Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d483841c-7b95-3942-850f-db537a3006cf.roa
File:                     d483841c-7b95-3942-850f-db537a3006cf.roa (raw, json)
Hash identifier:          cCBS6lctJAoPAK1z7FSqZdMp6mDmB/b55O/MAuop3kg=
Subject key identifier:   C3:B9:E4:49:1E:C2:04:00:E6:4C:34:31:03:93:14:73:0E:67:1C:AA
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C581797E1CA181C992095480
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d483841c-7b95-3942-850f-db537a3006cf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     32381
IP address blocks:        207.126.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:79:7e:1c:a1:81:c9:92:09:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b31c1c8e-013e-4850-84eb-cdf625bde978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:c3:c0:ed:60:a7:41:79:71:b6:0b:d6:1c:
                    11:cf:21:cd:73:53:3b:5b:bd:07:ae:57:9a:f8:a9:
                    d4:dd:5e:05:96:c5:13:dd:e2:cb:7c:49:27:03:13:
                    ee:08:8f:d9:22:38:9d:4f:20:cc:7c:16:34:0e:9c:
                    ff:d9:9d:0d:40:7b:93:71:4f:da:fe:cf:91:ea:6d:
                    87:74:a1:5a:a0:95:09:6f:b6:45:8a:a5:8e:47:5f:
                    36:ba:45:bf:c5:ea:f9:dd:a6:29:35:dc:be:f1:14:
                    c7:e4:d6:25:2f:13:1b:cc:d6:9e:26:6c:ec:e8:80:
                    7a:7e:6e:10:13:5d:d5:94:e5:02:a8:f5:de:da:ea:
                    f4:6c:fb:39:9e:fc:a5:89:19:d7:13:f9:99:d7:42:
                    60:90:2b:14:96:dc:06:cb:9a:7c:93:ec:c1:e2:17:
                    55:45:1f:7a:c7:54:8c:88:d3:9e:1f:ee:d0:0a:fe:
                    86:e9:71:69:0a:8c:92:af:99:f9:d8:d0:42:db:cc:
                    d6:08:c7:09:f3:e3:c1:cf:3b:33:7e:cd:cf:5e:fe:
                    86:a5:4d:a0:cb:b0:2b:4c:25:5b:05:fe:ed:4f:04:
                    73:ae:ad:74:a0:23:6c:14:9a:3a:fc:67:03:15:f7:
                    8a:e4:54:49:22:23:21:03:90:61:81:c6:8f:43:f2:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B9:E4:49:1E:C2:04:00:E6:4C:34:31:03:93:14:73:0E:67:1C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d483841c-7b95-3942-850f-db537a3006cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:90:91:b1:2e:d3:e6:8b:8b:ef:38:5e:d4:84:e4:6e:46:
         35:50:8b:cd:e6:30:b8:ae:cc:39:02:6e:31:26:0e:31:65:13:
         bb:4e:fc:9b:33:e6:32:86:f4:17:dd:2a:d4:0c:cb:83:99:0e:
         d2:7b:61:0e:6f:11:9e:52:6e:98:b7:c3:b1:89:7b:57:02:53:
         a1:f0:7c:20:36:0e:4e:73:97:50:1c:9e:42:47:cc:84:02:f0:
         04:9c:95:58:73:88:78:8c:3e:21:10:c0:b6:8c:fb:20:19:47:
         52:da:d1:92:91:1c:22:7a:20:d7:d4:08:e1:f2:ae:47:63:88:
         6e:cc:28:42:2d:13:78:82:45:4f:cf:f2:44:0f:a4:4b:b4:d0:
         90:52:b4:49:e0:1b:87:72:b9:cc:2e:6b:90:b2:a2:8f:83:7e:
         96:fe:3e:40:09:28:bd:29:cf:c7:b8:f0:3a:88:34:70:e2:2a:
         c9:58:b3:fe:8b:7f:cb:4c:03:d2:2c:3b:d8:21:7d:69:b5:d5:
         86:30:a5:32:66:d4:5f:be:09:b6:e5:55:84:77:6b:ef:d3:dc:
         77:2a:06:1c:d0:36:f0:53:b3:8f:20:b7:a7:dd:84:57:59:e3:
         46:e0:d2:6f:52:63:4b:25:62:07:cd:10:e7:c8:93:38:d8:12:
         9a:c4:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:31 2025 by rpki-client