Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa
File:                     7d571b5c-c655-3add-b808-37a65ec369b5.roa (raw, json)
Hash identifier:          +/ftmoc6GcTlkQCvzbuXu0e1fGl4G7zbFz53qTpOFvE=
Subject key identifier:   3A:DB:06:CB:5F:F3:55:74:4D:2F:C2:A7:7B:F6:EA:7A:87:3D:51:99
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C58171A96ADF979CC47F0D40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:71:a9:6a:df:97:9c:c4:7f:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5383f6a1-87cd-40c3-aeef-b7eae80e183a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:41:60:ef:07:e3:07:c3:b9:b4:af:f6:78:
                    51:bf:cb:df:81:a3:38:8b:97:99:bf:fc:89:db:60:
                    06:9b:65:64:51:1c:bf:ae:34:cd:d8:3c:ce:82:57:
                    57:dc:ec:b0:8e:f6:e7:cc:27:ec:fb:4c:a6:6f:42:
                    3b:7c:fa:f0:0e:ca:b3:b6:88:18:88:0a:c3:5b:f4:
                    8e:1f:f4:2a:d1:41:33:d2:fd:86:85:cb:f7:23:a3:
                    4d:06:21:a0:af:d1:02:8c:fb:a9:35:de:85:63:79:
                    f1:e1:78:45:3c:1c:1d:86:44:cf:9c:45:d6:5f:60:
                    84:ae:ca:c3:fe:6f:af:0a:99:3a:b3:e4:c9:1c:d2:
                    46:64:2b:6e:5e:ee:de:16:7a:ee:2d:98:ba:dd:a0:
                    0b:56:a1:70:38:56:76:47:4c:00:93:f3:93:14:d0:
                    3d:df:2f:59:8b:76:6b:6f:ed:26:3b:ab:d3:99:f5:
                    5e:58:ad:12:43:c8:01:b2:88:bd:67:32:ca:03:9c:
                    89:20:c6:ab:8c:74:75:f0:1b:59:4c:7a:e7:c3:67:
                    2d:86:7d:46:a0:f4:dc:9c:32:7c:37:cc:03:c2:4f:
                    e0:d6:83:82:7e:e8:44:4c:8e:22:89:b0:7b:84:d5:
                    ad:c4:9d:f0:6d:5e:fc:95:f5:e7:a9:f2:8f:f0:9f:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:06:CB:5F:F3:55:74:4D:2F:C2:A7:7B:F6:EA:7A:87:3D:51:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:8b:24:ca:a3:1e:13:3f:4b:d7:ea:d9:fa:7e:1c:98:81:
         f7:fb:fb:9d:b0:c6:0d:ff:55:61:d6:92:28:51:7e:05:b9:6c:
         b9:3d:91:2c:92:56:3d:6c:bd:d0:3b:1d:8f:44:34:27:12:f2:
         a1:d9:c1:8e:9f:7b:e2:28:4f:10:d0:f8:71:65:fe:82:9c:d2:
         8d:36:ad:02:c1:b7:a2:45:6d:71:c3:dd:c4:f4:f0:92:00:5f:
         b7:5a:8e:6c:18:54:f0:d9:42:91:55:2b:23:63:35:a3:f0:6f:
         0b:5c:fa:f9:b6:d9:73:11:97:5c:73:89:ce:83:eb:7b:ef:aa:
         e9:7b:f1:5d:22:b6:90:be:9b:c1:f2:6a:33:a4:72:e9:bc:d2:
         6b:ec:d1:72:29:55:1d:2e:b8:b0:24:52:8d:ef:79:4d:1b:94:
         15:cc:01:9c:c1:f6:19:8f:fc:71:f2:04:48:cb:5a:b3:ae:b2:
         5f:3f:2b:08:da:bf:d0:af:7d:86:17:26:b5:d9:c4:1e:12:71:
         3b:24:5f:6b:93:d3:37:48:e7:cd:d6:71:31:d0:c3:72:15:42:
         fe:8c:55:33:b0:64:47:78:ba:46:7e:b3:b7:b9:2d:a9:d6:fc:
         62:55:4c:52:04:7a:29:da:4a:45:4b:90:14:1f:25:c6:b6:29:
         bc:7e:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:56 2025 by rpki-client