Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa
File:                     5721127d-008f-3a20-84b2-3b906f78d4ed.roa (raw, json)
Hash identifier:          F8bNVYij059wgLUQk1Uvs1G43tKthwjoXbnlDJ6Mb7Y=
Subject key identifier:   9B:BA:53:95:F9:8F:61:75:76:08:A0:D1:71:D6:ED:6E:10:84:F8:21
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841239599FC4C57ADA0A7B00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     32381
IP address blocks:        207.126.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:39:59:9f:c4:c5:7a:da:0a:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f9d3271d-bd10-4de5-bb5d-5b8458514684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:67:78:42:c7:ce:43:90:c9:30:e2:6b:0f:46:
                    57:85:91:eb:1b:c2:15:51:a6:5e:68:20:cb:a3:fd:
                    14:4c:84:8b:49:e3:46:70:ee:83:1f:e7:27:d9:76:
                    1f:45:fb:b0:2b:a3:f4:71:1d:74:af:7a:b0:7b:4b:
                    ec:2f:a5:f1:60:51:2e:a5:0f:11:7e:f4:c1:30:00:
                    bc:97:c8:f5:a5:8a:3a:f5:b3:8d:a1:dc:a8:81:1d:
                    29:4d:d5:78:8a:09:dc:f4:bb:d2:98:f0:1a:aa:f1:
                    cb:a8:9f:ba:09:66:4f:0e:9a:58:e2:f3:bc:87:af:
                    4f:b4:0a:c1:4a:33:40:c3:f5:f8:a1:cc:8f:21:57:
                    86:29:9a:79:3d:fd:0e:5a:b6:17:2b:bb:17:bd:9b:
                    d5:31:1a:c7:f7:81:b2:73:20:d8:e3:9d:3f:d2:e3:
                    b3:e9:66:02:95:65:1c:b4:86:8e:cc:d4:a0:fa:d5:
                    4d:51:45:72:7d:f3:2f:27:ea:cb:83:f8:eb:f1:ed:
                    5e:a1:b5:43:50:10:aa:3d:8b:30:27:c0:13:b0:98:
                    ba:ee:14:86:26:92:cb:00:89:0c:fa:4c:d7:87:4c:
                    a2:68:9e:bc:ef:6a:cb:3d:33:6a:ed:19:1a:e3:3e:
                    72:39:c6:23:78:84:4d:87:f2:20:95:58:fd:a6:2d:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BA:53:95:F9:8F:61:75:76:08:A0:D1:71:D6:ED:6E:10:84:F8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5721127d-008f-3a20-84b2-3b906f78d4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:0f:cb:2d:58:90:4d:79:a6:52:e6:57:ed:fc:02:0c:4a:
         bd:74:e9:3d:b5:59:d2:f8:cf:16:97:22:7d:7d:f5:50:8c:7d:
         bd:df:87:c8:90:dd:8c:21:ef:d4:bc:63:a1:39:96:d2:74:bb:
         d8:f6:22:2e:6b:95:bc:cc:f7:7f:25:1e:e4:33:31:ae:f6:75:
         e5:8c:e0:63:c3:44:a2:0a:eb:96:20:54:ea:9c:14:ba:5a:67:
         5b:a0:8e:bd:2c:56:2c:0c:3c:b5:e4:a4:6f:dc:42:64:18:af:
         48:df:31:54:ea:0b:b4:3a:b1:97:b8:0e:2b:ed:27:00:e0:2f:
         27:86:06:84:bb:86:b3:58:b3:b8:25:a9:a9:71:f4:61:08:79:
         c1:70:f5:66:e3:55:91:4b:56:a4:86:6e:49:af:76:31:81:5e:
         c9:a6:05:5c:fc:5f:68:b1:13:7c:ef:09:7e:c3:15:c9:a4:df:
         d1:0c:e2:a8:87:d2:87:98:14:d3:07:31:68:c5:aa:73:c7:0b:
         ab:13:25:f8:9d:7a:b4:a5:a2:bb:60:bb:23:6f:bd:2c:c1:f4:
         64:cf:4b:14:99:c9:74:7b:54:2c:1e:05:23:c3:e2:a3:22:54:
         ec:71:9d:d0:ff:57:8e:16:09:6c:af:5a:13:66:1d:c3:34:7a:
         24:2d:4b:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjlZn8TFetoKewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZjlkMzI3MWQtYmQxMC00ZGU1LWJiNWQtNWI4NDU4NTE0Njg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2d4QsfOQ5DJMOJrD0ZXhZHrG8IVUaZeaCDL
o/0UTISLSeNGcO6DH+cn2XYfRfuwK6P0cR10r3qwe0vsL6XxYFEupQ8RfvTBMAC8
l8j1pYo69bONodyogR0pTdV4ignc9LvSmPAaqvHLqJ+6CWZPDppY4vO8h69PtArB
SjNAw/X4ocyPIVeGKZp5Pf0OWrYXK7sXvZvVMRrH94GycyDY450/0uOz6WYClWUc
tIaOzNSg+tVNUUVyffMvJ+rLg/jr8e1eobVDUBCqPYswJ8ATsJi67hSGJpLLAIkM
+kzXh0yiaJ6872rLPTNq7Rka4z5yOcYjeIRNh/IglVj9pi39rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJu6U5X5j2F1dgig0XHW7W4QhPghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvNTcyMTEyN2QtMDA4Zi0z
YTIwLTg0YjItM2I5MDZmNzhkNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXaD8stWJBNeaZS5lft/AIMSr106T21WdL4zxaXIn199VCMfb3fh8iQ
3Ywh79S8Y6E5ltJ0u9j2Ii5rlbzM938lHuQzMa72deWM4GPDRKIK65YgVOqcFLpa
Z1ugjr0sViwMPLXkpG/cQmQYr0jfMVTqC7Q6sZe4DivtJwDgLyeGBoS7hrNYs7gl
qalx9GEIecFw9WbjVZFLVqSGbkmvdjGBXsmmBVz8X2ixE3zvCX7DFcmk39EM4qiH
0oeYFNMHMWjFqnPHC6sTJfiderSlortguyNvvSzB9GTPSxSZyXR7VCweBSPD4qMi
VOxxndD/V44WCWyvWhNmHcM0eiQtSzE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:36:03 2025 by rpki-client