Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5f792454-c72f-3bfa-847b-ba9ac02ac94a.roa
File:                     5f792454-c72f-3bfa-847b-ba9ac02ac94a.roa (raw, json)
Hash identifier:          o9GDomGxIHZe1mppuzP6iHdZznFydqSYiq+P0zQ538c=
Subject key identifier:   0D:E0:AF:68:B3:C2:52:DA:89:9E:6C:13:9B:66:65:13:60:3B:71:24
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841174EBCF39073180B8A380
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5f792454-c72f-3bfa-847b-ba9ac02ac94a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     32381
IP address blocks:        207.126.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:74:eb:cf:39:07:31:80:b8:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aafe23e6-e629-41c8-ae4b-63c68f9a8c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:62:05:8a:c2:78:38:62:75:92:23:b9:b1:1e:
                    08:85:76:2d:52:f2:fa:f9:a8:9a:7a:1e:89:45:bb:
                    fd:b0:48:6b:5a:ab:5b:11:26:6f:ce:22:2e:2f:03:
                    d0:6c:0e:59:94:3d:eb:c0:d2:84:e6:dd:9c:f4:ae:
                    40:c7:67:46:07:7f:a2:80:70:3c:64:11:bd:3f:de:
                    be:50:c9:e1:68:66:99:23:96:05:24:40:d7:54:3b:
                    84:f3:7e:57:e4:2f:e1:3c:0a:78:70:68:d7:5c:68:
                    90:b9:06:ac:e2:63:0a:c3:68:bf:f4:ca:64:21:f2:
                    bc:63:6a:f7:ad:af:bd:88:7a:6e:bf:70:5c:04:1f:
                    83:b1:fe:aa:4f:e3:d4:f2:59:92:09:13:b4:1c:77:
                    58:af:9d:ec:18:90:4e:e2:1e:cf:08:49:78:c7:56:
                    1f:26:3a:73:5c:2c:1d:90:25:53:d8:9c:23:e5:4e:
                    af:30:56:c9:b9:44:d1:ec:ce:5a:a1:e1:cf:5e:bf:
                    c8:18:9e:aa:86:e3:7a:d9:07:4d:0e:9d:94:03:88:
                    d8:9d:c2:43:00:2f:63:07:c3:c7:82:76:25:04:04:
                    b9:62:b1:a4:57:e5:82:df:e1:8a:22:d0:33:a2:cd:
                    88:8a:a8:75:b3:08:69:2c:04:8a:1e:d9:d0:83:ae:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E0:AF:68:B3:C2:52:DA:89:9E:6C:13:9B:66:65:13:60:3B:71:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/5f792454-c72f-3bfa-847b-ba9ac02ac94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:17:cb:44:67:84:b0:ec:46:39:60:52:2b:35:b8:b4:58:0c:
         cc:08:87:ac:a3:cb:b4:f4:3a:07:b1:73:88:0d:05:2d:0c:06:
         79:3b:f5:88:e3:af:d0:4c:17:28:78:48:21:40:ad:b8:1b:24:
         62:8f:a7:ef:25:d5:76:f4:4a:d8:dd:92:1f:dd:f0:d8:e2:0f:
         ab:65:0c:e5:7c:13:6e:b1:ab:bc:d2:a0:c9:e1:5b:90:47:04:
         e5:4c:12:5e:a0:0c:62:71:7b:dd:57:10:95:6d:1e:b7:f6:38:
         64:13:3e:c4:32:d1:89:ab:74:aa:45:4d:88:61:66:b2:66:bb:
         1a:1b:26:9a:eb:a8:83:3e:a8:85:97:8c:38:00:11:1a:9c:50:
         56:72:60:a2:44:e4:e0:25:10:0f:79:66:5b:07:3d:20:6c:0f:
         b9:c1:33:6d:c4:b1:3b:12:90:72:c3:e6:ed:42:f1:4c:68:ed:
         78:26:69:62:a6:80:95:49:b9:b8:f1:62:80:a4:af:9a:75:4c:
         9f:7b:ad:f8:4e:6d:09:82:a5:92:97:ab:6c:92:95:5f:67:0e:
         dd:b9:1f:c3:9f:4a:58:df:4c:a0:a1:36:2a:49:ab:af:b6:7d:
         de:11:28:ca:0f:16:4a:75:7e:79:98:6c:e3:5b:ab:81:0d:3f:
         ae:64:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:42 2025 by rpki-client