Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa
File:                     422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa (raw, json)
Hash identifier:          k4UfKkLIiXihE5CT+J7n6h5awkm9liAI6oElCDMICTw=
Subject key identifier:   67:D1:6D:84:DF:43:15:77:C0:34:CB:1A:82:80:DD:C8:C8:27:53:04
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5820CAD5BB5A5860A97ABE0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:0c:ad:5b:b5:a5:86:0a:97:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=eac4b469-6f08-4458-8ed3-a87228124ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:a9:57:0e:3a:e2:6b:b7:30:1d:ce:36:9c:
                    03:ab:76:5d:b0:93:56:b0:ad:10:12:b6:e0:cf:a7:
                    18:56:94:03:5b:13:aa:d1:ea:2e:9d:9c:07:05:bb:
                    9e:23:66:af:63:f1:90:9e:fd:19:f7:ad:0e:05:56:
                    5c:83:06:a1:a7:ce:5c:d7:99:11:fe:a2:92:d9:ed:
                    35:d5:6a:7c:c7:3e:45:ee:26:cf:2b:2a:f2:93:24:
                    58:ea:e8:a4:81:39:e6:e4:64:d4:94:bd:1a:3f:76:
                    f9:d7:ce:c2:88:45:9d:f6:89:56:1c:2b:26:fe:99:
                    a5:65:ae:6a:1e:b4:1c:a9:70:d5:23:e6:b3:28:24:
                    24:24:cb:d4:e5:d2:6f:68:20:44:d1:3c:76:ad:95:
                    3b:6f:f4:ca:15:0c:ed:6d:ba:38:71:fd:0e:47:aa:
                    17:96:f3:b5:c0:60:9e:27:6e:14:92:f7:28:46:06:
                    b3:9c:29:8c:73:c0:32:93:ba:23:c1:92:73:99:60:
                    ee:b3:d0:58:69:8d:67:57:e4:35:60:41:46:43:b1:
                    0d:b6:a3:ff:52:69:71:11:ee:cb:98:66:41:da:b5:
                    b1:0d:f0:d9:23:53:fa:88:00:78:49:d2:36:28:89:
                    8e:cd:48:de:dd:5a:91:13:55:3d:83:ba:91:f1:a7:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:6D:84:DF:43:15:77:C0:34:CB:1A:82:80:DD:C8:C8:27:53:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:34:0d:9e:00:cf:47:84:19:b9:87:6e:eb:fc:03:41:0b:
         e5:97:b4:60:fd:f0:70:f7:b0:04:83:a5:45:ab:2f:87:e3:63:
         bd:65:b3:e0:aa:ad:34:15:e2:0f:84:0d:57:c1:0f:d6:f9:b4:
         95:97:b2:91:ab:6b:c9:62:e0:40:41:7c:2a:d3:ea:08:a8:83:
         a8:87:69:bf:88:c9:30:ba:71:28:b5:f3:3e:61:ec:4d:96:42:
         39:60:4a:e8:d2:87:79:3a:88:1f:92:54:b8:0b:dd:b9:e3:ac:
         a9:2a:07:96:33:f3:a5:e8:01:bd:6b:c8:f7:33:5b:74:2b:4a:
         da:f6:12:99:9c:6c:e8:98:7a:05:ab:cc:e8:d6:a0:ee:98:29:
         b8:d9:96:6d:fb:b9:70:ba:9f:9e:4f:69:81:1e:e6:e9:a1:73:
         5a:e9:14:18:30:83:57:be:28:b7:73:23:43:3c:c9:a6:29:2c:
         0c:51:1b:88:ed:db:e0:0e:b9:ef:25:f8:92:97:60:ef:69:97:
         9f:98:e8:cd:d4:02:18:64:f1:e4:c2:26:81:b1:34:8b:fe:10:
         0e:ce:68:c0:b2:3b:b6:26:8a:b1:23:ae:36:4e:2c:88:ff:26:
         bb:da:78:4b:1a:93:4a:46:48:db:fd:79:6d:19:fa:a6:86:64:
         28:ee:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:50:04 2025 by rpki-client