Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/88f6cd5c-64e2-30b8-9f02-4be6bbc5f4fa.roa
File:                     88f6cd5c-64e2-30b8-9f02-4be6bbc5f4fa.roa (raw, json)
Hash identifier:          80TxszVecwIsICkpEzs/9U6ZTp3VRjPqwmWzleuMQXg=
Subject key identifier:   21:B8:DD:11:46:D5:94:30:17:36:B3:A1:A8:58:3C:14:AD:7C:9A:7F
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858471E7090DCEDA2E6C699509780
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/88f6cd5c-64e2-30b8-9f02-4be6bbc5f4fa.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36040
IP address blocks:        207.126.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:90:dc:ed:a2:e6:c6:99:50:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=bf69607b-0749-4faa-9176-ba3b1d6bdcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:db:49:d0:59:f8:0a:e2:ce:41:5c:6b:52:
                    0a:43:dd:9e:e6:38:37:9e:ae:20:29:37:9c:5a:ef:
                    91:c8:ea:01:c4:1d:0d:59:02:3e:e1:cb:e4:3a:0d:
                    32:72:f9:a3:44:64:4b:e4:e5:ae:8b:58:1a:3f:2b:
                    58:9b:38:ee:45:8c:60:7c:99:38:47:66:4b:36:1a:
                    f2:5c:0f:75:04:b0:7e:f7:4a:35:1a:9a:97:dc:3c:
                    8c:40:dd:b1:4b:81:36:73:af:71:54:bd:84:5e:1e:
                    e1:d8:a1:32:de:02:36:c5:29:18:63:5f:f6:0a:80:
                    48:37:19:8f:b2:77:83:b9:b5:e4:ad:b3:21:56:da:
                    6a:19:e4:89:b6:72:73:ee:53:e0:e7:c7:f7:de:20:
                    07:cb:e7:26:db:94:6c:ee:5d:f2:a8:6c:63:e6:b0:
                    31:25:15:65:d3:2b:5a:0a:10:86:16:d4:f2:6e:a1:
                    bc:4e:3c:9e:ac:aa:ff:e3:40:d1:43:45:a3:fb:43:
                    ed:01:ba:30:be:66:f7:b7:8c:d1:35:71:1c:64:d2:
                    a1:49:89:d0:f7:36:d9:fc:bc:c7:8b:ff:2a:00:aa:
                    40:e4:46:63:aa:32:4c:b3:14:da:b5:c7:2f:85:38:
                    7f:a7:1e:ec:64:d1:a6:49:4a:38:56:d4:e6:b9:20:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:DD:11:46:D5:94:30:17:36:B3:A1:A8:58:3C:14:AD:7C:9A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/88f6cd5c-64e2-30b8-9f02-4be6bbc5f4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:38:32:27:45:96:fd:a3:c2:1a:d8:1d:c5:82:01:17:b8:
         27:58:8b:4a:42:9d:25:32:cb:51:0e:df:6a:f3:2d:72:0e:d6:
         9f:2e:69:fc:40:a1:1b:6a:b6:36:59:f4:45:65:88:cf:fa:a9:
         2e:23:1c:97:c5:2e:1b:92:4e:18:c9:94:cd:3c:51:bc:09:92:
         b7:c2:35:eb:94:55:28:06:5a:e7:cf:30:cc:4f:17:81:e6:a3:
         67:f5:87:f0:cc:48:0d:36:0d:6f:62:ca:ec:e8:8d:e7:74:bd:
         7a:e3:43:a7:58:9a:00:4d:1c:28:cb:c0:44:83:e4:61:3c:0c:
         0b:3c:d3:7d:77:ca:a4:b6:9d:c2:ae:cb:88:7e:f3:ac:f5:45:
         44:cc:f8:71:d8:1b:ad:3b:52:73:6f:ac:f3:97:ed:80:70:44:
         37:0f:48:24:4c:94:f3:3d:80:a2:b2:72:95:dd:29:47:ae:30:
         97:09:7d:02:c4:eb:c4:bc:88:86:55:e2:d6:b6:6b:d2:3b:4d:
         3c:11:ff:eb:53:f5:9d:94:e8:28:6e:76:89:60:3a:03:84:b0:
         72:98:36:75:a6:2c:53:92:55:6f:60:b2:10:ad:0d:12:b6:da:
         57:8d:f5:65:96:d5:2c:8a:ce:ab:b3:61:9d:41:ae:15:b0:b3:
         2a:2b:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:21 2024 by rpki-client on console-fra.rpki-client.org