Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3b7f0f6a-9e18-34d5-ac45-599420cb69d5.roa
File:                     3b7f0f6a-9e18-34d5-ac45-599420cb69d5.roa (raw, json)
Hash identifier:          bPTouTa5L32DFYrOI9MviV/LPTZ8YkqU8YBDTxsBOTw=
Subject key identifier:   AE:E9:D3:F9:63:70:42:9C:1D:9B:F8:EB:E8:6F:E2:49:11:FC:50:FC
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858471E70947D8ABDCE3A91EAB480
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3b7f0f6a-9e18-34d5-ac45-599420cb69d5.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36040
IP address blocks:        207.126.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:94:7d:8a:bd:ce:3a:91:ea:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=5b84f3be-21bb-4d31-bd45-c75a3369998a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:d3:68:5c:aa:02:84:d4:2d:f2:8e:1f:d6:
                    c7:25:fc:de:73:41:11:11:e2:2c:fb:53:26:49:4a:
                    ef:dd:3a:9b:70:36:5e:e6:b1:11:a1:52:14:04:0e:
                    cc:7e:92:f0:5e:f8:69:33:f4:f7:95:13:1b:55:6f:
                    ab:2b:6e:69:40:ea:83:46:96:6d:22:44:fd:48:51:
                    82:ed:86:59:83:11:94:40:2f:d4:9c:48:0e:10:f9:
                    43:a6:e5:c7:ac:6f:b0:a3:25:63:0a:8d:78:36:24:
                    02:07:ab:31:4b:50:01:a4:62:db:18:ec:cd:9d:f1:
                    07:88:88:d3:6f:c7:40:b8:99:83:a4:02:f3:08:22:
                    02:74:1e:ff:e6:02:ed:2f:ba:9c:a4:f1:bc:f9:db:
                    c5:9c:4c:d9:a8:ae:4a:57:62:40:55:3e:db:a1:40:
                    33:c8:61:9f:d1:1f:6a:d2:45:4c:8b:d2:46:76:a0:
                    0f:b7:33:b2:84:fb:65:3a:a7:f2:ac:f6:14:6d:e2:
                    26:ac:cd:16:0e:0a:61:f7:c0:4f:41:c4:b7:47:1c:
                    f5:ee:4f:58:44:2a:23:73:8b:44:e6:84:ae:0e:c8:
                    95:52:ee:84:b4:ab:7b:31:76:3d:00:16:3b:c3:93:
                    62:da:d9:63:32:45:cb:05:55:b7:ed:f2:ce:fa:e8:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:D3:F9:63:70:42:9C:1D:9B:F8:EB:E8:6F:E2:49:11:FC:50:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3b7f0f6a-9e18-34d5-ac45-599420cb69d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:42:97:4b:e9:fd:e2:ae:39:d3:70:9e:f4:e2:51:83:68:
         a6:2a:b9:ce:80:c2:3d:8c:09:9c:7c:bf:7c:e8:e4:7f:a3:28:
         f9:11:2b:0a:1f:2c:c0:7e:78:3d:ba:9e:0f:95:88:f7:bf:dc:
         56:31:3d:95:b0:69:fc:8b:bf:1a:e0:1f:03:d2:4e:1e:ac:1a:
         1b:d0:dd:d4:83:b3:5b:62:7f:f8:5c:ab:9b:5a:9b:9e:20:35:
         78:88:3d:21:bc:ba:e0:4f:64:90:ca:6a:d2:a8:c3:d4:92:41:
         da:e9:3a:a0:99:27:a8:89:2e:2d:f4:96:04:4d:83:79:60:fe:
         1c:29:4e:1f:85:b9:ce:31:42:1b:77:fa:8c:97:f2:ae:30:a2:
         1d:1c:15:4a:41:d0:50:e6:7f:4c:a7:fc:40:4c:b4:f8:a4:c8:
         5d:56:e0:55:b7:98:99:e7:c7:af:56:5a:b5:b4:7e:69:b0:ff:
         44:b9:99:aa:e1:6c:3d:bb:01:4d:75:39:80:66:5a:5e:a8:45:
         37:93:de:06:cb:9d:cc:7e:b8:66:1c:01:2c:9c:c2:27:ae:f9:
         06:4d:81:d6:5d:d2:d1:61:e0:21:12:36:cc:d1:55:de:5b:29:
         7f:07:23:d6:bd:b6:ad:7b:15:f5:f3:c3:5b:34:cf:9d:81:8b:
         b3:22:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:21 2024 by rpki-client on console-fra.rpki-client.org