Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa
File:                     428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa (raw, json)
Hash identifier:          Wxf/O7PrDF/EPCOKP+Vlp/L+oC8wJbnkfTKyp7k8Mxo=
Subject key identifier:   BB:CC:D8:FF:9A:75:E8:48:E4:70:81:CF:F0:B1:CD:14:1C:24:79:FE
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5817B9E5DC26AC97A044CC0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7b:9e:5d:c2:6a:c9:7a:04:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=876b3c66-725f-4d51-bee1-1cd804172b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:97:5c:cc:2e:10:df:63:24:ac:3a:2f:5b:
                    a9:b9:7f:48:5b:bf:86:7e:a7:df:76:b4:75:92:d4:
                    0e:ff:f2:43:3c:b4:51:58:58:f2:a2:63:79:4d:42:
                    80:b6:81:52:b4:09:57:52:af:7e:a7:c0:a0:df:01:
                    78:d8:26:1d:8c:ed:af:b7:5c:40:fe:ec:6d:38:a1:
                    05:b8:7c:ff:31:6e:86:ae:30:49:e8:9d:60:2e:2d:
                    10:18:bc:80:15:b2:6b:5e:31:ff:c9:91:7f:30:e4:
                    b4:0a:7d:41:7d:32:b6:52:47:14:af:c4:28:de:03:
                    2c:42:91:2f:4b:84:35:8d:25:54:2e:97:db:95:0f:
                    92:9b:3f:7b:1a:2d:4d:ae:4f:92:5b:03:eb:3f:40:
                    3a:2a:b2:35:5d:fb:e4:dc:ab:00:dc:42:cc:04:f0:
                    0b:04:a2:57:91:d9:55:6b:18:4b:72:c1:5f:d4:96:
                    69:6c:69:88:ba:cf:d1:e6:17:c3:ce:ea:a9:fd:15:
                    47:03:e0:a6:3d:a1:f6:24:36:ec:b5:da:01:9d:34:
                    cb:ac:f2:7b:9c:f7:d9:18:f8:a7:85:46:ff:e6:2e:
                    c8:ff:71:89:96:de:d6:25:b7:97:9e:e4:43:59:7e:
                    e5:57:b3:12:ef:e7:45:76:64:1e:52:55:cc:e6:a1:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:D8:FF:9A:75:E8:48:E4:70:81:CF:F0:B1:CD:14:1C:24:79:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/428b3030-37a9-3db2-8fa7-1fdc5ef30970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:5f:d9:2d:af:42:ae:fc:af:ed:cf:da:90:15:aa:77:ab:
         37:59:35:de:50:54:b8:34:c6:7f:4e:e2:42:4e:c8:bb:4e:92:
         f0:12:b0:27:8a:d5:d1:9e:b2:34:c3:41:bc:72:3a:d1:7e:4f:
         e5:16:87:c3:af:73:89:f9:ba:bb:15:9e:a7:77:fc:d1:9a:53:
         51:b3:e3:0a:f1:ee:30:27:3c:5a:a4:3e:63:1b:47:0c:c7:b3:
         61:48:ae:35:7f:82:7d:a2:50:c3:8a:b8:52:90:2a:e2:df:2c:
         a5:95:2f:df:88:df:43:c9:0a:7b:26:79:3b:65:ba:a5:50:13:
         7e:98:e0:c5:7f:52:e4:df:ea:e2:d7:54:8e:d6:bb:e0:d7:a8:
         c8:e9:01:eb:24:b5:ec:cb:3d:4c:e3:b2:f5:2c:67:ca:57:cc:
         32:c9:93:a8:0a:e4:8a:96:cf:19:97:33:c9:0f:65:3d:17:b4:
         a3:55:28:76:f6:9d:79:72:a5:87:67:d0:74:69:57:71:f0:5a:
         77:d9:1f:e4:ca:f4:48:a8:68:f2:4b:d7:cf:44:11:4c:25:f7:
         7e:72:bd:e3:d5:fa:ae:7f:a3:a4:24:f4:af:1b:5a:d3:f0:28:
         a8:36:75:36:72:0e:18:ef:75:1e:a8:3c:cc:c6:16:b8:41:c1:
         8c:88:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:49 2025 by rpki-client