Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0260ae70-3c18-385b-a668-ac1aa934c472.roa
File:                     0260ae70-3c18-385b-a668-ac1aa934c472.roa (raw, json)
Hash identifier:          6mrYA/dGDxL3oymhCuLniHD0YV7sAwPbwXBvlSu4Egw=
Subject key identifier:   B1:93:D9:94:D6:B3:2D:16:B2:8D:68:11:F3:E1:5C:CE:9C:21:B1:DA
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BABB583F03845D00B88660
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0260ae70-3c18-385b-a668-ac1aa934c472.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        207.126.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:bb:58:3f:03:84:5d:00:b8:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=39869e4a-75dc-4b62-9fd7-f01c7c63ae5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:8c:2d:d1:b8:bf:39:3b:cb:64:6e:e4:f9:
                    e5:e4:bb:ff:04:08:8b:e2:bb:4f:34:ba:50:55:96:
                    c7:34:2d:cd:72:ec:cf:85:e1:54:e4:ba:a9:e1:c4:
                    fc:c5:1d:e2:b0:de:08:b5:d0:f5:7b:e7:69:00:2f:
                    30:74:37:68:58:76:93:1c:7a:9c:40:c8:f1:f6:8e:
                    d5:7b:a5:b7:6f:31:ca:ed:6d:2d:fc:60:f9:17:ce:
                    5b:ed:f8:75:00:50:70:80:8b:81:87:b3:d1:79:7d:
                    42:e0:7e:3d:bf:87:ce:97:d8:c7:1b:26:db:8c:e6:
                    ee:0c:b8:17:39:51:a0:69:fa:9f:e6:a2:6a:d4:b8:
                    70:ea:cb:1c:95:d2:1e:65:70:0c:cc:ca:8e:6d:10:
                    41:29:2a:d1:01:12:3e:5d:02:70:a6:4e:e0:9f:f5:
                    b0:c2:c5:3a:a7:f6:19:cf:89:c1:af:5a:b4:1b:5c:
                    85:11:0e:ae:03:cb:c6:97:5e:eb:20:10:c4:34:53:
                    0d:20:5d:d7:a6:b1:8d:86:e2:0f:8b:11:aa:9c:be:
                    15:76:72:8a:8f:89:25:c8:22:0a:ea:7b:49:c1:b8:
                    94:e1:95:23:a3:76:c7:b3:07:8c:0b:08:01:6e:53:
                    cd:8a:e5:73:b3:bb:57:5f:84:21:79:02:e5:07:81:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:D9:94:D6:B3:2D:16:B2:8D:68:11:F3:E1:5C:CE:9C:21:B1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0260ae70-3c18-385b-a668-ac1aa934c472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:dc:0e:62:93:7b:a3:da:9b:6f:2d:68:f5:17:7e:43:64:b3:
         9b:62:f2:ec:08:a3:7d:78:c0:d6:6b:0c:1c:59:7d:60:90:33:
         51:35:39:a5:f7:01:8f:2b:aa:93:4c:2b:0e:c8:3d:5c:68:0d:
         18:cc:f3:75:26:98:04:a5:c8:5a:68:6c:9a:da:e8:4a:66:74:
         7d:00:cd:c4:2d:04:08:1b:f7:7f:96:89:f8:b0:25:7e:eb:7a:
         fe:66:87:41:a1:6c:e4:07:dd:f6:49:f1:37:50:32:d8:20:e1:
         d1:66:be:da:8f:15:e3:3c:89:4d:f6:df:45:9d:1f:be:1e:cb:
         77:7f:a6:df:c8:a2:1e:5e:9e:fd:7d:ce:53:36:68:26:6d:2c:
         0c:92:6e:cb:92:ba:6a:4c:2d:1a:0a:d2:f2:28:19:c1:44:3b:
         54:c9:1d:79:18:24:f2:b3:fd:9f:fd:68:a8:0c:ea:e9:b3:5d:
         09:cb:a5:7c:cb:8e:84:d0:fe:df:b5:7e:0b:4d:59:93:f4:37:
         9e:14:fd:07:1a:dd:c5:b4:74:84:7f:a9:e6:78:09:08:1b:4c:
         00:cd:6d:c3:99:9a:3a:9b:5c:47:72:ac:10:c4:7c:ea:cc:18:
         bc:1b:d0:d3:8b:3f:6f:01:f0:8c:fd:48:28:d5:72:f1:05:4b:
         6a:7b:0e:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurtYPwOEXQC4hmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
Mzk4NjllNGEtNzVkYy00YjYyLTlmZDctZjAxYzdjNjNhZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnSMLdG4vzk7y2Ru5Pnl5Lv/BAiL4rtPNLpQ
VZbHNC3NcuzPheFU5Lqp4cT8xR3isN4ItdD1e+dpAC8wdDdoWHaTHHqcQMjx9o7V
e6W3bzHK7W0t/GD5F85b7fh1AFBwgIuBh7PReX1C4H49v4fOl9jHGybbjObuDLgX
OVGgafqf5qJq1Lhw6sscldIeZXAMzMqObRBBKSrRARI+XQJwpk7gn/WwwsU6p/YZ
z4nBr1q0G1yFEQ6uA8vGl17rIBDENFMNIF3XprGNhuIPixGqnL4VdnKKj4klyCIK
6ntJwbiU4ZUjo3bHsweMCwgBblPNiuVzs7tXX4QheQLlB4F23QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGT2ZTWsy0Wso1oEfPhXM6cIbHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvMDI2MGFlNzAtM2MxOC0z
ODViLWE2NjgtYWMxYWE5MzRjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz36YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHcDmKTe6Pam28taPUXfkNks5ti8uwIo314wNZrDBxZfWCQM1E1OaX3
AY8rqpNMKw7IPVxoDRjM83UmmASlyFpobJra6EpmdH0AzcQtBAgb93+WifiwJX7r
ev5mh0GhbOQH3fZJ8TdQMtgg4dFmvtqPFeM8iU3230WdH74ey3d/pt/Ioh5env19
zlM2aCZtLAySbsuSumpMLRoK0vIoGcFEO1TJHXkYJPKz/Z/9aKgM6umzXQnLpXzL
joTQ/t+1fgtNWZP0N54U/Qca3cW0dIR/qeZ4CQgbTADNbcOZmjqbXEdyrBDEfOrM
GLwb0NOLP28B8Iz9SCjVcvEFS2p7DuE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:48:57 2025 by rpki-client