Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
File:                     1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa (raw, json)
Hash identifier:          +aG1ZF10CFDry/9Zei1fEwTQyW6ChAHR62Mfz+uoWFc=
Subject key identifier:   7B:9A:A7:B0:D2:32:DE:47:9B:03:77:61:DC:B5:6F:6D:37:72:6B:53
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584E059C37F803AF907ED35628E0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     32381
IP address blocks:        207.126.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:37:f8:03:af:90:7e:d3:56:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=498032a7-1032-4885-aaf3-8d49fab812a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:29:3c:80:c3:3d:fa:40:28:7f:22:98:87:
                    93:c7:5c:78:f1:05:41:30:9e:8d:b1:73:db:b2:08:
                    63:2f:29:fc:d0:b8:ac:17:20:ad:d5:55:a7:bd:77:
                    ee:5b:b6:09:6e:a7:d7:70:0d:85:91:58:c8:74:cd:
                    38:68:9c:0e:fb:c2:44:40:d5:69:43:b0:ea:ea:47:
                    36:66:fc:66:67:1f:30:a0:fe:48:71:d0:7c:44:bc:
                    c7:21:2d:d6:51:e5:61:7d:08:a7:be:d8:1d:1e:5e:
                    9b:9f:83:e2:a6:b8:70:29:fa:50:f3:f0:c4:6e:07:
                    e4:75:11:f8:c5:01:59:ed:a1:e7:95:c9:05:ec:b7:
                    65:03:70:82:95:0a:fd:b0:16:22:87:1d:1f:f1:bb:
                    dc:cb:e4:fa:c5:4c:b4:13:ca:6d:5e:9f:5b:f6:db:
                    28:29:ee:83:51:0e:5a:05:43:80:a7:8f:45:d2:b6:
                    7a:9c:da:cb:55:64:dd:62:5e:0f:29:c2:a7:2c:72:
                    6f:a9:32:90:fe:27:f0:d4:5a:d7:9b:d0:1e:01:65:
                    a6:20:81:2f:0c:7f:9a:c8:90:88:98:ac:59:c6:8a:
                    5a:28:3f:4c:5e:79:9a:e2:8b:56:ac:59:e2:6f:9e:
                    d3:e8:55:1e:bb:61:3b:b0:14:f2:f5:b6:2d:52:1e:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:A7:B0:D2:32:DE:47:9B:03:77:61:DC:B5:6F:6D:37:72:6B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/1fb372f3-6622-3d82-ae43-7d18ad3a7611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:7e:b3:63:59:5c:40:7c:1d:e1:7a:87:e2:9e:25:a0:2b:
         d8:f2:07:d9:68:de:84:c1:e1:2b:89:b9:04:94:cc:fa:dd:f0:
         f1:01:91:bf:44:1a:da:5c:bb:52:b0:4d:48:85:c0:b8:09:38:
         1f:8d:00:42:6d:f7:fa:cc:bd:d3:13:8d:f3:75:84:90:c2:4c:
         2d:69:00:14:5e:06:a8:45:6e:15:27:3c:92:68:f8:93:19:02:
         d9:53:0c:41:20:f4:5e:f3:aa:e3:e3:af:e0:88:bb:d8:ca:3a:
         68:be:66:d7:b2:33:f3:fd:fb:18:b2:b0:a3:3a:5d:68:05:04:
         ac:0e:cf:08:5c:d8:88:b9:2f:42:4c:f7:01:92:19:22:2a:1d:
         4b:ac:80:3b:be:41:d8:fc:a0:3c:0d:b6:de:b1:d3:76:a2:ef:
         54:f2:7f:74:da:2c:b9:52:ba:a6:c2:db:f9:31:77:1d:97:76:
         f4:96:f8:c9:3d:9d:c6:50:c9:ad:50:88:e5:a2:4b:03:e7:39:
         67:7f:1e:40:c6:87:69:01:9f:6b:9d:9a:bd:0c:cc:54:03:2f:
         67:59:79:c8:1d:30:d0:78:db:c3:76:ce:de:1c:65:20:a5:bd:
         6e:5e:37:f8:cb:56:75:5c:e4:0a:9b:b6:9b:0f:25:c6:38:30:
         01:24:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:45:37 2026 by rpki-client