Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/eeed069a-2038-3466-b211-7ed2a34ad585.roa
File:                     eeed069a-2038-3466-b211-7ed2a34ad585.roa (raw, json)
Hash identifier:          nSsEoYnFffyY/sk6ink9q1rn6yIJ85O0Fz4ACzrrPkM=
Subject key identifier:   0B:3C:78:AB:92:0E:B1:7C:ED:87:48:F2:41:29:11:DC:5B:D8:86:24
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C58208B23FECFD3C73D0BE00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/eeed069a-2038-3466-b211-7ed2a34ad585.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:08:b2:3f:ec:fd:3c:73:d0:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=33937f1c-3889-4818-924c-ab8baaedb67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:ca:ef:ac:80:c4:0b:7e:c9:2f:dc:62:7f:
                    93:ad:01:d3:30:bd:39:6e:cb:ab:b2:0f:3e:e6:e0:
                    2e:b9:ca:1f:4e:dd:e2:1c:09:b5:2b:32:eb:8c:d6:
                    a3:78:0d:2e:21:34:a2:12:15:dc:4a:16:e7:9a:3e:
                    c5:3c:0b:c0:1c:56:1e:c1:73:79:b9:d2:8a:d7:2c:
                    f5:d9:8f:27:67:5f:40:d2:5d:95:fe:f5:77:7b:2f:
                    58:e4:ce:65:d6:5d:60:6d:b9:60:43:fb:4f:fc:7e:
                    92:c3:56:a2:28:e1:d8:16:62:c3:54:80:8a:48:20:
                    a9:a9:51:86:82:cb:7d:01:0f:d9:f6:4d:e6:d3:5a:
                    8f:be:bd:a7:10:4d:fe:44:db:c9:1c:fe:2f:3d:dc:
                    7e:4b:c0:d9:3d:2b:32:e0:db:0a:1b:65:aa:b0:8a:
                    d2:84:69:37:3e:f7:91:41:09:37:93:1e:74:23:e6:
                    e6:36:d8:d3:9f:b6:99:65:85:76:40:bf:4a:4b:0d:
                    67:2e:7e:27:03:b4:06:56:59:fe:c2:7a:42:dc:0e:
                    dd:8f:14:d6:8c:cf:e2:76:36:12:ec:c7:b0:65:75:
                    ee:6e:55:36:00:e7:29:c4:07:5c:fb:fb:f2:0f:9a:
                    bf:88:6b:05:52:03:22:88:b2:5c:45:bb:6a:7c:81:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:78:AB:92:0E:B1:7C:ED:87:48:F2:41:29:11:DC:5B:D8:86:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/eeed069a-2038-3466-b211-7ed2a34ad585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:72:dc:48:ae:f9:56:0f:a9:da:37:a9:2e:3b:7c:8a:db:a3:
         9b:48:c1:0b:f0:c0:c8:63:6c:29:1d:45:77:a6:9b:3e:c6:6b:
         df:c5:a8:f7:b3:fb:cf:f7:2e:a0:12:be:fd:96:61:17:03:44:
         b3:ab:a6:f1:b3:6b:38:5e:82:ee:ad:bc:72:6f:cc:fe:d5:43:
         4c:1b:21:21:db:6f:d7:71:76:0c:cb:91:d0:c3:74:99:5c:ea:
         2c:cc:78:84:0c:7c:26:4b:96:1d:e1:4c:c3:c4:f2:1b:7a:11:
         05:b1:ff:26:76:63:6a:50:49:e8:74:1d:8b:7e:6c:16:34:11:
         5f:fa:b6:f9:a8:41:0c:27:07:39:3b:c6:dd:f0:70:af:12:84:
         cd:ad:b7:9c:9e:38:6f:5d:47:a3:fa:8e:76:0e:a0:9f:ab:71:
         2c:87:e1:55:39:19:e1:28:55:d6:3d:96:ad:9b:28:4e:73:51:
         40:47:77:05:fe:98:65:0c:6d:51:e4:9f:21:a4:73:cc:5c:d3:
         f4:a5:da:0e:56:bc:63:93:63:c6:8a:66:23:2e:0d:57:97:bf:
         db:fe:e4:aa:57:6b:95:dc:c7:91:c5:19:ed:53:2d:65:cb:bb:
         b4:41:ea:b3:6a:b6:52:7d:ed:45:26:7d:02:53:a0:0a:36:d9:
         26:1f:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:22 2025 by rpki-client