Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa
File:                     9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa (raw, json)
Hash identifier:          L81UBKcXHrbvhKhAPehsqGQ/a3hE3ET7CF29WbqTty8=
Subject key identifier:   5C:8C:1D:AB:4D:49:38:4F:B6:CC:3E:0D:62:10:A3:A0:E8:B3:A7:69
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C58229EF0A62FBAAFFDEF840
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     32381
IP address blocks:        207.126.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:29:ef:0a:62:fb:aa:ff:de:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=77cbd87b-7632-4ce5-8ce1-85febf0fd4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:9a:42:47:74:99:88:0d:5e:1b:00:fd:52:
                    ba:de:b8:dc:14:65:fb:11:e2:31:b4:af:46:cb:3b:
                    08:34:22:07:a8:7a:42:92:8b:ea:2e:9f:8b:19:db:
                    d1:aa:eb:2a:42:24:99:1f:9e:ab:2c:ce:8f:2f:b9:
                    e4:6d:34:f2:79:06:f9:c3:54:9b:4f:2c:92:61:f5:
                    ef:c9:6c:29:a4:6c:82:f5:0d:f5:a8:34:20:e1:7a:
                    ba:bd:0b:d9:8b:d2:4c:92:44:fb:cd:f8:c7:41:35:
                    9d:c8:a7:f5:43:b1:04:47:7b:74:18:d4:15:9a:86:
                    53:7f:f2:7a:34:f5:a4:29:01:47:ec:79:e2:3c:98:
                    dc:1a:5b:98:67:db:40:20:2f:97:5c:d4:e2:b6:71:
                    1c:02:20:f1:7b:0d:4c:49:47:41:8c:1e:f2:d6:6a:
                    50:bd:1f:c9:9f:1f:ca:4b:91:8b:32:1f:dc:28:2c:
                    90:59:55:36:e7:8f:f1:8b:fc:50:04:f3:71:83:9f:
                    18:64:15:f9:ff:22:01:67:4c:92:9b:bd:3c:9c:c0:
                    ae:de:c9:57:4a:30:e2:dd:41:83:2e:66:64:a2:2c:
                    2f:0f:36:ad:4d:53:2f:10:2f:d5:e1:49:e4:16:49:
                    35:0d:1f:93:1a:21:b6:34:74:33:d1:13:6b:4c:8c:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:1D:AB:4D:49:38:4F:B6:CC:3E:0D:62:10:A3:A0:E8:B3:A7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f8:17:39:d4:78:06:07:91:5c:e8:e7:dc:a5:ce:f2:65:6e:
         22:b8:f7:08:af:96:5b:1f:5a:ed:0f:cc:dc:f7:87:4d:bf:be:
         e1:12:5e:45:b4:93:e6:3a:b6:a8:b0:fe:f8:6d:47:11:99:61:
         90:f9:56:39:08:55:56:66:5f:48:1c:bf:0e:6d:31:5e:a1:f8:
         74:66:18:1d:28:a6:fe:5a:57:c5:91:e3:d3:57:95:68:eb:94:
         d4:33:c9:8f:5f:b0:53:87:7e:30:4c:1b:bb:3e:ed:13:16:bf:
         ad:df:eb:15:9e:26:d3:2b:ba:c7:87:41:0e:f4:7e:42:34:42:
         bb:82:ad:e5:6d:0a:44:6c:9e:66:2b:89:c3:63:c4:d1:a6:78:
         94:69:b4:32:2e:60:10:61:82:be:5e:61:f8:87:47:13:fe:9d:
         f2:48:b9:18:d0:d0:7c:e7:6e:6e:7e:e1:28:3c:ea:93:5b:2b:
         5e:8c:5c:31:86:7d:9b:c4:bb:95:92:38:24:13:7a:e6:0d:16:
         30:10:74:bd:f9:76:40:dc:40:08:1f:e9:db:bb:ac:9f:ae:5d:
         8f:4a:dd:cf:f1:04:e9:52:2e:3f:ac:da:23:9f:a6:f0:2c:9d:
         a3:26:9f:bf:7f:b9:b0:ef:69:ca:7b:44:8f:17:b0:8b:cb:b7:
         b9:54:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:39 2025 by rpki-client