Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de340ea3-fb68-35a0-b5fb-42ec519a88f9.roa
File:                     de340ea3-fb68-35a0-b5fb-42ec519a88f9.roa (raw, json)
Hash identifier:          V3wd9XJMvj8L3dEzIMrzc9WIVeVhTAuqoyohE3cvPi0=
Subject key identifier:   BD:BC:93:80:D0:BD:F2:64:60:06:7D:F8:38:0A:2B:AF:1F:9F:5F:04
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847E62B3794B17649185B57AB80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de340ea3-fb68-35a0-b5fb-42ec519a88f9.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     32381
IP address blocks:        207.126.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:37:94:b1:76:49:18:5b:57:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=25b1cfd8-d12a-476c-86d5-5c7960eff145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:c6:39:11:52:95:d5:ab:04:31:c8:87:17:
                    76:c6:b5:56:cf:37:98:52:46:50:95:29:d6:f5:8b:
                    d0:b8:5b:74:0e:35:6a:87:2e:ac:b7:ad:dc:8d:8b:
                    48:83:6b:5e:18:49:f4:68:34:d3:f4:3a:a5:f5:c0:
                    dc:b5:9c:23:14:7e:d1:55:aa:95:81:4c:4e:6c:e3:
                    fb:26:98:83:fa:1c:1a:32:1d:96:a1:e7:41:49:b2:
                    3e:22:64:89:a7:35:69:5b:c9:a1:9a:3f:4b:8f:e3:
                    cb:5e:42:66:83:62:38:ba:39:11:58:dd:77:43:8d:
                    85:38:c9:e4:75:ed:c6:a6:9c:ab:32:3e:55:be:fb:
                    3e:b5:31:6f:14:61:77:e4:7b:8b:14:44:0e:f8:5b:
                    88:97:af:56:e0:dc:3e:8d:2d:77:75:56:a7:93:4a:
                    bd:15:01:17:68:06:73:0e:5c:d1:11:bb:b7:13:f0:
                    c2:ed:1d:de:57:c9:2c:da:3c:e1:71:bf:d5:5c:54:
                    55:74:83:36:2e:ca:28:1c:9e:80:27:b0:6a:fd:1f:
                    8c:ef:57:99:d4:b6:76:f8:6d:34:da:4a:1f:75:42:
                    a1:d0:8c:d9:19:d3:6e:98:cc:00:98:bd:de:40:3e:
                    08:a0:58:5d:a0:1f:ab:ab:3f:ad:ce:8c:f0:2a:6d:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:93:80:D0:BD:F2:64:60:06:7D:F8:38:0A:2B:AF:1F:9F:5F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de340ea3-fb68-35a0-b5fb-42ec519a88f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:84:81:62:69:a4:d5:61:46:b8:61:a4:0d:24:ed:a7:15:
         ba:0c:6e:ee:12:f5:98:ec:f4:45:f9:46:ad:1d:d0:5d:48:46:
         dc:ee:4a:4f:65:26:b4:cc:90:94:8d:40:35:17:4e:30:5f:4b:
         8c:df:69:82:e6:66:1a:c1:df:d9:df:e1:24:51:4b:63:60:a5:
         16:de:d8:1f:bf:82:aa:c4:e1:86:5e:15:ee:66:ae:9c:cb:ac:
         65:2b:41:a1:19:b6:78:08:7d:de:6f:03:66:bd:d0:39:fe:1a:
         43:a4:0d:72:c6:2b:73:25:dc:c5:22:e0:03:b9:af:a2:7e:35:
         ce:d8:14:71:ce:b9:a8:c3:9f:d3:ac:76:e2:ec:cf:e6:60:13:
         0c:9c:c6:fc:2f:4e:e3:a9:6e:fb:84:5c:ec:c3:fe:df:86:59:
         b9:c2:ee:44:38:a5:3e:82:52:76:41:13:a6:d5:17:66:5d:ad:
         9f:7b:30:05:14:8c:97:b2:c2:72:4c:53:65:70:88:e8:2e:dc:
         e1:3f:76:0b:e9:ca:ae:0e:1c:ef:5c:f1:48:9b:39:f7:01:78:
         7b:89:38:72:f0:fc:97:c1:69:07:f7:fb:a9:08:3e:d3:8c:71:
         de:87:c1:2a:89:78:8f:6c:18:c8:d5:0d:96:bf:2b:f9:84:a5:
         65:bd:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:12 2024 by rpki-client on console-ams.rpki-client.org