Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa
File:                     9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa (raw, json)
Hash identifier:          kfDnJSqCCO3PP/Sh+2Do8Yet8N63GboElsKOv8g8aVY=
Subject key identifier:   C9:08:37:60:FA:28:F9:61:40:EC:8E:97:A5:0C:DD:82:47:30:8E:04
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BB7188FCF00F4B3C5699E8
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     32381
IP address blocks:        207.126.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:71:88:fc:f0:0f:4b:3c:56:99:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a334598f-1f6a-4141-9bd3-eb52400d5cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:b9:c7:18:48:c9:be:55:fa:a2:38:a5:ec:
                    82:8a:c5:b0:78:5b:11:2c:6f:ce:12:58:ca:f4:be:
                    7d:76:9f:7a:0c:be:dd:a8:a6:c1:69:a2:25:a3:39:
                    2a:e3:21:ad:02:ee:be:e9:81:04:9f:9f:52:16:6c:
                    76:09:be:5c:8f:1e:db:68:7a:85:e0:cb:89:0e:2c:
                    27:5e:1b:2a:ea:43:69:34:a0:33:66:1f:02:bc:10:
                    e4:80:c1:0e:21:13:71:5a:b0:dd:3d:62:32:70:02:
                    5d:90:b8:c5:a2:5f:06:b1:dc:03:67:a6:24:77:da:
                    ea:9f:29:56:c3:e0:22:fe:ec:33:e9:ca:7b:fb:d3:
                    98:0d:cb:95:2c:6a:a8:a2:2c:7a:bb:2a:e1:8f:39:
                    81:9e:84:de:e7:c7:5e:8b:57:d1:a3:07:2f:0a:d1:
                    6b:14:d8:58:be:50:51:3f:e2:d0:9a:09:f5:7c:f5:
                    27:fb:a4:e4:39:68:ef:ed:30:20:50:2b:e0:61:9d:
                    7a:ca:cb:f2:10:04:a6:a4:40:3d:0c:c9:82:52:b6:
                    93:02:da:eb:90:26:f9:2e:12:66:5c:55:d5:ec:09:
                    cd:fe:54:82:01:ff:91:ed:1d:76:45:c7:15:ff:17:
                    4e:9d:4a:b8:73:d7:11:24:36:7c:78:04:dc:b7:10:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:37:60:FA:28:F9:61:40:EC:8E:97:A5:0C:DD:82:47:30:8E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/9b53da0c-8608-3d8b-8d3d-d004f282ecf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:60:1c:17:7b:42:2e:b7:33:53:ab:aa:dc:38:5b:73:0d:16:
         cd:69:91:0c:ee:ca:5b:19:ea:ff:1e:af:cf:86:9f:8b:9d:b8:
         66:9b:4e:33:a6:27:ce:bc:87:c5:70:34:f7:13:83:ea:fb:a8:
         b6:bd:40:33:8f:f2:f7:8e:51:45:e7:6c:09:98:b1:8d:84:eb:
         82:48:38:88:0e:ae:68:76:b8:99:d5:28:02:f3:93:33:65:31:
         8b:0c:22:3c:a1:d7:c4:59:66:f2:d7:1f:d3:8c:0e:a9:c3:69:
         50:b6:f1:da:c9:b1:e7:bf:45:fd:7d:4d:6d:1c:b8:78:21:71:
         09:e1:8d:4a:41:ce:2e:8d:bd:f1:88:7a:27:95:63:82:de:ca:
         97:4e:c3:4b:72:75:e4:8a:dd:b1:0f:9c:d7:84:0a:07:cc:1c:
         68:73:c6:a4:65:e6:7a:40:52:32:cd:47:fd:08:03:db:32:d9:
         c5:86:b5:f4:7e:78:19:6f:2d:a7:9b:bd:e9:52:9a:12:d1:a0:
         07:38:42:d8:70:11:b2:b7:e2:df:f0:12:23:de:86:3c:07:3c:
         d6:2b:01:fa:9b:e5:f0:bf:68:71:ba:e8:cb:93:fb:da:87:59:
         46:6f:b4:22:f3:3e:ea:2c:f4:2a:d1:74:53:ac:e5:00:38:c0:
         a3:77:6c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:15 2025 by rpki-client