Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa
File:                     7d571b5c-c655-3add-b808-37a65ec369b5.roa (raw, json)
Hash identifier:          6YuMBbO/1Bsr9/awb4U37zOR0JHYX93J7TWHRnTcOiU=
Subject key identifier:   46:EB:04:EB:80:E9:68:CC:30:65:65:CB:09:B9:D5:26:6B:0F:38:AD
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A8411760B15C7CBCDEA23129C
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:76:0b:15:c7:cb:cd:ea:23:12:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9149a006-c4e1-4ac4-bbb6-d55a53bb3378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b4:f0:99:26:3e:36:42:b5:0d:ed:1c:59:67:
                    39:c5:1c:bb:90:03:2c:fa:c4:42:94:be:90:cf:2c:
                    a4:9b:9d:15:34:b2:d7:90:fc:2f:54:f3:be:c6:12:
                    d5:06:3d:e3:49:99:9f:4f:50:82:69:cb:0d:ad:d1:
                    b9:35:ef:1c:c4:42:63:56:aa:5d:0c:03:14:bc:cf:
                    3b:a6:e4:b7:96:e9:cb:5d:f2:6a:c9:06:cc:ce:f6:
                    80:ce:91:ce:65:0b:dd:14:90:fe:8f:f7:d2:95:45:
                    3f:04:4c:ee:1a:3f:ef:03:52:e3:ce:30:24:05:4c:
                    0c:6e:c5:53:bd:e1:ae:b8:27:0e:79:aa:8c:32:e0:
                    77:19:60:76:fc:f2:cd:d7:3b:d0:ae:3e:f6:d6:e2:
                    5e:bc:6d:83:4e:12:9a:a1:2a:df:ff:5f:49:36:75:
                    1d:43:d5:c5:83:4c:6c:d8:57:9f:26:a6:73:46:d9:
                    49:e5:93:c4:a0:8d:5e:5e:10:23:a0:c9:60:80:40:
                    65:5d:6b:26:46:6a:99:e2:14:2f:08:8d:51:42:19:
                    2e:cc:f4:82:2d:a7:2d:53:a8:25:3a:ea:e7:f5:22:
                    2c:81:0d:17:28:fc:ff:c9:b0:4b:90:ce:f1:c7:b3:
                    0f:c4:c5:78:c4:f9:d8:6a:56:2d:2b:b5:8b:a9:bd:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:04:EB:80:E9:68:CC:30:65:65:CB:09:B9:D5:26:6B:0F:38:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7d571b5c-c655-3add-b808-37a65ec369b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:3b:54:34:87:3f:80:79:bd:ee:27:8b:b4:d2:bb:9b:63:
         da:f9:d0:8f:21:ce:5b:0d:e4:3c:55:45:b6:7e:6e:bd:e2:5b:
         24:2d:b0:f7:80:37:dc:08:11:81:2d:07:d4:76:31:14:94:95:
         76:f4:a8:ac:58:c1:68:ae:a4:30:71:44:87:99:91:ba:b3:29:
         56:a5:71:45:4e:40:29:94:f6:84:77:a1:3b:e6:14:bf:62:3c:
         12:89:1a:5d:54:27:54:e3:f1:1c:9c:ef:32:ac:0e:0b:93:76:
         14:f2:e0:09:b8:73:bc:12:ae:cd:9a:a8:08:ef:d0:b9:f5:a6:
         e4:63:de:60:65:97:51:0b:fb:bd:3d:74:55:0d:d4:ed:11:6c:
         85:95:f8:2c:23:bd:08:9a:cf:1a:72:e5:67:fb:2f:86:c8:d9:
         11:ca:2e:a7:aa:cc:c3:86:74:a6:b6:6c:1a:94:6c:c7:0d:57:
         b6:ac:36:53:26:09:29:c1:83:87:b5:26:63:47:f7:27:9c:79:
         d0:7a:23:e3:2e:32:33:c6:76:0f:2d:50:94:74:a4:b1:bc:f5:
         89:b9:e4:17:15:84:3a:86:d5:9e:5d:ee:94:61:de:a0:dd:05:
         dd:ff:46:a5:04:d0:e3:31:e2:85:1c:6c:20:e0:3a:0f:ea:1e:
         b0:d3:8e:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXYLFcfLzeojEpwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTE0OWEwMDYtYzRlMS00YWM0LWJiYjYtZDU1YTUzYmIzMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbTwmSY+NkK1De0cWWc5xRy7kAMs+sRClL6Q
zyykm50VNLLXkPwvVPO+xhLVBj3jSZmfT1CCacsNrdG5Ne8cxEJjVqpdDAMUvM87
puS3lunLXfJqyQbMzvaAzpHOZQvdFJD+j/fSlUU/BEzuGj/vA1LjzjAkBUwMbsVT
veGuuCcOeaqMMuB3GWB2/PLN1zvQrj721uJevG2DThKaoSrf/19JNnUdQ9XFg0xs
2FefJqZzRtlJ5ZPEoI1eXhAjoMlggEBlXWsmRmqZ4hQvCI1RQhkuzPSCLactU6gl
Ourn9SIsgQ0XKPz/ybBLkM7xx7MPxMV4xPnYalYtK7WLqb0B8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbrBOuA6WjMMGVlywm51SZrDzitMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvN2Q1NzFiNWMtYzY1NS0z
YWRkLWI4MDgtMzdhNjVlYzM2OWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKnCO1Q0hz+Aeb3uJ4u00rubY9r50I8hzlsN5DxVRbZ+br3iWyQtsPeA
N9wIEYEtB9R2MRSUlXb0qKxYwWiupDBxRIeZkbqzKValcUVOQCmU9oR3oTvmFL9i
PBKJGl1UJ1Tj8Ryc7zKsDguTdhTy4Am4c7wSrs2aqAjv0Ln1puRj3mBll1EL+709
dFUN1O0RbIWV+CwjvQiazxpy5Wf7L4bI2RHKLqeqzMOGdKa2bBqUbMcNV7asNlMm
CSnBg4e1JmNH9yecedB6I+MuMjPGdg8tUJR0pLG89Ym55BcVhDqG1Z5d7pRh3qDd
Bd3/RqUE0OMx4oUcbCDgOg/qHrDTjpM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:39 2025 by rpki-client