Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa
File:                     864f6492-55a5-3f58-b82f-047d0058b531.roa (raw, json)
Hash identifier:          LZdB2NQaMhpqlD1my8XVSTbTYMmcGheLsYKibgQfKCs=
Subject key identifier:   27:70:55:5A:A5:F1:DA:77:74:9A:D7:24:0C:C1:44:92:79:21:37:E0
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A84117A15F4F6F0964DE69E48
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     32381
IP address blocks:        207.126.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7a:15:f4:f6:f0:96:4d:e6:9e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a6289ab0-6b1a-419e-8d71-553342ce8180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:42:11:64:f2:bc:8e:eb:ff:45:fb:67:bd:
                    b9:63:d2:c9:a1:6d:ec:3b:a3:c6:57:dc:0e:3f:30:
                    86:7f:a5:56:60:93:7e:cc:ef:c5:3d:ad:bb:fa:3d:
                    b1:92:88:48:c0:41:b6:e3:ff:5f:e5:a9:35:57:22:
                    48:dd:82:85:67:fd:f0:2f:15:0a:da:f5:5c:ad:f2:
                    e2:d3:d2:e5:10:c3:de:e2:74:11:34:69:11:55:24:
                    58:ec:f0:ff:4c:5d:7d:0e:ae:15:80:07:33:79:c2:
                    70:69:c3:87:f0:1d:ad:f6:b5:4a:06:07:40:ef:41:
                    90:98:87:86:bb:7e:b9:f8:47:81:f5:88:17:03:2d:
                    2a:f7:c5:cb:4f:b1:50:cc:2e:3e:bd:13:40:f1:22:
                    af:34:0c:79:d8:5f:58:1a:e1:65:2b:d4:90:50:2c:
                    06:47:68:10:b8:d6:91:78:20:90:8c:93:55:59:3d:
                    3b:9e:fa:40:8a:cd:92:fb:1e:41:18:96:b9:d6:99:
                    03:c6:c5:df:01:c5:25:2d:fd:54:b5:e1:20:89:08:
                    49:da:78:82:b9:d0:7c:c1:19:bf:b3:d5:1e:99:b6:
                    f4:ec:50:37:05:74:1e:69:bc:66:24:80:19:e0:8a:
                    15:6b:46:1c:ef:36:f8:d6:6f:35:e6:85:41:2e:3a:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:70:55:5A:A5:F1:DA:77:74:9A:D7:24:0C:C1:44:92:79:21:37:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/864f6492-55a5-3f58-b82f-047d0058b531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:ae:68:78:c9:7c:4f:d8:6f:fa:95:20:10:ce:d2:6a:cf:
         83:2f:a4:a0:62:e4:6d:71:4a:41:0c:ae:ed:23:73:bf:ac:85:
         fb:e6:1d:b6:c2:94:72:f9:f6:3c:84:a4:6f:39:c3:4b:29:10:
         81:b0:dd:35:f7:b7:c6:be:a2:73:3e:5d:53:3e:df:75:c3:e4:
         1e:6d:c4:0d:79:e1:2d:a8:01:8d:b4:ea:8c:41:79:d9:81:ec:
         44:62:44:99:9a:63:5f:9e:d1:a6:13:34:ab:5d:8b:f5:85:83:
         1f:2e:a9:93:ca:c7:4c:49:35:f6:68:83:6e:c5:14:85:a3:31:
         44:48:20:e4:41:e7:67:34:a6:e1:53:c6:d9:ca:3c:27:ed:0d:
         2d:c7:00:04:08:ef:31:1d:40:c2:7b:3d:aa:e7:ee:dd:cf:11:
         f2:68:e2:72:e2:ff:6a:be:85:71:36:3f:79:1e:b5:d7:f6:0f:
         68:a8:16:b6:2e:bf:11:c4:39:af:f6:96:e1:8a:9b:dc:3f:4a:
         b8:2b:a4:fb:1e:bd:8d:3b:3c:9a:b8:c6:cb:23:ba:63:46:85:
         de:72:e2:20:ac:9c:6e:c0:2e:10:64:7e:76:c0:57:5a:34:26:
         22:47:f9:a9:ed:49:15:52:7e:7c:9a:c7:c0:95:e4:74:10:db:
         f2:64:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:02 2025 by rpki-client