Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
File:                     7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa (raw, json)
Hash identifier:          1ZpDx2IqrFikER2Opmx8mhPPoxH46Ng1OMpLc0KF7X8=
Subject key identifier:   C4:30:C0:52:CC:6B:2A:B5:C2:C9:1B:6F:22:43:A0:AB:08:CE:30:AA
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841228059D4FFB6ECEDB4CC0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:28:05:9d:4f:fb:6e:ce:db:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e0e1892a-3434-4639-b0d3-076437eb56f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:4f:c2:c6:3e:86:2f:8c:3b:c5:83:c7:f9:
                    77:a8:a0:94:d9:36:5e:2e:ef:f0:a6:53:cf:19:ea:
                    cc:b8:2f:30:39:a4:71:25:99:3d:a8:34:95:04:4b:
                    af:45:bf:fb:cf:cb:91:80:04:10:86:a3:21:1f:a8:
                    7d:e0:62:81:03:9f:a0:b8:24:69:29:f5:fb:97:73:
                    90:bd:ef:1a:1f:45:43:5f:3c:58:de:e4:e1:24:0a:
                    9c:5d:d2:34:68:43:29:96:07:61:da:db:e9:7a:b4:
                    6c:83:c2:08:44:ad:89:7e:5a:c4:78:b8:a8:ba:56:
                    5e:18:38:f0:90:d0:3b:14:8c:7a:ff:45:c4:3b:d3:
                    12:33:41:b1:dd:bb:e5:c0:b6:ab:f3:c8:8b:89:70:
                    46:c6:05:7f:2f:85:b0:0b:87:5c:d8:65:88:f3:9e:
                    aa:80:da:84:4f:d0:39:c6:bc:80:4d:24:59:a5:9c:
                    87:d1:7f:76:8f:31:f6:f9:9b:b2:99:06:bc:39:c0:
                    07:ef:a3:6e:b9:09:7e:15:ae:f0:18:3c:c8:96:fc:
                    fe:9f:09:69:35:23:fc:be:b3:b3:50:31:fd:d5:db:
                    01:ff:0f:19:12:f1:3b:86:ec:80:a3:75:ba:e9:1d:
                    9b:ca:54:b8:54:7c:16:97:45:55:c7:6e:91:9c:e8:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:C0:52:CC:6B:2A:B5:C2:C9:1B:6F:22:43:A0:AB:08:CE:30:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7bf96e67-c2fb-3e4f-a4d2-3fdc81859287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:47:d5:9c:77:4d:44:33:af:14:fc:3b:63:f0:60:86:28:
         6d:57:a3:54:40:5f:2a:c3:1b:a5:25:83:86:51:fa:2e:c6:f6:
         b0:01:f8:e2:65:31:2e:30:4c:3b:77:b2:c6:a4:85:d8:7d:1a:
         a2:a1:55:d2:32:9c:5f:63:7a:0f:66:f2:b2:25:c0:f5:62:11:
         a0:49:83:6f:fd:2d:12:5c:f3:6d:a7:7a:64:1b:c4:c0:3a:96:
         dd:2d:4a:92:1e:f4:87:e4:fe:7c:66:11:35:2e:12:4c:02:8a:
         35:c3:cd:50:77:1f:87:7e:f6:5e:38:13:02:73:c3:e1:26:a8:
         ff:fd:aa:95:ef:04:29:9e:71:1f:fb:67:1a:ac:19:08:db:9d:
         f9:72:9c:1d:1c:a2:0e:c5:d7:8d:fc:45:d6:19:27:c4:fc:ac:
         40:e3:71:88:67:ec:45:a7:88:c6:d7:88:e3:36:f7:d0:81:ed:
         86:6b:4a:bc:f6:77:29:ad:7a:44:b8:7d:ce:71:13:45:60:db:
         24:9a:56:3a:c0:9c:36:34:5d:b6:50:2d:e8:e0:a1:f7:ac:5a:
         32:f0:1b:d2:3e:9a:69:40:8b:a7:3a:bd:c6:08:50:fb:e1:79:
         02:0b:6b:04:05:f2:a1:6a:68:9e:15:ff:f1:5f:46:fe:12:80:
         69:b7:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:32 2025 by rpki-client