Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
File:                     1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa (raw, json)
Hash identifier:          gmpwNkUFp5ShRrCboq/Kmzy7hYWpBfhiRKQlzL8l1ik=
Subject key identifier:   78:A5:5B:48:76:92:8E:7D:1C:71:3C:1C:8D:84:95:5E:A4:DF:AC:54
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C581FE7D52730870EBBF1B80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     32381
IP address blocks:        207.126.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fe:7d:52:73:08:70:eb:bf:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=1b326f2c-7dce-49f5-a61c-458b725b9e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:1a:7a:9a:01:9c:99:46:50:ef:c6:55:12:
                    e4:6d:7e:5d:2d:85:2a:7b:5f:a3:91:14:00:6d:1f:
                    88:56:6d:f6:5c:e3:94:c5:9d:45:06:73:fa:19:1a:
                    aa:91:05:cc:fe:f1:50:41:4a:a9:85:9d:4a:c6:68:
                    42:9c:c9:c6:2e:02:31:dd:a5:b6:b6:77:45:57:1d:
                    10:e0:f2:2e:91:21:69:bd:70:1d:0c:0a:9b:17:75:
                    21:7d:0c:ae:78:33:61:2e:c3:81:56:96:d3:e3:12:
                    96:fe:61:77:9b:93:51:4f:a3:d9:41:86:bb:ed:db:
                    a2:1d:a2:fe:c0:67:8d:39:8c:25:77:26:b1:c2:85:
                    c0:8b:4c:6f:ea:5c:45:b2:88:9b:71:42:1c:d9:1d:
                    6e:c7:28:77:d7:4f:56:2f:55:54:54:c6:22:40:75:
                    47:0b:0a:1e:26:25:6f:97:f5:30:9c:c2:62:3c:a3:
                    1e:15:32:78:9f:cb:2d:82:0a:36:18:5c:9d:7c:72:
                    1f:59:04:ed:93:67:d2:c5:45:b2:94:34:06:63:99:
                    00:8d:de:8f:ac:88:6f:d7:c8:26:d0:d3:ff:c6:7f:
                    8e:80:99:c1:90:28:44:81:23:cb:43:ec:c7:9b:ff:
                    f4:07:75:4d:80:bb:e7:a2:68:49:41:04:e0:45:c6:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:5B:48:76:92:8E:7D:1C:71:3C:1C:8D:84:95:5E:A4:DF:AC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:c0:e9:e7:35:a0:c0:5d:10:c3:3f:b8:fd:e7:04:33:51:
         7f:47:79:02:35:1c:c3:d9:e2:7d:9b:40:7a:c2:e5:83:18:85:
         f2:38:91:9b:57:a3:42:4c:33:51:55:87:11:33:a0:5f:65:51:
         f5:b5:c6:93:69:3d:62:c0:6a:81:7c:68:67:f3:a4:71:33:8a:
         c6:ec:2e:61:aa:68:94:ec:90:23:bd:66:69:d9:8b:7e:a6:7b:
         e8:03:b1:db:44:dc:6f:3c:e7:d3:14:cc:65:cb:e3:fe:ab:93:
         57:12:88:65:ee:a9:fe:f0:79:9c:db:d2:28:b4:9b:67:68:f6:
         cb:09:09:28:c6:40:6c:bf:83:74:21:a8:fa:06:21:cc:5d:48:
         df:1c:d7:bf:4a:8a:d9:92:45:f6:6d:07:df:b5:a8:ba:13:ac:
         d5:05:2d:4a:0b:89:b5:74:7d:c7:24:8c:41:f9:1c:15:aa:a8:
         45:b7:cc:77:63:93:95:3e:4e:08:61:78:13:bf:54:f4:07:05:
         df:87:0e:6f:a6:f9:bb:51:69:59:4b:ac:a4:cd:07:9e:e7:ef:
         49:78:55:91:d6:38:fd:6b:58:0b:84:6c:45:ef:ee:a0:43:6e:
         35:ba:c2:5f:17:f5:3f:f5:f3:06:f0:0b:0d:b1:fa:51:c6:0f:
         c3:25:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:59:34 2025 by rpki-client