Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
File:                     51f2f19f-4253-3216-9f67-f810a90a6463.roa (raw, json)
Hash identifier:          JcZRoLfLZBKxUHDSqK9jMKryMPTeElFncvNzdxRUJ5w=
Subject key identifier:   92:76:08:CD:70:0F:AC:D2:7B:27:E1:BC:1C:45:D6:19:28:F9:25:F8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA7902FB6DD233A18FBB11B80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395075
IP address blocks:        207.253.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:2f:b6:dd:23:3a:18:fb:b1:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6845bdcd-6a29-41c7-a9ca-7e2288da7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:fd:05:78:2a:b3:75:91:92:2a:25:74:2c:
                    b3:c5:f2:49:08:68:01:a8:d7:86:e2:bf:5f:f4:c3:
                    07:5e:42:c3:bb:1e:f4:07:85:f2:1e:f2:2b:dc:c7:
                    af:c6:5b:45:10:27:fa:55:fc:b6:d9:da:80:73:cb:
                    a3:b6:cd:6f:37:2d:8c:41:3e:3f:82:2a:f0:0b:c3:
                    5f:c6:19:6d:a0:d2:95:e1:3b:d5:d7:77:ae:ed:8e:
                    56:f2:4b:8e:c0:2f:3b:5d:cd:fc:9e:58:f8:1b:80:
                    43:33:e3:be:5e:3d:ec:d4:f9:3d:49:cc:96:9b:e1:
                    4a:20:51:0c:48:e7:e2:f3:24:bf:bb:3f:42:73:70:
                    76:1c:60:22:b3:b1:e4:aa:0a:ab:ab:c4:7d:72:5a:
                    20:34:54:bd:87:fc:81:86:07:7b:d0:e5:6d:e8:5a:
                    55:23:2a:71:6e:a9:ef:76:fc:40:42:72:b3:26:59:
                    c3:7b:2c:48:aa:d3:25:59:4d:56:30:29:e9:3e:cf:
                    7e:54:a2:74:27:3e:d7:3b:7e:17:4c:c9:ba:b7:f3:
                    32:50:76:a6:29:0e:9f:7f:17:d0:5b:43:89:73:05:
                    e3:7e:27:81:9e:c6:1b:0a:d5:12:2b:e8:b1:17:c6:
                    ed:d1:32:78:53:0e:eb:0b:34:74:19:74:f5:40:1f:
                    16:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:76:08:CD:70:0F:AC:D2:7B:27:E1:BC:1C:45:D6:19:28:F9:25:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:03:7c:46:b3:25:4b:c1:cb:e8:1d:65:fa:ba:d8:3c:1b:
         84:89:09:68:b7:54:6d:42:95:6d:16:12:46:dd:00:ea:7a:8e:
         79:2f:f5:c7:1a:a5:50:e0:1e:fc:b5:d8:6e:2f:b8:46:c0:5b:
         36:ef:40:55:e9:f9:95:6d:6f:01:07:0d:94:b6:6b:1e:ba:22:
         96:96:c6:f4:07:a6:65:b5:28:78:39:c1:82:f6:33:76:27:cb:
         b1:6f:70:9d:60:9b:9b:22:84:06:11:59:49:91:65:cc:1a:1b:
         6d:89:d2:17:8d:62:0e:55:19:0b:65:62:7b:88:e8:52:88:0b:
         bd:11:af:6e:bc:5a:df:f3:59:19:99:2b:9a:7c:a8:80:db:13:
         2d:91:e0:a2:53:15:a0:85:55:89:bf:d6:04:64:a2:87:ef:ff:
         2a:03:27:d3:92:4f:51:2e:94:0d:14:27:63:8e:f5:fd:75:b9:
         10:73:45:99:b9:ea:5d:da:1e:57:c9:ae:47:11:16:20:4c:b1:
         b3:a9:99:4d:f4:2e:43:ab:48:a3:75:39:1f:4a:1e:d2:92:63:
         00:cf:5d:9f:74:7e:2c:c9:3f:9a:14:87:ef:63:35:b1:61:c7:
         3f:54:31:9b:94:18:26:b2:6b:3a:9b:10:5b:83:19:b9:aa:a7:
         67:2b:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:29 2026 by rpki-client