Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa
File:                     b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa (raw, json)
Hash identifier:          knnjoN1j0v9eCAtdGKjwCKvtGP7/EYrbCO5J9ylIKVY=
Subject key identifier:   2C:DB:56:4E:84:E0:23:3D:00:15:D2:30:9F:C1:D8:1D:48:6C:F4:60
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62AAB1ACF3D3E7CB5517B80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        207.126.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ab:1a:cf:3d:3e:7c:b5:51:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ccdcb807-5aba-456d-98d5-bd5c1803abe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:56:d3:90:41:f7:52:ce:38:6c:49:10:60:
                    71:d6:9f:88:08:41:39:08:00:4a:75:41:ed:1a:bf:
                    62:1a:12:0b:d8:90:c2:88:9f:66:c3:27:25:11:27:
                    65:ac:87:f7:64:cc:0c:b4:f4:65:30:37:13:4a:c1:
                    c9:d2:24:05:4c:11:b8:96:fc:d5:bc:88:75:fb:24:
                    1a:fb:a8:9e:17:11:f4:d7:61:7c:a8:f0:7f:77:24:
                    12:e0:be:f5:88:b9:95:c9:d9:82:89:c1:cd:de:2a:
                    2f:ad:f3:6c:d5:6b:99:38:98:6e:f8:71:40:10:6a:
                    8d:14:62:97:53:09:b7:d5:17:35:7e:74:43:19:25:
                    bd:dc:b5:38:d3:33:99:78:02:c1:55:ef:f4:a6:36:
                    6e:3f:ca:5c:c1:a7:a1:8d:af:d1:ce:d0:c5:5b:2d:
                    03:d2:a3:dd:e1:a6:62:aa:f8:e6:33:0c:42:55:52:
                    be:be:e9:e8:ed:5b:07:cd:94:ad:22:59:b0:97:71:
                    95:d9:bb:70:9c:9e:b5:57:a8:43:81:c8:8a:7d:7d:
                    dc:51:d0:32:57:1f:b1:29:70:0f:32:99:32:cf:5e:
                    97:09:09:9b:ec:dd:61:e9:aa:c2:9b:1d:35:b4:ff:
                    0b:96:2b:7f:c0:19:96:e3:f8:e5:3b:4e:d9:ae:f5:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DB:56:4E:84:E0:23:3D:00:15:D2:30:9F:C1:D8:1D:48:6C:F4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:30:fd:fc:05:59:45:63:80:cc:bb:7e:ec:94:40:7f:7c:
         9a:d7:6e:86:ac:3d:9f:43:2f:3b:6f:e2:25:8f:24:a4:06:b5:
         a9:e6:72:7b:6f:59:33:b1:07:85:61:b7:7b:88:f3:76:a4:e9:
         ff:72:82:e0:1b:04:7b:9d:e1:89:60:be:c9:3b:78:56:d9:75:
         b9:dd:db:e7:02:e0:c9:31:72:e8:70:c8:01:1d:4f:c6:41:ca:
         70:dd:13:e4:3a:46:3a:32:7d:10:77:90:81:a3:b5:fa:89:4a:
         21:f7:d9:f2:b6:84:e0:89:6d:03:43:31:fc:80:d7:b1:6b:2e:
         5d:b9:d8:46:15:ed:d5:55:a4:f9:48:cf:ad:75:3f:d0:65:12:
         65:c5:ef:d4:7d:9c:9f:6b:8b:93:05:b2:8a:55:20:80:3f:8a:
         3a:b2:4b:09:08:a0:2f:d1:b6:f1:e4:ad:c3:4e:3e:5d:c5:72:
         2e:17:d9:7c:73:a8:4f:27:bf:a5:da:a5:a4:6f:4c:3c:96:6f:
         d0:db:88:0b:52:3f:39:4d:4e:db:5e:77:fe:f8:bb:8d:47:1d:
         2e:e4:e2:c3:5d:41:19:bb:ef:8b:08:28:17:cf:f9:1f:03:e9:
         ca:09:67:da:0c:8e:2e:f4:c4:b1:f0:d4:2e:93:57:32:18:7d:
         b0:b7:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org