Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa
File:                     ed3b3dcb-62db-3e81-a090-f997d59a1187.roa (raw, json)
Hash identifier:          BqYnjb0CphT/MMrPn/G+wcvABMcVDKF98hB/6ykT6jQ=
Subject key identifier:   C6:86:7A:84:E6:D8:60:FC:29:01:EB:4F:C5:3D:E0:9A:FF:CC:C2:31
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858470550C46AFEA4EB586BFEFEC0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        207.126.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Oct 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:c4:6a:fe:a4:eb:58:6b:fe:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=535b4ca2-3636-4dcd-bc30-363f3c5407e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:a3:f2:75:23:e7:a8:3d:81:8e:e1:75:58:
                    e0:a2:f6:d8:05:58:f0:05:ce:f7:12:11:81:29:0d:
                    eb:e5:f1:7b:1d:03:94:ff:97:f6:f4:b1:2c:d8:58:
                    11:10:e6:0a:bd:84:06:51:97:af:7f:1d:bb:c0:02:
                    33:5f:bb:ec:8d:ad:6c:73:e8:a8:e1:49:7f:d4:e2:
                    fc:da:c9:d7:85:a2:77:0c:bf:c4:3a:cf:99:50:77:
                    13:f0:64:cf:5d:b3:68:e8:0c:50:87:32:af:e8:0f:
                    05:5a:95:33:98:12:4c:ea:db:5b:9a:a0:4c:12:49:
                    c4:58:6e:15:f1:b4:f7:db:16:37:41:bf:e5:4a:a8:
                    f5:a1:f2:fe:11:8b:80:81:93:25:e8:7b:6d:36:c1:
                    26:86:16:4e:53:a4:02:40:e2:0a:ce:b0:bb:22:55:
                    07:59:b4:17:17:8d:98:d2:a9:0c:31:46:d2:2b:bd:
                    c5:49:13:08:3b:80:bf:b4:54:68:37:9e:6c:69:6b:
                    bc:e6:4f:91:f9:aa:06:3a:37:b7:67:ae:55:b2:25:
                    c4:bf:82:f4:c1:d0:94:0c:26:1c:37:75:d9:16:79:
                    80:bb:0e:3b:13:d3:86:35:01:59:11:ff:d8:d0:be:
                    97:b7:21:cd:5d:39:f1:8f:c4:32:2a:42:c7:69:dc:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:7A:84:E6:D8:60:FC:29:01:EB:4F:C5:3D:E0:9A:FF:CC:C2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ed3b3dcb-62db-3e81-a090-f997d59a1187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:93:ef:5b:50:4f:6d:31:ce:be:fc:ea:84:68:99:d5:44:77:
         36:80:16:2e:88:e2:21:e5:9a:5f:7a:48:58:f8:f7:b9:07:5e:
         78:43:cc:8a:e5:67:5b:97:92:df:f7:ce:db:f0:83:cc:82:7b:
         94:b0:ff:c7:f6:ab:a7:fe:16:67:57:40:a6:74:ae:29:50:90:
         ee:f4:c0:0e:b8:e7:c6:c4:c9:ff:dc:67:08:e8:36:26:fb:11:
         f2:41:f5:cc:a5:1a:68:08:0a:b1:d6:6f:2c:9a:c1:99:34:be:
         e9:87:69:bf:74:22:cc:ce:3f:52:e1:48:75:6f:83:25:67:eb:
         fa:8e:f8:27:9c:c7:64:93:02:e9:86:7d:39:74:56:b3:4c:e9:
         53:37:55:59:09:b4:ff:2f:98:ec:4e:a6:f1:42:5e:01:d8:2c:
         35:08:0a:ee:95:92:bb:11:3f:c9:4e:69:39:c8:23:dc:d5:33:
         0f:7d:7a:82:b7:a6:17:ae:76:3b:79:9a:39:ab:33:b3:c2:70:
         0d:72:aa:77:44:c7:8d:c3:2b:c6:fc:35:4d:d6:79:c7:a8:a6:
         27:15:69:e1:33:c7:be:69:69:ab:08:96:4f:e2:7d:58:ce:ff:
         49:f0:a0:34:5d:f0:c6:77:7c:98:75:97:48:9e:de:b9:4d:9f:
         12:44:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 16:01:54 2024 by rpki-client on console-ams.rpki-client.org