Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa
File:                     358dc235-bb9e-3453-8c8b-71636611183c.roa (raw, json)
Hash identifier:          RrA7uxIKl9AqnU+oGRvHcloACnjTnmFWbZ+dBpiGQV0=
Subject key identifier:   68:70:DC:C2:24:CF:92:04:27:E4:20:9C:2E:12:5B:14:5A:4E:49:2C
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BB7765888823C50754B5E0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        207.126.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:77:65:88:88:23:c5:07:54:b5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fd551936-206c-4e54-879b-000d9357b64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:af:d4:0a:e7:b2:20:3f:99:9b:6e:74:52:
                    bc:cc:86:46:ed:07:0d:56:90:a8:ad:b1:a0:97:33:
                    13:5a:fc:7c:d7:fb:d5:ae:5f:53:a6:7e:5a:07:ca:
                    08:18:3f:55:40:f7:0f:46:71:6b:b5:e3:50:f6:2f:
                    81:f7:c0:70:cc:4d:27:11:ca:18:69:3f:5a:4e:02:
                    e5:46:23:17:11:ff:b9:01:b6:93:c6:df:eb:d2:32:
                    68:5b:fc:52:0d:fc:eb:37:36:7f:4f:6f:36:9d:ce:
                    85:6d:72:a9:e2:ff:b3:3f:23:11:62:0c:ab:6e:91:
                    93:f9:95:6f:30:41:de:1e:e7:41:ef:7c:e3:18:d9:
                    08:18:6c:8f:d7:2d:8d:8d:ff:41:0e:1b:04:3e:7c:
                    64:9e:7e:0f:19:94:9d:6f:46:70:3a:08:56:82:6f:
                    ea:f2:37:c9:43:f4:43:85:b7:e5:80:e5:74:fd:57:
                    db:40:a0:bc:ea:e5:6d:eb:6a:c7:d2:05:07:56:49:
                    ee:35:0d:04:48:44:dc:ff:10:d3:20:8d:42:26:d5:
                    75:10:2d:b1:29:32:88:95:af:14:5e:22:ed:55:b0:
                    49:1f:38:d9:5a:57:ed:e0:2b:2e:b1:fd:82:bc:65:
                    e9:27:4e:44:a1:33:2c:a6:1a:f3:b6:46:ec:83:22:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:70:DC:C2:24:CF:92:04:27:E4:20:9C:2E:12:5B:14:5A:4E:49:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/358dc235-bb9e-3453-8c8b-71636611183c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:3b:aa:8f:be:d7:b3:32:2d:f4:78:6e:9e:02:69:ce:e1:
         43:9d:7f:9b:7c:95:ec:eb:cc:0d:b4:cd:ac:0e:e9:5b:7c:ba:
         27:b8:db:c8:a9:fd:a3:1e:bb:e3:40:bd:37:e3:38:80:84:13:
         46:d4:02:e1:38:22:6e:ec:ec:1d:0f:41:d4:8d:0f:ec:62:28:
         bd:81:b6:1d:c6:c7:32:bd:f3:7e:c0:f7:01:a7:b6:8a:ee:f5:
         e2:79:b8:11:d3:0d:a6:4f:d8:bc:7d:44:47:05:a2:e2:85:80:
         f8:0b:0a:34:9c:45:77:5f:5b:46:72:bc:ab:28:ad:d2:cf:78:
         6e:67:6d:97:a4:03:5e:9d:8d:3a:37:7e:ed:61:66:0d:8f:78:
         e5:8c:f1:d5:f5:bb:98:af:a7:70:59:88:63:ca:13:b1:9f:b4:
         3e:3f:9e:81:64:aa:d0:65:70:71:f6:a6:14:f4:cd:bb:06:5a:
         9e:e0:62:c8:5c:41:2a:ff:1e:da:9a:f2:39:8a:8f:ef:de:63:
         4a:8c:b2:1a:ec:69:a6:a7:c6:61:0a:b0:9e:93:7d:cc:c8:25:
         d8:d9:df:1e:f7:b9:28:4c:97:31:fe:a9:f5:c8:2e:52:cf:6a:
         ea:4d:0e:d5:9b:67:a9:2d:2c:fc:d7:58:d5:b7:62:8d:a6:b6:
         98:27:83:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3dliIgjxQdUteAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZmQ1NTE5MzYtMjA2Yy00ZTU0LTg3OWItMDAwZDkzNTdiNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDyv1ArnsiA/mZtudFK8zIZG7QcNVpCorbGg
lzMTWvx81/vVrl9Tpn5aB8oIGD9VQPcPRnFrteNQ9i+B98BwzE0nEcoYaT9aTgLl
RiMXEf+5AbaTxt/r0jJoW/xSDfzrNzZ/T282nc6FbXKp4v+zPyMRYgyrbpGT+ZVv
MEHeHudB73zjGNkIGGyP1y2Njf9BDhsEPnxknn4PGZSdb0ZwOghWgm/q8jfJQ/RD
hbflgOV0/VfbQKC86uVt62rH0gUHVknuNQ0ESETc/xDTII1CJtV1EC2xKTKIla8U
XiLtVbBJHzjZWlft4Csusf2CvGXpJ05EoTMsphrztkbsgyKrawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhw3MIkz5IEJ+QgnC4SWxRaTkksMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvMzU4ZGMyMzUtYmI5ZS0z
NDUzLThjOGItNzE2MzY2MTExODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyVO6qPvtezMi30eG6eAmnO4UOdf5t8lezrzA20zawO6Vt8uie428ip
/aMeu+NAvTfjOICEE0bUAuE4Im7s7B0PQdSND+xiKL2Bth3GxzK9837A9wGntoru
9eJ5uBHTDaZP2Lx9REcFouKFgPgLCjScRXdfW0ZyvKsordLPeG5nbZekA16djTo3
fu1hZg2PeOWM8dX1u5ivp3BZiGPKE7GftD4/noFkqtBlcHH2phT0zbsGWp7gYshc
QSr/Htqa8jmKj+/eY0qMshrsaaanxmEKsJ6TfczIJdjZ3x73uShMlzH+qfXILlLP
aupNDtWbZ6ktLPzXWNW3Yo2mtpgng7g=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:03:19 2025 by rpki-client