Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/405cd15d-25cd-31ab-8e9d-9afd928a5d33.roa
File:                     405cd15d-25cd-31ab-8e9d-9afd928a5d33.roa (raw, json)
Hash identifier:          nK8yVPMgNz61Vp2YhrwMVXZxj2ggVCn53Y8Tg8FhOiQ=
Subject key identifier:   EF:97:68:85:A0:A8:E9:38:E3:B6:AB:1A:BE:06:9D:FB:04:19:2D:0C
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BB5C0068393C250E1D7D80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/405cd15d-25cd-31ab-8e9d-9afd928a5d33.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        207.126.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:5c:00:68:39:3c:25:0e:1d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ebab3e52-dcd2-4cbc-95a7-1329205c7605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:80:d4:a2:29:ef:d6:24:45:fb:13:97:e6:
                    f0:80:42:13:1d:89:49:3b:ab:89:02:41:60:36:77:
                    ed:76:ea:95:b2:8d:04:ec:6c:a4:bd:56:0a:eb:98:
                    d4:6a:64:5d:b6:85:85:a7:3d:a6:45:e8:63:78:20:
                    46:f9:5c:da:a0:52:8a:60:35:5f:6c:bd:09:6a:82:
                    76:38:0e:97:ed:ec:91:4f:26:62:47:21:5d:58:31:
                    3d:b1:a5:10:9e:09:fe:bf:2c:09:8b:e2:e0:08:57:
                    0c:f4:af:b5:34:c1:55:a7:3a:34:b2:62:94:c7:28:
                    96:05:c5:04:77:18:c8:f3:f1:41:4d:eb:81:5f:31:
                    80:dd:6b:22:b0:de:9c:3a:a1:2a:a9:9b:d6:78:9b:
                    e1:4b:36:52:c6:4f:ab:84:7b:dc:2c:1c:25:4c:66:
                    e1:00:aa:cb:2b:c0:57:60:3a:f8:66:21:47:36:c0:
                    a5:43:98:07:a5:c1:5c:ec:87:55:00:76:f0:51:12:
                    7c:b2:c2:95:bc:0a:b1:01:0f:bc:31:3a:e8:b4:aa:
                    b7:57:7d:71:ba:1d:30:63:88:ff:6a:a4:53:46:da:
                    2a:5d:8b:e4:f6:37:dc:73:4d:0b:90:ec:7f:50:ce:
                    0b:29:4f:5e:ee:d7:be:4a:1a:74:aa:97:64:1e:4e:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:97:68:85:A0:A8:E9:38:E3:B6:AB:1A:BE:06:9D:FB:04:19:2D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/405cd15d-25cd-31ab-8e9d-9afd928a5d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:af:9a:d2:73:f9:cf:ae:71:9f:ee:b9:fe:ec:9b:96:8a:0c:
         49:0c:cb:44:b4:2e:fb:b2:22:94:00:6d:22:ca:5b:e5:13:d4:
         da:31:61:57:90:f1:67:d7:ce:38:61:86:7e:12:c6:82:9d:bb:
         03:53:c8:fb:7a:84:4d:f5:90:20:6c:33:0c:3e:dc:e7:5a:da:
         a9:79:cb:4d:5a:ab:9d:7e:b2:a5:c8:9c:21:fc:1c:b3:e0:6d:
         ae:38:c8:9d:75:10:08:28:62:c5:3e:ac:25:ba:fd:f3:77:fb:
         b5:e6:2b:7f:bf:73:98:ba:90:94:fa:73:5a:f8:7e:2c:ac:44:
         6a:1e:e5:9e:52:d8:a7:d3:9e:cd:ae:db:37:ce:12:17:de:ff:
         8a:10:7f:fe:05:22:85:53:0f:b9:ba:03:b0:91:78:6d:25:cf:
         8b:c6:c2:6f:db:87:51:fc:10:e8:c3:7c:52:6c:35:5f:48:38:
         32:8e:88:a3:05:cd:8e:e3:0d:dc:d0:0b:2d:18:43:44:b3:f9:
         f9:6d:99:8d:3f:94:ac:cb:66:eb:3e:dd:a1:0f:16:b1:95:be:
         83:0b:b6:d0:15:c9:3e:36:5d:89:ec:03:83:e8:82:61:30:b1:
         49:cc:8b:d1:4c:ef:db:a8:d2:f6:24:34:bd:29:0f:3b:9b:17:
         78:ce:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:56:18 2025 by rpki-client