Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa
File:                     4c193cc9-50e4-385d-9561-9dffb6e87a24.roa (raw, json)
Hash identifier:          AKdIvHySfpmKvmkzQZpUeWR/8WxYBiWzeGPQAwGFu8A=
Subject key identifier:   2D:7A:FD:99:69:2B:6C:2D:1C:00:C1:6A:E0:2A:AD:EC:31:38:02:2D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584E0700865D0ED7BD68CC0DE400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     22652
IP address blocks:        207.253.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:86:5d:0e:d7:bd:68:cc:0d:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=97cd1e33-290e-46f7-af1e-9e7a463f391a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:e7:6f:44:4e:8d:3c:61:dd:cd:90:91:a5:
                    c2:0d:8b:00:da:00:a0:40:85:90:6c:70:4e:36:ce:
                    be:7d:d2:54:c9:27:03:d0:ed:43:bf:68:3b:c4:1c:
                    24:49:3f:04:7f:ce:0a:d9:43:b3:72:b0:77:bb:ad:
                    d7:26:fa:d6:9d:eb:f9:26:64:9d:c4:ab:c4:bd:f0:
                    f2:b5:61:1b:1b:8c:d2:d6:5c:c1:4e:8a:43:c2:c3:
                    84:f3:d9:85:58:4f:85:33:06:d1:fe:d4:8e:f1:79:
                    92:0a:c9:2e:de:c6:6a:37:71:ad:74:0b:2c:48:65:
                    54:42:5f:a1:ea:ee:38:c6:db:75:43:a1:fc:3d:c8:
                    c3:a4:e2:7f:43:29:4a:db:44:a6:18:1a:2a:7f:87:
                    96:71:76:d0:37:53:71:15:a2:22:eb:60:a3:90:b7:
                    60:61:95:57:8d:9a:02:dc:80:ef:74:d5:c5:72:ee:
                    7d:bc:0b:ac:b2:ad:eb:9f:62:a0:51:d3:d0:34:a9:
                    5b:11:75:7b:6a:4b:d7:43:22:28:74:7f:c8:11:63:
                    66:78:9a:46:77:f8:16:90:e6:3c:5b:c1:34:2d:76:
                    13:38:37:21:45:3d:4b:fb:34:a2:5a:38:a7:32:fd:
                    56:8c:6e:d9:29:30:bd:dc:52:98:14:4f:e9:ee:32:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:FD:99:69:2B:6C:2D:1C:00:C1:6A:E0:2A:AD:EC:31:38:02:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:87:81:94:72:1c:24:42:a1:97:1b:0c:10:b8:0d:8f:d7:6a:
         4f:89:03:17:e0:ab:49:23:f7:35:f8:e5:70:3a:a1:fe:03:38:
         c6:a9:03:2a:96:f1:97:12:c5:64:3e:2f:c3:90:cd:74:54:c0:
         06:16:6b:6b:75:00:d3:27:6c:f1:5f:d6:94:7b:2f:9b:e0:b9:
         5f:f0:47:b6:2e:cf:7b:c9:5a:ef:e2:45:21:5b:a5:64:20:11:
         06:8d:38:56:f8:ce:32:22:56:f0:7b:4e:b0:1f:c2:95:dd:19:
         23:b2:65:9b:66:d3:a4:3f:95:a4:7e:d6:26:23:eb:14:9e:77:
         19:6e:bd:5a:3a:af:39:38:f3:e8:78:0d:32:4b:70:27:38:e5:
         75:de:e5:33:b5:57:c7:a3:7d:9b:e9:a1:17:d8:37:21:70:5c:
         e9:bb:8a:36:30:a9:62:0d:69:7d:ae:3f:fd:1e:76:f6:00:f6:
         af:7c:73:a8:11:48:9a:b9:c8:62:5f:75:a0:dc:09:34:fd:02:
         f3:11:c2:d3:c2:b2:99:6f:66:7d:43:ea:8f:43:85:31:f2:f7:
         9e:0d:aa:5f:f2:f2:25:0d:19:8e:19:61:3a:6e:fa:72:49:8e:
         b9:b1:d6:0b:9a:e2:5d:37:2b:4c:73:53:d2:22:58:32:ef:00:
         e4:de:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:36 2026 by rpki-client