Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
File:                     41117c2d-5816-38a3-8985-f9c202d75f9d.roa (raw, json)
Hash identifier:          PD/G815oYV8awpVOHXSAjRveUBDEwHbkJChrgkf208w=
Subject key identifier:   B7:ED:97:65:45:16:2A:24:87:A9:8D:F9:BA:71:97:E8:C1:BF:FA:30
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5817A6506DBD3F47D750A20
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7a:65:06:db:d3:f4:7d:75:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=45e737aa-beed-44c6-938f-a0eca97f0aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:71:8f:53:6f:52:3c:e5:8e:a2:88:93:9d:
                    e9:65:b7:df:e4:db:54:0a:c0:b9:06:57:74:b0:05:
                    df:0d:b5:85:13:c5:e0:60:3e:ce:f8:3c:1f:f7:3f:
                    eb:91:c4:77:93:71:f8:23:4e:2d:e6:5d:a6:a2:fe:
                    18:37:a4:c6:81:1a:90:92:21:a3:66:91:70:80:d8:
                    ae:07:43:16:02:ec:18:62:84:be:b5:c5:58:ab:28:
                    95:fe:c3:d7:81:b1:03:85:05:d4:15:ec:05:e9:4e:
                    89:f7:29:50:83:81:20:20:29:58:4b:41:1c:3d:d0:
                    6a:98:61:27:d3:d2:da:da:a1:13:70:70:fd:14:2f:
                    97:a4:69:4a:cd:98:48:c5:4f:54:77:fe:96:97:eb:
                    5e:e8:7f:56:ea:a1:a7:64:66:ca:cb:99:3d:cd:74:
                    83:d2:9c:43:9f:68:3f:e2:bc:13:80:e1:2c:51:e6:
                    bd:0e:d6:78:24:ed:16:a6:e7:de:86:f9:7b:45:5c:
                    cd:a4:1d:d9:97:05:27:26:d9:5b:5a:20:cd:40:1b:
                    c6:6f:39:ad:5d:9e:8d:30:51:fc:b6:0e:33:3d:b3:
                    62:37:e8:69:2f:d1:15:93:34:6d:b0:a3:29:80:d2:
                    a8:54:dd:3e:72:45:6b:ff:3d:53:03:f3:99:a1:97:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:97:65:45:16:2A:24:87:A9:8D:F9:BA:71:97:E8:C1:BF:FA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:5b:3a:14:f8:8d:fc:f1:2c:ab:61:6e:fa:f6:f4:7d:15:
         9c:de:d1:76:87:37:70:42:d3:19:b2:2d:42:d7:4a:5e:f1:a3:
         e2:b4:9b:2e:ee:2e:3d:87:08:12:95:85:a4:db:ca:c4:58:ea:
         7e:dd:d3:be:01:fc:61:a1:00:7c:11:d8:66:73:f8:dd:19:71:
         a8:e0:2e:0f:fb:38:dc:ea:f9:be:1f:39:cd:9a:15:1b:a0:74:
         54:98:af:6a:23:60:b7:20:28:eb:1a:39:86:e4:aa:98:42:07:
         09:38:fc:2d:90:07:1c:34:cd:99:24:25:ce:57:41:16:af:74:
         41:6b:0f:94:b7:08:8b:b8:e5:0d:5b:52:44:61:f7:8d:40:df:
         59:1b:d0:b4:33:da:27:df:a3:d6:eb:a2:7a:ec:1e:22:bf:1f:
         05:ef:ab:c4:08:d8:81:29:18:76:2d:d4:25:5a:a3:d8:73:5d:
         4f:cb:c7:bd:d8:89:75:22:41:d7:0b:f3:da:b8:d3:e3:2c:82:
         77:b5:6c:ca:b2:00:bb:f8:c8:f6:d8:0e:4b:2f:8f:67:72:1e:
         c0:c1:20:97:7e:28:4c:c7:d1:d7:44:79:ec:da:24:bc:6b:c5:
         8e:b7:79:15:36:5a:8f:b1:87:8e:79:3b:1f:ad:1e:e0:dc:2f:
         ec:e3:2f:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXplBtvT9H11CiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDVlNzM3YWEtYmVlZC00NGM2LTkzOGYtYTBlY2E5N2YwYWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9dxj1NvUjzljqKIk53pZbff5NtUCsC5Bld0
sAXfDbWFE8XgYD7O+Dwf9z/rkcR3k3H4I04t5l2mov4YN6TGgRqQkiGjZpFwgNiu
B0MWAuwYYoS+tcVYqyiV/sPXgbEDhQXUFewF6U6J9ylQg4EgIClYS0EcPdBqmGEn
09La2qETcHD9FC+XpGlKzZhIxU9Ud/6Wl+te6H9W6qGnZGbKy5k9zXSD0pxDn2g/
4rwTgOEsUea9DtZ4JO0Wpufehvl7RVzNpB3ZlwUnJtlbWiDNQBvGbzmtXZ6NMFH8
tg4zPbNiN+hpL9EVkzRtsKMpgNKoVN0+ckVr/z1TA/OZoZdc9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLftl2VFFiokh6mN+bpxl+jBv/owMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvNDExMTdjMmQtNTgxNi0z
OGEzLTg5ODUtZjljMjAyZDc1ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEowWzoU+I388SyrYW769vR9FZze0XaHN3BC0xmyLULXSl7xo+K0my7u
Lj2HCBKVhaTbysRY6n7d074B/GGhAHwR2GZz+N0ZcajgLg/7ONzq+b4fOc2aFRug
dFSYr2ojYLcgKOsaOYbkqphCBwk4/C2QBxw0zZkkJc5XQRavdEFrD5S3CIu45Q1b
UkRh941A31kb0LQz2iffo9bronrsHiK/HwXvq8QI2IEpGHYt1CVao9hzXU/Lx73Y
iXUiQdcL89q40+Msgne1bMqyALv4yPbYDksvj2dyHsDBIJd+KEzH0ddEeezaJLxr
xY63eRU2Wo+xh455Ox+tHuDcL+zjL18=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:54 2025 by rpki-client