Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bb3e6d28-3f76-3c2e-983f-1ba852200793.roa
File:                     bb3e6d28-3f76-3c2e-983f-1ba852200793.roa (raw, json)
Hash identifier:          ZuWii5mF2BKrFsY6Hq3HvyI+Fu0oIAu+g/IE2sOep88=
Subject key identifier:   EE:75:44:AA:D5:65:40:FA:FA:1D:89:46:3A:B3:43:61:9C:1B:43:A4
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62B5956E63F7A3786FBAD00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bb3e6d28-3f76-3c2e-983f-1ba852200793.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     32381
IP address blocks:        207.126.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:59:56:e6:3f:7a:37:86:fb:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=01ae040d-4a08-4792-9bea-9107cf8b16e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:d5:a9:1f:4b:fd:cf:ce:9f:bc:79:d2:62:
                    88:c8:ed:67:4f:4f:d2:a9:09:41:0f:34:eb:65:bf:
                    33:b0:6e:1a:1d:1e:14:1d:76:8c:f5:91:80:eb:17:
                    1d:ba:3c:ce:93:f5:f4:4b:de:9e:d1:df:91:e0:71:
                    3e:3f:e9:3c:28:0a:5c:b6:9a:0c:bb:01:53:35:83:
                    ce:3e:32:80:67:12:fd:b5:db:5d:4b:6f:c2:02:fb:
                    0e:5f:58:03:ec:bb:1b:39:37:1c:71:52:fc:a1:b0:
                    eb:da:a5:a0:af:0c:9d:91:9d:b9:d3:d6:6d:d7:16:
                    66:ea:5e:5b:31:8c:45:3f:1d:18:a5:8f:c1:86:39:
                    5a:ae:06:1c:7b:8a:50:4d:03:e6:4c:20:e6:5b:0c:
                    0b:e0:a1:37:75:49:68:28:3a:da:65:ec:41:18:d2:
                    84:4d:46:da:c3:e6:bd:7f:6b:84:79:92:8e:b5:5f:
                    1a:f7:ae:eb:77:6a:ff:14:3a:d9:82:d4:4c:ff:78:
                    f8:e0:9b:6e:93:52:d4:cc:e3:1b:65:1f:23:ba:c9:
                    3b:84:f1:2b:96:aa:52:7a:c8:72:50:23:a9:ea:dc:
                    69:4f:48:d3:bb:ca:38:30:51:da:92:a1:88:6d:c6:
                    4e:6c:eb:37:3e:af:94:55:26:e6:25:65:58:03:c9:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:44:AA:D5:65:40:FA:FA:1D:89:46:3A:B3:43:61:9C:1B:43:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/bb3e6d28-3f76-3c2e-983f-1ba852200793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:93:eb:e5:c1:cf:df:9f:40:55:f8:a5:21:a5:5d:38:55:90:
         c8:d9:e8:5e:19:05:76:41:e3:74:ce:8c:bd:ea:37:89:f2:04:
         d7:53:9a:ba:54:d9:96:21:0e:38:8f:01:42:8f:fb:e1:cf:f7:
         df:b4:30:8e:7b:9c:9d:2e:dd:d9:15:71:8c:a6:f6:84:83:c7:
         d4:9a:b9:94:0d:e2:47:6f:01:e4:96:93:df:94:6f:b8:ad:ac:
         e7:0e:1a:87:e2:e6:40:bf:b2:17:c9:b5:25:07:bb:1e:63:a4:
         d1:67:67:f8:2f:54:9b:07:cd:7e:d2:e7:b2:f6:b4:d1:51:df:
         56:a7:db:63:0d:0b:bb:a6:f4:ad:9a:a6:c6:32:36:f4:06:76:
         ba:25:4a:ac:dd:8f:af:d6:12:9b:bf:01:e0:5b:51:6a:28:c5:
         38:dd:e6:4c:1e:de:ef:7a:0d:b8:33:ab:78:ec:9a:43:89:30:
         7a:34:03:ff:2e:71:bf:26:25:7c:8f:e4:b6:c0:85:01:1e:a6:
         35:91:77:6c:89:f9:8e:d7:62:0d:1d:58:6b:69:f6:61:ee:01:
         b4:9c:b7:51:0b:b6:5d:12:8e:9f:08:93:de:2d:f5:94:3c:b2:
         b8:24:16:17:b2:ab:66:a2:8c:0b:01:20:27:28:4a:d0:f5:ad:
         84:b2:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org