Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
File:                     81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa (raw, json)
Hash identifier:          sqEqmf+fvx0Tloflarf+BU84n4ojipOWUhiTj9TNPVk=
Subject key identifier:   6E:2B:84:DD:38:B2:C7:2D:77:78:AA:D7:87:0B:FC:9B:CD:A8:0F:C2
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285845462577B56B378A35D9A79380
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
Signing time:             Wed 20 Mar 2024 20:48:09 +0000
ROA not before:           Wed 20 Mar 2024 20:48:09 +0000
ROA not after:            Tue 18 Jun 2024 20:48:09 +0000
asID:                     32381
IP address blocks:        207.126.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:77:b5:6b:37:8a:35:d9:a7:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 20 20:48:09 2024 GMT
            Not After : Jun 18 20:48:09 2024 GMT
        Subject: CN=953ea869-8701-4549-accf-a3b7aa0c85d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:40:e3:da:ca:16:4a:3c:6f:71:1f:53:4e:
                    3e:df:31:e4:39:77:ee:79:eb:bc:5a:5e:bb:fe:2c:
                    9a:93:24:db:8c:bd:7b:7b:cc:6c:cf:ec:bb:21:7b:
                    a2:a2:9f:88:a6:14:1d:d1:39:c5:77:5d:db:dd:ed:
                    9f:00:60:3f:e4:42:e5:ba:17:e9:11:a8:fc:be:4f:
                    63:43:3c:b0:d0:fe:b8:7d:33:d1:af:b0:7e:29:84:
                    df:8a:8c:81:be:b5:a3:0f:8a:6b:be:50:05:34:58:
                    7d:06:c9:0b:7f:54:20:ee:28:38:fe:28:b7:1d:f5:
                    61:f8:b9:39:4d:64:41:bb:ca:83:9c:03:d3:b5:40:
                    cb:46:1f:63:3c:64:61:bb:ae:b4:42:91:10:3b:5a:
                    d4:d7:9d:a4:9e:61:26:33:c8:34:b3:a6:04:4c:d5:
                    d6:40:1e:91:cb:74:0b:7b:2e:01:f7:8c:9d:ae:6a:
                    03:16:da:67:9b:ce:86:64:5f:10:ac:80:a1:06:23:
                    ee:b0:1b:0c:b5:e4:d0:4c:49:3f:03:07:e8:8f:fc:
                    b6:fa:df:c6:48:ce:9a:1d:70:6a:ac:60:6d:fb:dd:
                    42:5b:0e:25:8c:ff:71:b6:96:46:88:21:38:fb:98:
                    90:f5:b2:5e:bf:8f:62:b4:05:44:47:e4:29:de:fa:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:84:DD:38:B2:C7:2D:77:78:AA:D7:87:0B:FC:9B:CD:A8:0F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:bf:c0:13:07:98:aa:45:7e:df:9d:b2:30:38:ad:77:ef:
         62:b9:1c:43:aa:03:7d:af:aa:67:62:fa:ab:22:5d:03:50:cf:
         d8:f5:9d:3f:d1:c9:3b:89:87:2f:e5:c8:4a:13:ab:a8:c6:01:
         3e:c6:93:5c:bd:ed:15:89:bf:45:27:84:5f:bf:f6:71:3a:6f:
         5d:fe:db:d6:e4:a7:2b:a4:49:28:fa:c2:77:07:f9:39:5c:5c:
         c2:2a:6f:64:17:31:4c:80:59:8b:57:4c:8f:da:df:07:06:d0:
         6d:f2:d7:1f:99:b8:3f:aa:31:3e:b4:bc:0b:7a:0e:e2:30:5b:
         29:6d:93:b9:33:ae:40:19:6e:d9:3c:9f:7d:73:f2:46:23:23:
         05:79:04:58:e2:2e:fa:ad:c9:78:d1:ca:47:f6:03:e5:b6:e6:
         44:65:76:3d:bb:de:90:a9:cd:da:c1:99:5a:6a:d8:f2:64:2b:
         41:4e:ad:31:49:c6:07:a3:55:5b:11:06:17:df:ac:7a:c7:17:
         8f:6b:e2:4b:c7:63:06:c1:f8:32:eb:3c:b8:d9:60:ce:c1:07:
         53:e8:80:b5:e8:05:14:67:7d:ab:f9:11:4b:d9:6f:a8:6a:c7:
         7e:75:34:88:04:77:f1:95:5f:9c:d7:0a:b8:4c:10:9f:f0:cd:
         d2:f8:f7:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJXe1azeKNdmnk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDMyMDIwNDgwOVoXDTI0MDYxODIwNDgwOVowLzEtMCsGA1UEAxMk
OTUzZWE4NjktODcwMS00NTQ5LWFjY2YtYTNiN2FhMGM4NWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWVA49rKFko8b3EfU04+3zHkOXfueeu8Wl67
/iyakyTbjL17e8xsz+y7IXuiop+IphQd0TnFd13b3e2fAGA/5ELluhfpEaj8vk9j
Qzyw0P64fTPRr7B+KYTfioyBvrWjD4prvlAFNFh9BskLf1Qg7ig4/ii3HfVh+Lk5
TWRBu8qDnAPTtUDLRh9jPGRhu660QpEQO1rU152knmEmM8g0s6YETNXWQB6Ry3QL
ey4B94ydrmoDFtpnm86GZF8QrIChBiPusBsMteTQTEk/Awfoj/y2+t/GSM6aHXBq
rGBt+91CWw4ljP9xtpZGiCE4+5iQ9bJev49itAVER+Qp3vrSpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4rhN04ssctd3iq14cL/JvNqA/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvODFmOWU4NWMtMmY2ZC0z
NjJjLWI1ZjAtNmNhYjAyYTY1NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqDv8ATB5iqRX7fnbIwOK1372K5HEOqA32vqmdi+qsiXQNQz9j1nT/R
yTuJhy/lyEoTq6jGAT7Gk1y97RWJv0UnhF+/9nE6b13+29bkpyukSSj6wncH+Tlc
XMIqb2QXMUyAWYtXTI/a3wcG0G3y1x+ZuD+qMT60vAt6DuIwWyltk7kzrkAZbtk8
n31z8kYjIwV5BFjiLvqtyXjRykf2A+W25kRldj273pCpzdrBmVpq2PJkK0FOrTFJ
xgejVVsRBhffrHrHF49r4kvHYwbB+DLrPLjZYM7BB1PogLXoBRRnfav5EUvZb6hq
x351NIgEd/GVX5zXCrhMEJ/wzdL499w=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:08 2024 by rpki-client on console-fra.rpki-client.org