Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa
File:                     5721127d-008f-3a20-84b2-3b906f78d4ed.roa (raw, json)
Hash identifier:          FBl174Vw5AfFJI4/3mFo2oC5m1l1s0QbP3ealQ+C/78=
Subject key identifier:   FD:EC:DD:3C:6F:BF:ED:C5:5C:32:17:79:27:40:CE:9E:A3:34:DE:FA
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BB7770F3B831C068644A80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     32381
IP address blocks:        207.126.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:77:70:f3:b8:31:c0:68:64:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a81931f8-12eb-41ce-9fc1-640495006f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:08:d8:07:1c:6c:56:fb:73:ab:be:ab:51:
                    2a:40:35:30:d0:99:19:14:b7:61:94:e9:59:0b:76:
                    98:44:78:4d:81:a8:63:b0:27:c6:7a:77:67:58:0e:
                    93:84:9e:ca:a4:c6:ec:da:ea:fb:92:ae:98:25:92:
                    6f:91:af:63:33:22:7d:9b:fd:de:0c:9a:88:f8:d0:
                    5b:17:60:3e:5d:5c:43:2f:9e:3f:16:df:8b:22:68:
                    c7:69:17:a5:26:da:f0:74:6b:85:a0:3c:7b:7a:20:
                    d9:a5:5e:74:83:87:6a:52:b3:54:29:23:d6:44:3d:
                    d1:aa:32:86:0d:58:d2:80:21:41:4e:8e:5c:27:db:
                    ce:ca:cf:15:92:32:05:34:b7:cd:68:83:61:66:19:
                    70:56:33:21:f6:42:87:08:38:81:70:ae:50:73:4d:
                    99:9c:32:c9:1b:62:1f:ce:68:51:1d:ad:f8:0c:20:
                    af:30:2b:b6:59:05:06:f8:46:67:bb:39:2f:84:cb:
                    aa:35:54:e8:87:d4:20:68:f8:d5:70:10:e5:29:be:
                    a3:72:d3:4e:fb:8c:16:e6:cc:ad:ce:b4:41:05:cd:
                    b2:38:f9:fe:35:59:b9:8e:d7:31:35:68:e3:8e:71:
                    e8:14:24:e0:83:96:84:59:bc:ac:c0:b3:81:c8:7b:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:DD:3C:6F:BF:ED:C5:5C:32:17:79:27:40:CE:9E:A3:34:DE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:e4:09:05:04:da:7b:22:1d:7e:77:95:f2:3e:a5:6b:3b:
         9f:ae:a0:de:3e:51:cd:01:18:48:df:d3:4f:42:bc:6c:e1:8c:
         04:1d:fd:c7:f0:9d:74:f1:ed:2a:a5:3e:f2:9b:c5:85:b9:1d:
         b0:f8:58:82:1a:2b:e8:94:b2:96:6f:89:b2:42:2f:7f:85:30:
         86:b7:9c:41:ed:a2:b2:83:16:22:6e:74:15:fd:69:e1:40:a0:
         34:37:e9:00:92:cf:7b:91:6c:e7:55:18:6c:63:20:04:07:99:
         73:19:31:73:55:d3:b7:36:cd:1c:aa:34:d1:f0:ee:4d:c3:c4:
         b5:d0:3e:10:bb:95:5d:a1:42:02:90:68:ca:d3:61:4a:69:cd:
         78:4c:1c:66:5a:86:d4:10:03:aa:62:f9:22:bd:ff:a6:68:36:
         fe:20:05:3a:39:f1:e4:2d:6e:9e:f9:1c:90:33:5d:64:84:6b:
         1f:b2:09:e9:37:09:57:0f:22:88:2f:f9:d3:e1:d3:56:a8:fd:
         1a:4a:cb:0a:f8:c2:af:9f:bc:14:67:3e:44:03:34:ad:6c:a4:
         39:3e:a2:b3:00:40:b6:c4:ea:ce:e2:18:ba:b0:a1:d3:9c:54:
         84:e0:53:aa:9d:43:6e:b1:38:cd:17:8a:56:93:f9:db:9e:5a:
         83:4c:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:24 2025 by rpki-client