Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
File:                     81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa (raw, json)
Hash identifier:          FxUDjNnuAqct1TPuek7heDmaZIq+kVi2Un8OSpdPKFg=
Subject key identifier:   26:06:5D:AB:17:E8:8D:3A:95:83:DA:6D:A5:79:2B:03:9E:65:62:06
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5820C9E35DF9B00BB1CB180
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     32381
IP address blocks:        207.126.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:0c:9e:35:df:9b:00:bb:1c:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=225e1170-bfe9-4291-a73b-0b7a637e6464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:c6:b1:07:6f:94:08:d5:ef:5d:fe:40:0f:
                    5b:77:86:ac:f2:6a:65:42:08:e4:55:7b:c1:49:d7:
                    d7:8e:7d:66:5a:72:2c:65:2c:b1:53:d3:37:53:f2:
                    f6:90:40:e7:89:7a:a2:b8:ea:2c:b0:0d:67:74:6e:
                    8f:f3:37:4f:0a:f5:1e:8b:ce:f2:13:8d:34:1f:64:
                    8c:95:a0:2c:8d:8e:bc:1a:e9:72:21:7d:a7:6f:c3:
                    11:7a:ad:79:3e:35:33:13:52:5a:9e:e6:90:56:b1:
                    5f:d9:03:5e:af:58:f3:77:11:26:20:ba:47:07:f2:
                    f8:5d:b2:b2:0d:8b:cd:fd:db:00:ff:85:c7:bd:c5:
                    fa:6a:b9:31:3e:4d:7a:f1:63:3d:2d:15:db:17:77:
                    83:c3:aa:ce:d5:3e:73:b8:85:19:39:26:46:39:f4:
                    84:84:88:27:e3:58:f2:59:56:01:96:f9:f6:99:67:
                    bd:2f:32:f3:70:6c:1a:e2:15:ae:92:be:ab:3f:c3:
                    4d:89:89:80:ab:64:97:f2:5a:c2:e9:bb:d7:a2:e2:
                    79:fc:f7:a3:71:1e:5d:44:11:eb:7f:27:7f:11:b7:
                    00:00:d8:b7:33:88:5b:f5:e6:18:c1:d9:89:a1:bd:
                    3e:eb:b3:e7:15:0a:ae:ea:2f:d7:79:64:23:73:c2:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:5D:AB:17:E8:8D:3A:95:83:DA:6D:A5:79:2B:03:9E:65:62:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:ca:6a:22:7c:f2:46:02:3b:22:63:11:86:66:66:ac:5f:
         b0:e1:5b:c5:0f:8b:85:b1:f2:2c:c0:34:de:2f:6b:0a:10:b2:
         32:bf:a3:b2:52:da:cd:15:c4:4e:8c:25:40:94:b6:c3:00:a8:
         3d:81:4c:4c:ba:db:6c:b8:b4:f9:76:02:53:0e:1a:c7:ae:06:
         f1:36:ea:3b:75:c2:78:87:0f:bb:ed:ab:69:26:c6:af:2a:e2:
         b7:38:f6:83:e1:0f:f2:38:1b:d7:33:9c:cd:73:66:d8:06:a9:
         96:d5:b4:1b:8b:f8:4e:53:1d:d2:22:da:65:ea:3c:3b:37:db:
         dc:82:9c:86:50:bf:25:84:88:4a:13:c5:57:82:fd:1b:7a:31:
         9f:54:25:7a:46:86:1b:81:7e:53:5a:5c:3f:86:99:70:ea:c3:
         83:45:a3:fd:6c:bf:8e:94:be:12:90:e1:47:3f:af:f9:04:3a:
         b8:f7:c9:e4:c2:56:de:a5:99:99:42:91:2c:e8:26:c0:d1:0d:
         7a:01:e6:52:93:97:ef:de:c1:45:75:2c:3d:95:f1:9c:e1:68:
         4b:06:e3:9b:97:d4:b0:43:c2:99:e4:90:df:8c:19:e4:bb:2e:
         b0:d5:25:f5:7f:56:94:23:8c:fa:70:10:3e:96:3e:ef:26:a9:
         48:45:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:26 2025 by rpki-client