Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa
File:                     422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa (raw, json)
Hash identifier:          7hae+fPTTEoJBhtOfN81dFNDRejyjwcIwT+cnB3T9UM=
Subject key identifier:   21:87:8D:7C:0B:D9:D9:95:40:B8:3E:88:B6:87:9E:66:EB:B1:3F:71
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841226F82DFA3853DBA6EB20
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:26:f8:2d:fa:38:53:db:a6:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7bd42a64-3b01-4d53-a33f-0aa89f7d3c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:03:b9:22:5c:a4:a0:b2:3a:8f:b3:98:fb:
                    d4:52:3b:f5:7d:23:76:66:23:0c:0a:d0:a8:81:86:
                    34:c0:7e:0c:b1:72:15:f8:7c:82:9b:5d:0a:2d:ac:
                    29:6f:1d:33:3a:68:83:73:7f:a0:84:65:b0:98:66:
                    6f:df:28:cf:03:6d:7b:97:b4:f0:dd:c5:52:3a:db:
                    b5:35:75:e4:fe:8f:58:47:68:47:0d:90:3f:fb:b8:
                    24:59:d2:ad:0e:29:bb:01:9a:9f:4a:34:5a:71:92:
                    ae:22:6c:be:d9:4c:67:aa:5d:a0:3a:fb:34:7e:cc:
                    15:06:db:08:5e:88:83:3f:83:51:91:d4:d6:e1:38:
                    aa:69:64:35:e3:c1:23:5e:c2:f1:3a:bb:6c:bd:3a:
                    6a:d0:88:48:9f:53:cd:2d:37:7d:0e:4f:56:f8:75:
                    94:17:45:e5:9f:94:2b:86:41:bd:8c:85:8a:5f:9d:
                    43:80:c7:ec:94:4e:07:71:47:6a:6d:71:f7:24:64:
                    a7:dc:f9:fd:ce:af:3e:f4:a6:c1:99:b8:c3:9e:96:
                    33:55:e9:a2:d4:57:99:d8:b0:7b:cc:03:67:db:a4:
                    0b:9a:6a:04:03:0c:ed:46:90:1f:be:80:06:d5:d3:
                    f9:ea:a5:0c:e2:f1:6b:16:f8:03:8b:04:1d:b4:b3:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:8D:7C:0B:D9:D9:95:40:B8:3E:88:B6:87:9E:66:EB:B1:3F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/422b8992-d07c-3d4d-87a8-3e8ef19343c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:1d:d1:3d:56:1e:df:d1:75:7a:bd:1b:e8:2c:60:a8:60:
         66:c0:6d:94:e5:76:18:bc:e7:7c:e2:61:52:de:0c:57:7a:f6:
         1c:1e:7d:7a:de:76:08:64:b6:65:4c:e0:96:41:bf:45:c7:9f:
         f2:6b:ba:11:f8:51:10:9e:d7:96:53:b0:fc:33:6e:63:00:93:
         fe:24:76:a9:8e:54:6a:23:6b:d7:8e:c9:f4:f3:0a:a4:4e:84:
         33:af:8f:45:09:f4:63:1e:be:a6:90:4d:88:63:73:c9:ac:94:
         4e:61:a1:4d:ca:0a:cc:56:c2:a4:c8:60:c9:d6:c2:09:38:e1:
         dd:e9:04:2e:fa:1e:dc:5c:c2:e9:10:e8:f6:f5:a0:e5:62:ce:
         d3:44:49:02:a4:00:ed:8d:ad:bf:e1:4d:07:1f:f4:4f:a1:7c:
         8c:0e:4e:85:95:8d:90:ad:b1:21:8a:3f:20:71:86:fa:5c:89:
         91:6f:74:f2:93:a3:0b:1e:3d:fe:15:cc:cf:bc:2f:7f:f8:ca:
         a4:b2:09:41:33:71:e8:90:8c:db:a7:87:61:56:83:80:a0:30:
         11:96:11:17:49:b8:3a:33:4a:21:57:66:bc:f4:b7:24:76:b8:
         da:54:76:fa:35:58:03:a0:df:60:56:2d:38:ec:81:48:61:dd:
         5d:40:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:39 2025 by rpki-client