Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/638162ec-65a0-33cd-af86-9e82b6aa44f1.roa
File:                     638162ec-65a0-33cd-af86-9e82b6aa44f1.roa (raw, json)
Hash identifier:          zau++F9aL9nveWrgvyt0anqjnCbZLLWdOhr4jRqoUT8=
Subject key identifier:   E2:79:47:34:06:FA:F1:EF:7B:E4:8D:BD:CE:EB:68:41:95:31:0D:FC
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858471E70897C34ECF048260EE91C
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/638162ec-65a0-33cd-af86-9e82b6aa44f1.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36040
IP address blocks:        207.126.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:89:7c:34:ec:f0:48:26:0e:e9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=8d9e4282-2ba3-4ec1-9a3d-c5821dcc414c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:8c:98:91:26:31:31:1d:ef:9d:ab:e5:e6:
                    94:75:e1:f0:75:97:09:91:4e:63:9a:cf:04:c4:9b:
                    5c:30:54:93:0d:de:8a:76:35:5c:8f:5f:32:9d:96:
                    c4:b4:9d:60:fe:0c:3d:22:25:64:08:56:00:be:aa:
                    19:f9:a5:68:81:4a:6c:20:ad:3a:f6:0e:2b:2f:b0:
                    e2:80:15:a2:78:0c:8f:04:10:d8:f9:ff:39:5a:53:
                    82:31:f6:29:9d:b2:5b:94:69:8a:bd:ff:b6:9e:d2:
                    72:f3:fe:f5:94:4a:8f:58:35:b0:06:11:00:6b:1a:
                    e4:a3:6b:43:4f:f0:da:7e:82:88:13:ae:ef:8e:d4:
                    ca:72:80:64:8e:ce:8b:15:cf:4d:71:49:96:64:03:
                    94:02:e6:4e:b3:29:49:2a:0a:c8:f1:29:f3:05:17:
                    66:ca:fa:69:8b:dd:83:88:fd:78:1f:a3:e9:3b:86:
                    6a:1e:6b:d5:c9:fc:13:88:02:85:fc:c8:5d:c2:4e:
                    32:0f:79:32:dc:0f:53:f9:a6:1d:5a:86:a1:e2:69:
                    69:84:fb:49:48:37:58:3a:e8:a6:ad:18:e9:c0:e9:
                    44:dc:d5:ba:d8:8c:9a:43:81:e7:c1:80:2f:81:1e:
                    a8:4f:49:bd:7d:13:ee:c4:32:67:ff:a9:8f:6f:78:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:47:34:06:FA:F1:EF:7B:E4:8D:BD:CE:EB:68:41:95:31:0D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/638162ec-65a0-33cd-af86-9e82b6aa44f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:28:05:0a:fc:21:38:55:f5:84:40:e1:e6:df:28:85:1c:7e:
         6c:37:f3:80:84:e0:a3:c5:7a:61:32:56:21:51:e7:81:d8:e9:
         11:e3:b3:04:c9:22:70:63:88:db:7e:9a:b3:e2:f4:e6:e6:9f:
         84:08:43:c0:ba:34:de:6e:d2:a2:89:66:11:37:cb:71:d9:91:
         4f:d9:87:d3:3d:cc:04:e2:b7:29:98:b5:a3:ba:53:52:f3:54:
         0b:05:92:26:1d:21:37:bf:d0:f5:37:34:a9:09:1b:e4:fb:d7:
         04:ff:ac:38:9d:72:5a:13:37:53:c6:7e:60:9d:8c:d6:2a:e5:
         38:2a:41:2d:96:e3:41:42:a5:4b:67:19:b5:f7:ac:35:fe:e9:
         13:61:62:60:03:69:48:d1:bb:e3:63:9c:4f:99:82:a5:34:85:
         0a:6d:56:06:01:4f:1c:9c:6d:53:9d:12:35:2c:9f:b1:fe:29:
         23:64:4d:cc:c3:25:02:38:93:94:3a:4d:8a:82:f2:ee:6a:74:
         10:12:7a:52:4a:25:8a:52:5e:f6:57:21:68:92:d4:6e:eb:bd:
         cb:e3:b5:ce:ae:31:63:82:27:8c:dd:51:f6:75:e6:ca:43:66:
         11:76:c5:ba:6f:c6:58:a3:2c:7a:86:a6:1c:ad:43:d1:72:6b:
         9d:47:4a:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecIl8NOzwSCYO6RwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
OGQ5ZTQyODItMmJhMy00ZWMxLTlhM2QtYzU4MjFkY2M0MTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfOMmJEmMTEd752r5eaUdeHwdZcJkU5jms8E
xJtcMFSTDd6KdjVcj18ynZbEtJ1g/gw9IiVkCFYAvqoZ+aVogUpsIK069g4rL7Di
gBWieAyPBBDY+f85WlOCMfYpnbJblGmKvf+2ntJy8/71lEqPWDWwBhEAaxrko2tD
T/DafoKIE67vjtTKcoBkjs6LFc9NcUmWZAOUAuZOsylJKgrI8SnzBRdmyvppi92D
iP14H6PpO4ZqHmvVyfwTiAKF/Mhdwk4yD3ky3A9T+aYdWoah4mlphPtJSDdYOuim
rRjpwOlE3NW62IyaQ4HnwYAvgR6oT0m9fRPuxDJn/6mPb3g1QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJ5RzQG+vHve+SNvc7raEGVMQ38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvNjM4MTYyZWMtNjVhMC0z
M2NkLWFmODYtOWU4MmI2YWE0NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYoBQr8IThV9YRA4ebfKIUcfmw384CE4KPFemEyViFR54HY6RHjswTJ
InBjiNt+mrPi9Obmn4QIQ8C6NN5u0qKJZhE3y3HZkU/Zh9M9zATitymYtaO6U1Lz
VAsFkiYdITe/0PU3NKkJG+T71wT/rDidcloTN1PGfmCdjNYq5TgqQS2W40FCpUtn
GbX3rDX+6RNhYmADaUjRu+NjnE+ZgqU0hQptVgYBTxycbVOdEjUsn7H+KSNkTczD
JQI4k5Q6TYqC8u5qdBASelJKJYpSXvZXIWiS1G7rvcvjtc6uMWOCJ4zdUfZ15spD
ZhF2xbpvxlijLHqGphytQ9Fya51HSpQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org