Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5b8c0e53-1dbd-36f2-81bb-7b4ddab22fe8.roa
File:                     5b8c0e53-1dbd-36f2-81bb-7b4ddab22fe8.roa (raw, json)
Hash identifier:          EJk95TMPtfAR9BOn3NNwAkXtly0z8LXJXNuL7chRg50=
Subject key identifier:   3D:41:2D:CE:F6:C7:22:60:1A:AA:78:25:9B:B9:E4:E0:E6:1F:43:EB
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62B4570BD6DF07E90B422E0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5b8c0e53-1dbd-36f2-81bb-7b4ddab22fe8.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        207.126.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:45:70:bd:6d:f0:7e:90:b4:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=83965d11-a786-4743-b238-c6e09d0a2c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:6f:85:a0:39:ca:d3:07:93:a4:70:b1:06:
                    a8:c8:09:a0:7e:bf:e6:a5:ef:66:7f:3b:e2:e0:58:
                    f6:1e:29:7f:dd:c7:da:20:a1:a6:6d:02:af:bf:5d:
                    c3:0b:3c:dd:57:89:9a:a0:6b:29:c9:c0:9b:cf:71:
                    c2:52:68:45:e5:06:7f:3e:e3:42:70:90:45:f8:b9:
                    a9:8a:a4:19:c8:4e:0b:c6:bc:2a:13:fd:b5:93:9b:
                    61:46:bc:05:d9:fa:05:a1:d7:cc:36:f6:69:ff:79:
                    5e:76:90:87:b3:9a:6f:83:1a:4e:ba:c5:5b:c1:36:
                    15:78:96:19:04:a6:f7:3f:03:03:c8:c5:7d:fe:c9:
                    47:d1:5a:2a:85:31:50:59:d8:ef:5c:7f:98:e1:32:
                    82:79:88:f6:fc:13:1d:81:fa:4e:38:31:10:db:bd:
                    de:89:7b:ea:4e:77:7b:7d:94:0c:f6:01:2e:eb:f9:
                    19:d6:87:69:49:0d:8f:88:48:1d:e6:41:94:52:52:
                    a3:04:28:2f:0a:f0:f4:d0:0e:8e:80:da:9b:86:87:
                    2c:e8:0a:fa:09:da:35:15:8e:87:06:5c:79:d8:b7:
                    9b:93:d2:a1:c1:2b:7d:5d:57:28:51:1b:54:16:d3:
                    c5:7d:93:f4:0d:9b:2b:b7:12:2b:c9:6d:d8:e4:60:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:2D:CE:F6:C7:22:60:1A:AA:78:25:9B:B9:E4:E0:E6:1F:43:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5b8c0e53-1dbd-36f2-81bb-7b4ddab22fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:24:72:91:14:44:88:22:02:ea:75:60:9a:fc:a9:fd:ed:
         b2:b5:b6:ec:80:af:2e:57:05:ed:83:24:bf:fc:cd:d8:c7:dc:
         d7:29:c7:4b:8a:d1:fc:4c:24:69:87:99:d9:5f:f2:e7:bf:fb:
         da:27:5c:ef:59:90:56:0d:ca:d0:a5:80:39:21:06:aa:f1:fb:
         46:fc:5c:dc:5f:a4:d4:3d:8d:26:80:b6:dd:9b:55:ce:bd:27:
         bb:70:b9:31:f6:e0:20:13:38:eb:4d:be:52:7b:fe:4f:f5:41:
         00:55:51:55:36:3a:18:ff:b4:78:aa:50:1a:f7:62:db:b8:91:
         bc:a9:78:ca:db:9c:21:cb:ae:95:20:f9:13:b6:60:e4:6e:14:
         fa:ee:9b:76:ae:1a:ef:ea:da:64:05:6d:4e:db:9d:61:a5:21:
         40:bd:40:60:98:ba:a6:80:1e:8b:8e:b8:0e:e3:e3:bd:93:3a:
         99:1e:d6:64:c8:a1:f4:28:4f:7f:b0:87:c5:fe:6e:d7:e6:56:
         98:27:3f:fd:e9:80:cb:fa:e6:6b:85:e2:80:db:d8:7f:df:90:
         01:0b:73:2a:fb:63:f3:cd:3f:d3:35:79:28:af:c5:96:b6:32:
         f0:b2:3f:13:4c:bb:36:7d:ea:4e:b3:86:a0:ea:eb:2e:74:89:
         a6:c1:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:21 2024 by rpki-client on console-fra.rpki-client.org