Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f3638da5-d309-3cdb-a8e8-8ca4523ca526.roa
File:                     f3638da5-d309-3cdb-a8e8-8ca4523ca526.roa (raw, json)
Hash identifier:          VL0u7lAPqM7kfSwZgWDxr/Xxml7rV8vwApKVHw2qWbI=
Subject key identifier:   E9:0E:96:9B:FF:41:3A:55:80:F7:64:68:A0:01:B6:5B:97:4B:C9:3D
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285848C5821FBC48B022FC49DDBBC0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f3638da5-d309-3cdb-a8e8-8ca4523ca526.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        207.126.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:1f:bc:48:b0:22:fc:49:dd:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=3f8619ef-4a66-4f37-90c0-3fe2d7ce630b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:bb:40:04:77:73:a5:a6:18:08:56:bc:b5:
                    41:45:fe:15:e4:15:fc:30:a8:a9:e5:fd:29:ed:f2:
                    10:bb:c2:d8:99:86:e6:ca:c2:c3:14:d2:e0:47:d2:
                    e3:ca:21:10:c1:68:ad:a7:a7:af:e4:c1:48:bb:33:
                    a7:ef:66:ee:1e:10:19:7a:47:82:bc:1e:97:de:35:
                    92:23:1b:4a:5f:75:a7:2b:0a:9e:cd:7d:d3:30:a8:
                    02:67:ff:91:80:26:78:e0:62:12:2f:62:f6:7d:bf:
                    d4:59:66:fe:27:69:55:0e:af:5b:97:63:02:18:93:
                    f0:29:4f:a4:85:06:71:d0:8a:37:cf:6e:31:bb:0a:
                    ed:1c:37:a3:6d:a2:24:62:35:43:b4:55:86:55:20:
                    2c:f9:e2:b4:df:40:59:ca:7f:89:76:38:f2:3f:30:
                    ef:62:5c:f9:4a:52:ac:24:87:c4:18:a4:0e:39:82:
                    f7:4f:91:ef:9f:08:7c:3e:9b:58:06:35:6c:77:fc:
                    bc:fa:af:f7:ef:9b:10:92:86:76:36:52:0d:21:a9:
                    6c:79:97:70:05:5a:7c:95:c5:d3:36:26:2a:e7:27:
                    dc:35:52:89:bf:de:e9:f7:fd:b9:29:ef:62:e9:c9:
                    56:03:9a:13:30:8d:d6:7b:90:e2:db:5a:e4:53:65:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:96:9B:FF:41:3A:55:80:F7:64:68:A0:01:B6:5B:97:4B:C9:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f3638da5-d309-3cdb-a8e8-8ca4523ca526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:42:d4:2b:35:c3:2e:fc:20:4b:af:b0:42:c4:98:c1:21:
         3d:82:bc:23:02:46:32:9f:5f:84:0d:c6:23:77:a9:41:e3:47:
         ba:8a:ac:65:80:35:63:07:da:11:5d:7c:14:ff:81:41:02:14:
         90:ec:b5:1b:7f:d3:0b:39:97:d1:f8:1d:7e:b6:57:bc:77:3c:
         7f:33:56:59:4d:3c:6c:fe:2a:4e:15:94:6d:62:b4:63:bf:39:
         c8:4e:48:74:72:9a:ba:08:87:b7:e8:ae:e8:b8:62:35:7d:73:
         b1:ed:80:ac:48:29:58:d2:57:24:ec:fe:ad:8d:de:64:ff:e8:
         58:5a:20:2a:b9:f5:32:31:4a:8d:4a:27:93:b9:db:d2:5d:32:
         7e:88:64:f9:63:42:56:7e:7e:f6:49:b4:77:94:81:67:c8:8b:
         da:4a:db:e1:76:ba:2f:13:d2:db:29:8f:be:d2:95:7b:43:8f:
         0e:be:53:7e:f2:3e:df:1d:5c:bd:ac:17:0d:e8:77:a6:31:17:
         4d:91:56:99:1d:9e:4a:c7:1f:c3:04:8e:89:30:02:b0:21:0d:
         81:35:01:95:6d:98:7e:16:d9:c6:de:2c:51:31:5d:9b:8d:a9:
         c8:5c:1b:a2:8d:f3:a2:2b:e1:37:99:37:bc:4f:f7:e3:3b:ab:
         f5:39:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:48:05 2025 by rpki-client