Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa
File:                     e819445d-361a-387d-b566-8a4e051fa91e.roa (raw, json)
Hash identifier:          O7AV0PvJGHeAe9jVO6kQUDAG68w+wApRj65WSAetTYE=
Subject key identifier:   A1:ED:87:F3:D9:0D:85:1C:B4:DB:F3:A3:24:53:6E:8B:84:D5:15:57
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285849A4BAC78A3A184EF081EF8C00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     32381
IP address blocks:        207.126.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c7:8a:3a:18:4e:f0:81:ef:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=00f460ac-3f59-43c3-a71b-1d4e33b9cce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:78:c4:17:c5:23:ca:34:a5:c5:b5:ac:10:
                    6f:04:3c:3d:a2:32:88:41:7e:65:f8:7e:fa:a2:f7:
                    bf:2d:d0:92:a9:f1:ce:9b:9e:55:09:9d:a8:4d:3a:
                    c4:03:18:28:35:5f:83:a5:ad:a9:3f:66:fa:eb:22:
                    a9:58:42:3c:d0:6b:d5:c5:21:74:f4:3c:ae:23:62:
                    04:6d:82:96:bd:37:69:39:fe:03:21:49:3d:62:58:
                    e3:8e:c3:9c:00:ec:fd:75:00:d1:2f:4b:6d:8f:cc:
                    a6:b6:0c:a5:ff:a9:38:af:fb:bb:b6:a5:47:f1:fa:
                    cd:c6:70:f4:42:7c:f9:79:34:4d:fc:35:18:c3:e7:
                    e8:fc:04:5e:ae:f2:b7:75:ba:30:74:6e:01:cb:53:
                    a2:a8:42:fa:ba:fb:d5:80:55:6e:bf:4d:2b:36:0a:
                    d2:f9:96:b4:d3:73:50:d9:8f:d4:ac:c4:a2:14:f3:
                    67:e6:9c:17:c7:c4:4c:8f:7a:3d:61:af:8e:58:d5:
                    de:a6:41:86:18:a8:d9:1d:1f:3a:eb:70:6e:bd:75:
                    15:64:71:d4:b1:e3:f7:3d:4c:be:91:61:e9:61:06:
                    d4:0c:95:86:fc:e7:86:1d:7e:cf:96:ec:a4:56:7e:
                    cc:05:86:9d:d5:44:80:b2:cf:65:8b:89:0a:2b:75:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:87:F3:D9:0D:85:1C:B4:DB:F3:A3:24:53:6E:8B:84:D5:15:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e819445d-361a-387d-b566-8a4e051fa91e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:21:a1:88:7c:50:b5:d6:96:51:ab:29:87:ad:23:37:21:
         b5:e8:66:29:db:ad:3d:5f:68:88:e1:74:d2:db:c6:79:df:76:
         01:88:06:f7:32:96:16:0d:dc:f6:03:e4:a6:ca:e2:13:7e:8d:
         d4:3e:22:ba:59:7d:94:62:f8:fd:3b:81:c3:32:16:b9:50:03:
         5e:87:01:d7:e8:a1:0f:3e:45:14:a2:cc:4e:18:1b:3d:d4:6a:
         e5:fb:b8:8c:a9:71:e9:fa:60:96:c0:ac:26:c2:bc:d7:67:e7:
         00:af:a0:a5:fa:89:1b:fa:2e:ff:ba:4e:c0:74:ea:33:24:c6:
         90:a6:d6:70:63:6d:a3:db:e6:40:3c:ed:71:b9:88:13:ef:21:
         64:8d:c6:4c:94:7a:83:52:0d:33:55:a5:3b:4f:7b:95:2f:23:
         07:ee:fe:14:44:59:92:80:9b:d2:00:2c:db:5f:df:f6:08:af:
         a5:3d:b8:64:90:77:2e:00:f6:03:54:d5:3e:fd:42:e8:99:d1:
         6b:81:55:d2:54:28:33:98:79:34:ef:9e:a8:92:28:eb:e9:b0:
         09:27:ae:af:68:29:fa:02:67:f4:22:c4:29:cb:80:a8:cb:67:
         86:86:8b:7c:cc:d8:40:73:b7:19:1f:f1:da:4a:41:0d:4b:48:
         55:b7:c8:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuseKOhhO8IHvjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MDBmNDYwYWMtM2Y1OS00M2MzLWE3MWItMWQ0ZTMzYjljY2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CR4xBfFI8o0pcW1rBBvBDw9ojKIQX5l+H76
ove/LdCSqfHOm55VCZ2oTTrEAxgoNV+Dpa2pP2b66yKpWEI80GvVxSF09DyuI2IE
bYKWvTdpOf4DIUk9YljjjsOcAOz9dQDRL0ttj8ymtgyl/6k4r/u7tqVH8frNxnD0
Qnz5eTRN/DUYw+fo/ARervK3dbowdG4By1OiqEL6uvvVgFVuv00rNgrS+Za003NQ
2Y/UrMSiFPNn5pwXx8RMj3o9Ya+OWNXepkGGGKjZHR8663BuvXUVZHHUseP3PUy+
kWHpYQbUDJWG/OeGHX7PluykVn7MBYad1USAss9li4kKK3Vz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHth/PZDYUctNvzoyRTbouE1RVXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZTgxOTQ0NWQtMzYxYS0z
ODdkLWI1NjYtOGE0ZTA1MWZhOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0+IaGIfFC11pZRqymHrSM3IbXoZinbrT1faIjhdNLbxnnfdgGIBvcy
lhYN3PYD5KbK4hN+jdQ+IrpZfZRi+P07gcMyFrlQA16HAdfooQ8+RRSizE4YGz3U
auX7uIypcen6YJbArCbCvNdn5wCvoKX6iRv6Lv+6TsB06jMkxpCm1nBjbaPb5kA8
7XG5iBPvIWSNxkyUeoNSDTNVpTtPe5UvIwfu/hREWZKAm9IALNtf3/YIr6U9uGSQ
dy4A9gNU1T79QuiZ0WuBVdJUKDOYeTTvnqiSKOvpsAknrq9oKfoCZ/QixCnLgKjL
Z4aGi3zM2EBztxkf8dpKQQ1LSFW3yGk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:58:40 2025 by rpki-client