Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa
File:                     864f6492-55a5-3f58-b82f-047d0058b531.roa (raw, json)
Hash identifier:          XMAXxh/b+N4BUSCt0xAMBF5TKzF2XEQa9zxqfNhXzeM=
Subject key identifier:   C4:65:6B:83:14:C6:D7:15:7C:00:B5:1D:9F:05:5E:F4:11:93:02:40
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62AA27AD88F6772DCB14180
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     32381
IP address blocks:        207.126.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a2:7a:d8:8f:67:72:dc:b1:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=31798038-74e6-419b-9021-669c717e8983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:3a:75:ad:ed:8c:5b:15:40:4d:60:ab:f9:
                    79:67:e2:9a:34:58:bf:98:b9:34:cd:19:bc:b8:93:
                    5c:fe:86:54:a1:ad:01:a3:f9:e4:b5:0c:96:37:d0:
                    b5:83:1c:d1:30:9e:2d:f2:5a:a2:1a:c2:71:29:15:
                    62:e5:6a:00:a7:18:a3:24:49:f7:6a:d9:1d:07:39:
                    9d:5b:9e:9e:80:e8:5a:d1:2a:e6:c6:5b:64:a4:a9:
                    25:c8:c2:67:69:57:16:67:bc:1d:31:2f:9c:61:ad:
                    29:6a:25:0d:d1:8b:87:fa:d1:ca:73:2c:05:f3:96:
                    c6:94:1b:33:42:8e:3a:47:46:b3:46:c0:ef:6d:47:
                    7c:38:4f:ec:fd:b4:dc:5e:7b:27:4d:4d:b3:b9:c6:
                    fa:ed:24:19:fd:76:bf:07:be:3c:da:c8:ca:21:8c:
                    ec:47:16:f1:b5:ff:0f:8f:d7:48:6d:1b:08:5a:0c:
                    f3:15:9b:f5:c7:b9:a2:8e:dc:b9:a2:89:ce:e8:c0:
                    da:60:df:56:9a:70:bb:a3:8c:cf:6e:80:8e:66:2d:
                    b2:62:bf:c3:ac:e7:1f:6b:22:0a:f9:59:36:dd:d3:
                    b3:c1:d0:9c:89:a1:64:9e:3d:33:12:9f:32:8b:e2:
                    66:22:14:64:7f:b3:4b:f4:82:91:58:49:8d:f5:d2:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:65:6B:83:14:C6:D7:15:7C:00:B5:1D:9F:05:5E:F4:11:93:02:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:52:29:57:6f:79:35:23:2b:54:25:2f:98:02:50:96:9d:da:
         5e:ac:ef:1b:6b:45:04:d1:c0:62:97:d5:68:aa:84:5e:d1:59:
         16:43:0b:5c:9e:f2:66:6e:b8:10:bf:b3:e1:58:fc:0b:07:9c:
         05:6d:3d:29:fc:47:67:e9:5f:e4:d5:a8:aa:8e:8e:20:22:74:
         78:12:26:98:47:9b:96:10:11:bd:29:7a:b6:7d:0e:d8:45:29:
         01:7e:7f:81:54:41:f6:87:b8:f9:01:32:41:a8:ea:ff:8b:76:
         61:d5:54:b4:13:77:cc:77:d5:30:db:07:ab:88:14:e4:17:2c:
         b0:04:e5:c4:a1:cd:c4:b1:d7:ff:67:e5:70:6e:19:be:8d:68:
         fe:c4:e2:e3:a1:94:3e:6d:1a:4c:57:1d:ff:53:d7:f1:8f:88:
         5c:e6:cb:ca:03:9a:8d:ac:11:12:af:73:d3:a7:7d:0e:79:37:
         e9:48:fd:8e:5f:7e:26:62:bf:83:71:02:88:83:21:a4:72:50:
         e0:2a:58:4a:30:98:2c:46:bd:32:f9:5a:99:63:6b:9c:4b:cf:
         00:5a:fe:68:72:50:c9:8f:0d:45:ce:d7:a1:45:98:74:30:7f:
         25:e3:a6:a0:66:a7:cd:28:9f:4a:d8:f1:60:6f:64:dd:fb:48:
         6a:62:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org