Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
File:                     1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa (raw, json)
Hash identifier:          eZV8iO4JoR1b6ZOngJrgp0kHpduLL4G4bboEPaEnaY4=
Subject key identifier:   C6:74:5B:7B:A7:77:EB:3A:27:99:EC:5A:1B:3F:BD:82:C9:D3:27:42
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841220CB731BB396D7BF4900
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     32381
IP address blocks:        207.126.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:20:cb:73:1b:b3:96:d7:bf:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5faf2ff0-d5a3-4f01-9b95-7c043b334120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:e5:01:b9:02:20:b7:c5:a1:52:7f:11:13:
                    72:aa:0d:e0:14:98:93:0f:de:df:d0:20:8c:94:90:
                    d6:62:f0:b4:15:1c:a1:49:d6:69:a8:53:ce:32:ce:
                    1d:a9:72:82:21:e3:ae:b4:d3:2f:9e:c2:e3:53:de:
                    0b:df:e5:38:53:61:dc:f7:f8:d0:7b:12:d5:eb:44:
                    b4:e6:86:f6:1c:d8:73:68:b3:15:58:ce:9b:be:3a:
                    8d:c2:89:b5:1d:39:df:a4:e3:fa:cf:ac:9d:53:71:
                    07:a5:70:a9:98:0e:45:28:ed:27:4a:87:68:c5:54:
                    3f:2c:0d:0f:25:04:42:f7:e5:21:81:19:c0:ce:dc:
                    c6:96:d8:1b:72:f2:c0:de:e0:94:e5:7d:68:57:13:
                    04:98:73:91:d5:0d:85:03:75:67:1e:dc:3f:a2:4f:
                    61:4c:b3:33:35:8b:2b:7a:2c:22:02:db:f0:e2:a8:
                    1e:f3:92:76:69:77:e5:27:e9:88:37:c8:32:5f:df:
                    aa:41:c5:b1:c5:94:d3:65:e9:e4:38:5f:c8:2b:cd:
                    57:9a:d8:8c:80:c8:46:3f:ac:8d:51:44:1b:9a:f7:
                    7e:1f:cf:bf:bd:58:ac:d1:c9:da:ce:b1:0f:44:8b:
                    97:61:d7:2c:11:2b:39:4f:8a:5b:4e:40:f5:9d:a6:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:5B:7B:A7:77:EB:3A:27:99:EC:5A:1B:3F:BD:82:C9:D3:27:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:65:06:28:e3:87:a2:3d:c1:ed:ff:35:d8:a1:04:07:ac:22:
         0a:3d:5a:38:08:d8:79:f2:9e:ea:2c:35:9d:01:90:c1:bf:0c:
         46:f7:bf:a0:a7:cb:eb:bb:a0:0b:ea:37:29:10:e4:4a:3c:06:
         69:43:59:b7:c4:b2:1c:fd:19:29:3b:2c:39:1f:d1:6d:dd:b6:
         1f:63:ae:d8:c2:87:f4:e5:43:94:66:a6:4b:d8:9a:84:c0:6a:
         76:5d:7d:66:d3:ab:12:33:2a:d9:18:20:7f:67:92:b8:64:13:
         f6:39:79:6f:00:57:70:5e:ff:bf:5f:dc:94:26:40:f0:f1:64:
         58:90:04:07:33:e3:ed:9f:41:eb:12:f3:08:bd:fb:bc:83:ff:
         b2:1b:68:d1:7c:66:4d:1a:87:8e:17:55:61:1f:00:18:13:ca:
         c6:7b:3c:81:df:80:88:db:8a:88:e7:e9:8e:73:86:74:85:61:
         22:b7:f2:1c:7a:88:cd:46:9c:9a:16:b1:fd:f4:bb:73:be:26:
         fd:bb:93:17:19:7a:0e:31:bb:0e:c2:ca:d3:08:a5:0e:64:24:
         6b:90:4f:44:38:ac:2d:b9:aa:87:7a:23:47:2f:6a:c3:52:d9:
         b7:9b:59:be:df:77:38:65:1d:dc:64:c9:74:6b:a8:2d:79:6e:
         96:22:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:58 2025 by rpki-client