Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f566c900-31f2-3c37-a363-9bf3a4219a47.roa
File:                     f566c900-31f2-3c37-a363-9bf3a4219a47.roa (raw, json)
Hash identifier:          Cako50K4blATvQpsXSRJ6dsslxyV2RZHKtEERUGAmus=
Subject key identifier:   D3:F0:F2:BC:8D:00:E8:F0:D7:4B:2D:C0:5D:FA:C4:1C:86:D9:B4:53
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F432858455F03635F375CFC649F1EEF00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f566c900-31f2-3c37-a363-9bf3a4219a47.roa
Signing time:             Fri 29 Mar 2024 18:34:42 +0000
ROA not before:           Fri 29 Mar 2024 18:34:42 +0000
ROA not after:            Thu 27 Jun 2024 18:34:42 +0000
asID:                     36040
IP address blocks:        207.126.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:03:63:5f:37:5c:fc:64:9f:1e:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 29 18:34:42 2024 GMT
            Not After : Jun 27 18:34:42 2024 GMT
        Subject: CN=af533a15-b688-48d1-af08-9c2b103e6c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:15:82:f5:2e:3b:79:0c:d5:38:1c:8c:b3:
                    c1:2c:75:d2:57:ac:67:96:03:63:ff:f6:b9:3e:f9:
                    b7:dd:33:89:70:60:7b:7f:01:f1:1b:ec:0c:b1:4f:
                    73:86:10:4a:77:e5:78:fd:aa:c2:c4:c2:46:2e:84:
                    8e:50:07:18:93:eb:14:57:40:f0:25:0b:69:72:44:
                    87:90:27:20:ae:56:c7:6d:0a:6e:f9:8f:5b:47:84:
                    57:dc:2b:62:95:d1:8c:ab:d5:77:f8:89:91:14:02:
                    bb:b2:9a:a7:f3:36:7b:08:00:6d:be:21:b4:74:03:
                    3a:95:30:ed:f6:83:da:96:1b:50:15:af:e6:8e:32:
                    fe:48:51:05:ea:34:84:5d:98:93:ee:e1:aa:36:45:
                    6e:bd:97:c2:8d:1d:3d:a6:23:68:33:85:99:5b:de:
                    4b:ba:29:6c:9a:a9:cd:e3:b0:0d:1e:03:93:63:48:
                    5d:72:c0:2f:5b:30:d4:99:ba:bd:6a:68:9d:44:f1:
                    95:67:3f:3a:10:1b:ac:b0:9f:cd:79:39:1a:58:0f:
                    6e:b5:2d:c4:7f:7b:49:c8:f8:24:96:c1:a8:eb:05:
                    f7:d1:22:82:6d:d1:0d:60:a7:7f:72:d9:92:68:a1:
                    a9:03:52:bf:2e:17:7a:0c:a6:a4:ce:49:7f:80:8c:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:F2:BC:8D:00:E8:F0:D7:4B:2D:C0:5D:FA:C4:1C:86:D9:B4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/f566c900-31f2-3c37-a363-9bf3a4219a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:65:90:35:53:31:47:15:9d:8d:68:d6:e5:5a:5d:85:e7:60:
         ac:95:49:23:7f:46:70:aa:d3:04:28:fa:c3:47:20:78:47:b5:
         e7:82:c7:a6:77:c2:a4:7f:71:04:78:dc:84:22:05:22:34:80:
         53:84:89:7a:df:86:cc:56:81:39:45:ea:a1:45:39:1c:52:d2:
         d0:b9:9c:97:42:66:2d:3a:20:03:a9:62:cc:c5:9a:78:4a:7c:
         2c:c3:b4:a2:7c:ad:55:4e:2f:0d:cf:41:56:5e:25:86:17:65:
         90:83:a2:bd:fe:74:fa:5b:0c:aa:70:83:0c:ed:21:ef:1d:77:
         db:12:af:68:47:a8:b0:a7:74:48:fd:90:80:98:4f:eb:90:fe:
         18:39:e4:7a:e4:5e:25:21:e7:79:5f:12:fb:fe:7d:d6:44:4e:
         d8:d6:bd:b8:c5:1d:b4:68:b5:e2:f4:1f:a7:4c:95:59:30:24:
         57:ab:cc:53:e7:32:f3:4d:14:e8:13:3a:83:9a:50:23:91:04:
         cc:6b:7c:c6:d0:cf:13:3d:dd:e5:01:ae:0f:d4:e7:8f:29:4a:
         a0:25:89:c3:16:d2:3f:1c:02:d7:02:1f:91:4a:31:2d:90:d8:
         51:fc:94:d6:8e:c7:04:cb:c5:3c:d6:92:81:32:7e:ae:8b:f6:
         9c:51:c4:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfA2NfN1z8ZJ8e7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI0MDMyOTE4MzQ0MloXDTI0MDYyNzE4MzQ0MlowLzEtMCsGA1UEAxMk
YWY1MzNhMTUtYjY4OC00OGQxLWFmMDgtOWMyYjEwM2U2YzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFwVgvUuO3kM1TgcjLPBLHXSV6xnlgNj//a5
Pvm33TOJcGB7fwHxG+wMsU9zhhBKd+V4/arCxMJGLoSOUAcYk+sUV0DwJQtpckSH
kCcgrlbHbQpu+Y9bR4RX3CtildGMq9V3+ImRFAK7spqn8zZ7CABtviG0dAM6lTDt
9oPalhtQFa/mjjL+SFEF6jSEXZiT7uGqNkVuvZfCjR09piNoM4WZW95LuilsmqnN
47ANHgOTY0hdcsAvWzDUmbq9amidRPGVZz86EBussJ/NeTkaWA9utS3Ef3tJyPgk
lsGo6wX30SKCbdENYKd/ctmSaKGpA1K/Lhd6DKakzkl/gIybfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPw8ryNAOjw10stwF36xByG2bRTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZjU2NmM5MDAtMzFmMi0z
YzM3LWEzNjMtOWJmM2E0MjE5YTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFlkDVTMUcVnY1o1uVaXYXnYKyVSSN/RnCq0wQo+sNHIHhHteeCx6Z3
wqR/cQR43IQiBSI0gFOEiXrfhsxWgTlF6qFFORxS0tC5nJdCZi06IAOpYszFmnhK
fCzDtKJ8rVVOLw3PQVZeJYYXZZCDor3+dPpbDKpwgwztIe8dd9sSr2hHqLCndEj9
kICYT+uQ/hg55HrkXiUh53lfEvv+fdZETtjWvbjFHbRoteL0H6dMlVkwJFerzFPn
MvNNFOgTOoOaUCORBMxrfMbQzxM93eUBrg/U548pSqAlicMW0j8cAtcCH5FKMS2Q
2FH8lNaOxwTLxTzWkoEyfq6L9pxRxNs=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:08 2024 by rpki-client on console-fra.rpki-client.org