Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa
File:                     86d4d616-3c7a-32f8-821c-cad16b66158b.roa (raw, json)
Hash identifier:          YaX+C48SxTdIZAH1SQykW8xQ3sTpKE1Idsx8IaM5WJk=
Subject key identifier:   D1:2C:59:0F:CE:D0:1A:9A:72:FE:10:F1:B9:D1:0D:B2:9C:C6:79:68
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858455F00F7FE66C5F62B5D27A4E8
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa
Signing time:             Fri 29 Mar 2024 18:29:49 +0000
ROA not before:           Fri 29 Mar 2024 18:29:49 +0000
ROA not after:            Thu 27 Jun 2024 18:29:49 +0000
asID:                     36040
IP address blocks:        207.126.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:00:f7:fe:66:c5:f6:2b:5d:27:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 29 18:29:49 2024 GMT
            Not After : Jun 27 18:29:49 2024 GMT
        Subject: CN=bb3226a1-bf7f-4a07-a863-3a9b0823d0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:27:9f:5c:42:8a:8d:c0:c1:35:c3:a7:89:
                    23:d2:aa:b7:3d:a7:6f:9a:16:a1:a3:36:65:4f:79:
                    6a:04:32:21:06:5b:eb:53:b2:e3:2d:4c:cd:23:ec:
                    db:8e:98:7a:f5:82:80:b1:92:3a:65:3f:c8:c5:10:
                    b0:d2:37:52:65:02:90:b1:f7:20:fb:ec:7c:35:ea:
                    61:24:f5:7c:94:00:ac:6f:e9:f5:a3:d7:de:17:21:
                    30:6c:bf:3d:db:a9:a3:95:4f:ae:d1:63:90:44:9c:
                    ec:90:e5:e0:a7:d6:52:15:ce:aa:01:c4:80:7f:b8:
                    61:47:c9:ce:7f:c6:84:12:9c:0a:26:cf:ba:58:af:
                    82:a1:e4:e1:a0:82:03:f9:bb:59:af:80:7f:f6:40:
                    be:71:d8:94:32:81:f4:4d:e3:67:e4:c8:b8:07:e2:
                    6c:4c:3b:78:45:78:9f:72:b8:70:20:6b:21:e6:41:
                    9c:5c:16:7a:48:5e:2e:ae:d5:b1:66:c5:f0:0f:62:
                    a3:18:75:d1:44:97:8f:6a:08:ff:42:f1:7e:fa:3d:
                    8d:f2:7b:67:01:d9:69:1e:f6:aa:88:8c:c4:59:10:
                    35:0e:da:d3:23:4b:12:7e:34:fb:9d:de:31:d0:d7:
                    6a:78:c7:35:c9:ee:5e:67:c3:5a:08:8b:88:11:29:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:59:0F:CE:D0:1A:9A:72:FE:10:F1:B9:D1:0D:B2:9C:C6:79:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/86d4d616-3c7a-32f8-821c-cad16b66158b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:79:ca:15:f0:22:7a:fe:1a:99:c5:fb:ae:1c:04:57:11:
         c4:39:19:d4:75:3c:06:65:fd:e8:ad:1a:96:19:1a:96:9d:92:
         cb:57:75:4e:b3:0f:59:95:21:f1:57:91:cf:e6:88:05:11:74:
         f0:00:21:77:11:a1:cf:8e:a7:1c:9a:88:29:57:61:30:65:d8:
         9c:aa:12:56:23:8d:ee:fb:2a:68:b6:e4:b1:e2:7e:e9:dd:27:
         7f:68:df:fe:22:74:18:36:07:1b:32:a4:25:ad:66:92:f9:17:
         10:35:9a:16:07:40:ba:e1:dc:bc:e3:76:72:35:9e:c6:7c:77:
         2f:de:d0:db:1d:89:b4:ab:18:a6:b8:43:0c:34:8c:db:85:e7:
         87:9c:ec:ae:00:a4:b8:8a:1a:a9:af:bb:fa:9f:21:b4:14:4b:
         e2:a4:fc:6a:d5:4f:c3:49:59:2d:61:13:f9:c9:14:7c:82:93:
         70:1f:a2:3a:10:cd:db:97:ad:38:4e:37:b4:48:93:aa:ca:09:
         b3:11:29:6f:ac:66:72:a4:1b:b4:78:1f:0a:53:cc:06:3b:3e:
         36:20:13:85:d7:cc:06:65:53:b1:e9:1b:86:50:7e:68:5f:9b:
         0e:fb:30:35:41:89:ad:ec:26:a5:9a:ef:88:95:cc:d7:ce:de:
         38:9c:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:15 2024 by rpki-client on console-ams.rpki-client.org