/nrBrhsLFgbV6Z9GME4BviOOIF
jiVmhYRNepBpPFpvfIwCfNq6CCcYj1u0HGS08AtOcUMG2pw9oJWi4JeH7L2L/0Rf
QOnX1cySQ0TDOBbnLNmchJDw8otR0yoZ28aU7TmLlPPZF8yq6cpGi/3Xakz65/rB
UC5EReWBHtL7eUP8lZmbw2OytyuY7QjWda7bizbQiJL5mB57d3phUgj9C7T7GYu9
elkFWbL4aXSC7VHS54t8HqLQdg4NfQQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:30:16 2025 by rpki-client