Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3a99634-076e-3e21-8130-f5d542c3d0f5.roa
File:                     d3a99634-076e-3e21-8130-f5d542c3d0f5.roa (raw, json)
Hash identifier:          CXhMIZjMEcxeZ3mrt0hRYNVkW8tl9yeDOqbnYtg+gL8=
Subject key identifier:   E9:AB:34:A1:6C:B9:C7:DC:16:AF:74:41:79:EE:6B:B9:9E:DE:A9:53
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858455F055B6504051AB1F7387040
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3a99634-076e-3e21-8130-f5d542c3d0f5.roa
Signing time:             Fri 29 Mar 2024 18:38:40 +0000
ROA not before:           Fri 29 Mar 2024 18:38:40 +0000
ROA not after:            Thu 27 Jun 2024 18:38:40 +0000
asID:                     36040
IP address blocks:        207.126.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:05:5b:65:04:05:1a:b1:f7:38:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 29 18:38:40 2024 GMT
            Not After : Jun 27 18:38:40 2024 GMT
        Subject: CN=263667f9-3ecb-41a4-b6ec-9bdc30f648f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:e9:47:c5:bf:06:68:a0:ff:25:73:d7:4b:
                    fd:40:cd:85:52:fc:d9:49:27:13:b0:b5:3e:e8:81:
                    17:15:f4:69:2b:97:e9:05:9e:33:1d:97:b8:bb:b9:
                    77:be:4a:b4:68:2e:86:fa:c1:27:ed:ae:22:1b:f4:
                    28:49:9d:16:d0:c2:36:73:f7:38:b9:9a:10:51:ef:
                    81:10:f0:92:df:0e:61:6d:5d:48:e7:ce:d8:28:b8:
                    4e:0a:3f:a4:df:f5:bd:9a:8d:f0:7c:28:c3:5d:e8:
                    ed:7c:25:60:1a:d9:e7:c3:3d:94:69:01:f3:f0:c4:
                    f2:5c:ce:3a:1d:c5:c3:27:ba:a5:a9:90:f5:c2:80:
                    b7:4c:88:ae:7b:88:85:7f:23:58:c5:22:f0:93:39:
                    cc:29:d1:9a:aa:58:8f:73:0d:78:47:19:15:15:3a:
                    b0:2a:88:2d:b3:75:14:80:0e:8c:3e:45:05:ff:59:
                    f3:fe:d7:01:27:5e:59:96:eb:39:e6:c5:2f:e4:93:
                    94:98:08:57:dd:12:bd:a8:f1:f6:81:82:f4:94:bf:
                    f5:83:6e:08:d9:3c:91:91:37:90:5e:b8:97:25:64:
                    bb:7b:b1:50:5f:1e:cd:ed:3e:7b:29:50:c4:f6:bb:
                    ed:72:c2:a4:dc:df:c3:e7:cb:92:c0:5f:26:fc:c7:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:34:A1:6C:B9:C7:DC:16:AF:74:41:79:EE:6B:B9:9E:DE:A9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3a99634-076e-3e21-8130-f5d542c3d0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:07:25:96:6f:2a:9d:78:ef:d6:4f:dc:c9:ed:11:d0:86:d2:
         a8:a3:f7:68:0e:c6:ed:1d:91:55:41:97:9d:08:08:3e:2e:b0:
         af:1f:8c:16:0d:fd:74:11:79:c2:51:35:db:0a:68:f3:57:c4:
         77:fc:bc:fe:59:6f:6d:5e:1a:a0:1e:72:d2:ea:b8:87:73:89:
         57:a6:b7:51:a0:08:60:f4:1d:63:bb:98:ab:45:16:45:e4:43:
         4b:78:99:49:aa:65:c1:f4:4a:3a:96:c2:f3:3c:fa:fd:1f:10:
         b8:d2:62:23:83:78:5e:15:d4:4b:73:50:b4:5c:df:a7:6d:a1:
         e0:03:7b:78:0f:12:c4:74:17:fa:c1:06:8f:3a:cf:e6:56:fa:
         ec:d0:6c:9e:ba:2d:86:61:a0:b7:91:83:ed:8e:f5:3a:6b:4d:
         a6:75:d7:4b:66:37:21:89:a3:09:a1:c9:28:ac:85:b8:ff:c7:
         28:55:8f:c4:1e:1c:66:0d:ea:72:ac:7e:de:70:b6:1d:d9:ff:
         1c:37:67:1e:57:28:8e:29:b5:1e:eb:27:f1:10:f9:5e:60:e7:
         ac:a1:40:82:e4:e1:ad:b8:77:88:e9:6d:ba:02:34:ad:f1:20:
         d6:b3:47:93:74:22:4c:56:48:fa:ef:c4:3b:51:7e:c3:34:29:
         46:89:1b:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfBVtlBAUasfc4cEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDMyOTE4Mzg0MFoXDTI0MDYyNzE4Mzg0MFowLzEtMCsGA1UEAxMk
MjYzNjY3ZjktM2VjYi00MWE0LWI2ZWMtOWJkYzMwZjY0OGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudHpR8W/Bmig/yVz10v9QM2FUvzZSScTsLU+
6IEXFfRpK5fpBZ4zHZe4u7l3vkq0aC6G+sEn7a4iG/QoSZ0W0MI2c/c4uZoQUe+B
EPCS3w5hbV1I587YKLhOCj+k3/W9mo3wfCjDXejtfCVgGtnnwz2UaQHz8MTyXM46
HcXDJ7qlqZD1woC3TIiue4iFfyNYxSLwkznMKdGaqliPcw14RxkVFTqwKogts3UU
gA6MPkUF/1nz/tcBJ15Zlus55sUv5JOUmAhX3RK9qPH2gYL0lL/1g24I2TyRkTeQ
XriXJWS7e7FQXx7N7T57KVDE9rvtcsKk3N/D58uSwF8m/MeiLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmrNKFsucfcFq90QXnua7me3qlTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZDNhOTk2MzQtMDc2ZS0z
ZTIxLTgxMzAtZjVkNTQyYzNkMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMHJZZvKp1479ZP3MntEdCG0qij92gOxu0dkVVBl50ICD4usK8fjBYN
/XQRecJRNdsKaPNXxHf8vP5Zb21eGqAectLquIdziVemt1GgCGD0HWO7mKtFFkXk
Q0t4mUmqZcH0SjqWwvM8+v0fELjSYiODeF4V1EtzULRc36dtoeADe3gPEsR0F/rB
Bo86z+ZW+uzQbJ66LYZhoLeRg+2O9TprTaZ110tmNyGJowmhySishbj/xyhVj8Qe
HGYN6nKsft5wth3Z/xw3Zx5XKI4ptR7rJ/EQ+V5g56yhQILk4a24d4jpbboCNK3x
INazR5N0IkxWSPrvxDtRfsM0KUaJG6Y=
-----END CERTIFICATE-----
Generated at Sun May 19 07:42:37 2024 by rpki-client on console-fra.rpki-client.org