Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
File:                     18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa (raw, json)
Hash identifier:          dsv1S29bCZsUsxOYQ2zTon+51HtCU4JaFh1GBn/lJrI=
Subject key identifier:   B5:78:F1:97:2A:26:D5:16:5F:E1:1F:FE:0A:C4:7D:60:BD:5C:0B:B2
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584AB220D348FB8AC23B7B578480
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     26535
IP address blocks:        207.251.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d3:48:fb:8a:c2:3b:7b:57:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=520f804b-e9e3-4684-9782-d1ab642d0667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6f:ef:62:fd:ce:c1:07:d3:d1:6e:c5:cc:4a:
                    b6:17:c5:9c:61:11:44:50:c9:4a:f2:0d:79:bb:9e:
                    8a:10:85:43:e4:cc:99:49:be:9d:7f:e4:5c:52:8a:
                    c8:bb:cd:cf:b1:0a:78:c8:89:73:33:a7:51:e4:4e:
                    b2:43:42:05:e1:3c:2b:92:07:fd:1c:a3:46:f1:52:
                    0c:d5:ad:ca:0a:47:47:28:a6:e5:bf:09:bb:48:ea:
                    37:8f:fd:5c:6b:9f:73:c4:ef:20:cf:13:92:ae:69:
                    31:e3:cd:24:2c:e7:0f:9f:8f:ec:91:bb:1f:90:54:
                    21:c1:6f:e7:d8:b8:01:cd:ba:84:c2:69:ee:3a:b9:
                    74:6e:41:46:9a:05:c2:75:c8:35:89:96:cd:bf:58:
                    3f:6b:1e:71:7c:58:58:bd:e1:a5:19:6d:86:53:38:
                    08:4d:ad:3f:25:d8:98:62:6d:f4:86:b9:b9:1f:eb:
                    8c:21:c0:d2:47:56:13:68:af:84:55:ed:93:50:b1:
                    f4:37:96:ea:ac:34:48:31:aa:5f:12:b6:8d:11:bc:
                    cd:c3:69:5d:fa:e1:05:8b:45:02:a4:c1:61:22:b7:
                    07:97:0a:ba:04:10:9b:e2:89:d5:1b:5e:de:b6:fa:
                    ea:1d:df:92:a6:4b:32:38:35:ac:81:eb:fb:b0:ee:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:F1:97:2A:26:D5:16:5F:E1:1F:FE:0A:C4:7D:60:BD:5C:0B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/18ad5fd7-ae1c-39d3-9a55-0b3ebfcd0be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:31:6c:aa:02:5d:2d:d3:52:f8:25:74:0a:17:a7:f1:07:5f:
         29:c2:90:2d:e0:74:c6:d9:7d:c2:f3:fd:cb:81:1d:3d:5c:0d:
         c0:fd:f3:f1:53:6a:7d:9b:03:78:24:c0:67:dc:48:29:13:72:
         ae:0b:48:a6:4d:a3:1a:85:99:5f:80:ed:c4:c5:4c:ab:28:c7:
         3c:2e:4a:b3:88:43:5d:c0:9b:ee:56:47:3b:cc:b0:d1:74:8f:
         f6:06:ec:d1:27:a1:75:26:bf:82:53:80:79:58:05:bf:06:cd:
         69:15:a4:4b:57:7f:54:19:c5:60:32:d7:4a:50:6b:ec:97:d8:
         b5:24:3d:6a:b6:2c:29:e5:33:0c:36:87:f8:16:0b:6a:e2:a3:
         88:7a:da:e1:04:95:fb:19:de:b7:a9:48:84:5f:0a:1c:67:49:
         26:f4:12:e0:ad:a9:a5:b0:60:84:9e:fa:38:d2:3a:57:2b:a6:
         9e:9b:14:15:14:ae:de:71:45:cd:a4:d4:c0:18:5d:4c:3b:16:
         03:0f:f2:1b:d8:3d:0b:1c:0c:22:18:71:94:77:dc:e9:07:a0:
         24:4d:a4:29:d2:f6:13:ea:d5:37:16:2e:e9:f9:24:c3:0d:58:
         35:c0:ae:c7:86:51:4f:ba:7a:74:6c:f7:f8:a7:a9:b8:b2:03:
         bb:e4:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:14 2025 by rpki-client