Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8278ebc9-6aee-34c3-9f3c-29409e747644.roa
File:                     8278ebc9-6aee-34c3-9f3c-29409e747644.roa (raw, json)
Hash identifier:          o9oBWfcv3M44Z01L6Gt2yDcMyciffpgMRO+U5mrc2qo=
Subject key identifier:   B9:2A:0A:AB:CE:AE:7F:D7:79:CC:5A:E5:0B:D3:AF:85:A9:99:A7:96
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858455F077CE950F08F5CC429CC80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8278ebc9-6aee-34c3-9f3c-29409e747644.roa
Signing time:             Fri 29 Mar 2024 18:42:57 +0000
ROA not before:           Fri 29 Mar 2024 18:42:57 +0000
ROA not after:            Thu 27 Jun 2024 18:42:57 +0000
asID:                     36040
IP address blocks:        207.126.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:07:7c:e9:50:f0:8f:5c:c4:29:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 29 18:42:57 2024 GMT
            Not After : Jun 27 18:42:57 2024 GMT
        Subject: CN=f32ab0fd-2ab6-45a0-ab32-41c0eb5de72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:10:cb:e4:ad:92:01:4d:44:0b:69:06:f0:
                    87:59:16:99:18:e7:ca:3a:cd:cc:9a:1e:4e:47:6f:
                    7e:b1:01:92:cd:21:ee:39:05:0f:df:e3:0f:c2:ab:
                    51:e8:16:78:8a:16:b4:d6:11:af:fe:f8:92:f1:12:
                    a6:b4:23:27:34:77:72:d5:1f:08:e1:d0:d7:9a:7a:
                    a7:07:1d:00:4e:ca:27:2f:92:21:27:ad:24:58:ce:
                    01:95:7e:77:e4:b4:54:96:e0:62:31:93:db:bc:22:
                    d8:1f:98:d1:06:76:7c:0a:e0:a2:a8:ee:74:5d:ae:
                    de:55:1d:49:dc:d2:ef:a0:83:93:82:2c:df:80:0a:
                    8c:a4:a0:77:03:f8:eb:e5:29:20:ce:1e:b3:8c:82:
                    61:5f:a4:10:ad:28:7d:27:2f:14:a9:0d:2e:94:58:
                    e7:87:3e:0f:e1:80:d6:f8:de:c9:6b:28:a9:05:55:
                    52:ed:19:53:e3:48:be:37:73:40:01:00:1a:9b:e9:
                    b3:a7:57:ef:77:d0:6e:fb:0f:eb:0f:75:3e:5c:71:
                    05:78:6d:4e:d6:e0:56:da:78:b4:16:9c:aa:e0:3d:
                    d2:df:0c:4d:dd:59:31:b7:40:f4:26:c6:26:0a:13:
                    34:11:97:4c:0b:d5:c7:17:e1:33:4e:b0:01:19:22:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:0A:AB:CE:AE:7F:D7:79:CC:5A:E5:0B:D3:AF:85:A9:99:A7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/8278ebc9-6aee-34c3-9f3c-29409e747644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:53:b1:7d:2e:1c:a7:ca:03:c0:ab:a5:fa:8c:5b:43:b6:
         7c:b0:15:59:7f:f3:33:52:8f:91:89:4d:40:18:d9:f0:ea:aa:
         67:f7:ca:45:b2:dc:44:88:b1:0b:fe:61:b1:cf:87:56:83:db:
         ae:2e:af:81:76:d2:fc:ce:77:0c:fd:ad:2f:83:25:79:76:9a:
         9b:8c:0b:bc:e0:9f:4e:ff:a4:bd:d7:cf:d0:9c:d3:4d:84:5c:
         c3:55:27:5f:7c:96:60:ca:63:e0:2c:ba:76:de:d1:57:76:7b:
         40:f4:c0:25:be:a9:8b:22:8a:27:40:0e:1f:c5:78:f1:bd:32:
         6c:ae:bc:18:ef:b2:17:fb:94:5c:b4:88:26:03:45:f9:17:bb:
         b6:fc:78:81:d1:71:b8:b6:ad:77:ac:f2:1d:c6:25:83:dd:39:
         bd:d0:f8:aa:b4:ef:05:ea:d4:30:59:b6:cb:77:a3:d6:4b:9e:
         4a:59:8e:41:4b:27:fb:10:f7:e7:c9:e1:b1:fd:a1:f8:15:99:
         1c:77:e1:15:10:c9:30:60:3b:67:08:6c:b6:d0:f6:9c:76:53:
         72:5f:17:5d:08:25:46:77:75:e0:40:a2:d1:5e:ef:fd:af:6e:
         e5:c4:d0:14:fe:84:28:59:8a:0c:c2:ab:08:e1:06:7f:e8:f6:
         de:b0:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:55 2024 by rpki-client on console-fra.rpki-client.org