Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0f081f75-ff58-38d2-a970-fe02f314d9d7.roa
File:                     0f081f75-ff58-38d2-a970-fe02f314d9d7.roa (raw, json)
Hash identifier:          Vhu9ZEBM32dHKRxwB4cddtOOGc4zOEjn5M4+u5+0qh4=
Subject key identifier:   63:06:F6:65:81:D2:9B:F4:41:8E:5E:30:1E:0A:C0:E6:1E:F6:63:7E
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A84122712C21330DE66294B40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0f081f75-ff58-38d2-a970-fe02f314d9d7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:27:12:c2:13:30:de:66:29:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0de86b0c-1612-484e-a6ab-6ebc9862f204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:82:d6:0b:32:6f:17:01:a4:73:18:bb:6d:
                    ac:db:c8:73:b2:2d:d0:39:2e:22:0d:2f:62:1a:a7:
                    b9:14:cd:d0:a7:3f:6f:2a:cc:c4:9e:89:fa:e9:83:
                    aa:41:30:61:50:3e:f5:a1:ce:7d:18:39:0b:57:11:
                    0b:26:3a:8d:c5:c1:42:72:17:cf:98:dc:0b:6b:4c:
                    dd:06:33:f3:bb:1e:c6:13:04:72:27:76:66:65:32:
                    7a:56:f1:49:f4:1b:ef:11:03:c0:bc:3a:e2:32:bc:
                    eb:d3:ce:2a:4c:2a:7b:ff:9e:8e:56:cb:55:bc:6a:
                    d5:a5:09:46:0d:06:83:61:48:ee:bc:de:70:1e:8d:
                    09:78:cc:b4:de:4f:f7:54:a2:0b:57:ae:cf:6d:d9:
                    dd:ef:25:10:7b:b2:ed:6b:d8:4a:9c:b4:00:4d:2d:
                    56:04:32:cf:ac:70:0e:2d:7b:73:0f:43:98:5d:9a:
                    fd:43:61:20:f2:b9:6a:71:46:6f:2d:17:40:c3:4d:
                    25:20:81:d8:b8:1b:d8:7c:c0:c6:3a:c4:9f:c6:84:
                    f4:03:00:a8:2b:34:47:da:e5:e3:c4:c6:3d:6b:82:
                    6b:2a:e8:df:dc:08:44:85:60:be:3d:c1:79:4a:6d:
                    9f:59:f3:bf:a1:0c:82:11:e5:66:63:5b:01:e9:4c:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:F6:65:81:D2:9B:F4:41:8E:5E:30:1E:0A:C0:E6:1E:F6:63:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0f081f75-ff58-38d2-a970-fe02f314d9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:38:91:e2:54:09:e2:6f:a6:27:45:84:58:14:9a:ee:b3:
         98:fd:2e:a5:44:01:80:c7:5f:54:89:0f:4d:20:2c:d0:a0:b6:
         0e:ec:52:aa:02:36:38:a0:2a:c2:0c:65:60:58:90:0e:75:69:
         93:61:0a:38:bc:0c:de:6a:4f:b4:7e:91:67:04:0b:37:b7:97:
         be:25:9e:61:e3:9c:4b:a1:d9:fa:25:d7:04:68:dd:10:5f:00:
         55:be:52:fe:db:2c:62:05:d8:25:91:68:60:f7:16:91:66:7f:
         2c:9c:a5:8e:6d:f3:6e:f3:a0:81:8f:64:7a:2d:94:d7:90:a1:
         0c:31:5c:98:79:50:a7:1a:53:fa:07:86:45:8b:10:a5:66:9d:
         61:7a:e8:91:dc:56:6b:49:a9:73:91:c5:94:4d:9a:cc:91:a2:
         ca:eb:9d:62:b3:6f:37:49:2d:00:83:7b:dd:87:ea:7d:3a:c9:
         f8:fd:1f:84:66:64:41:e7:a1:7c:2b:15:c5:61:7f:1d:72:64:
         c6:10:e2:cf:10:3f:9b:76:4a:cf:f4:c1:f7:48:10:4b:b0:fd:
         2b:47:36:b3:3c:ef:bf:0b:b4:4c:79:eb:f3:9d:23:bb:3a:21:
         0d:4e:e9:67:22:d2:fc:ff:97:3b:c6:01:24:0c:23:cd:8b:1d:
         d2:3e:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:45 2025 by rpki-client