Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa
File:                     b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa (raw, json)
Hash identifier:          9oq3alBa41GbhurIiJmS3ElybFTCUMec6F2JFa8+uCw=
Subject key identifier:   C3:87:4A:23:77:F4:3C:B4:12:F7:83:C1:36:1D:87:78:8B:C5:5F:8D
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841183402C52D7026C8F5E70
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:83:40:2c:52:d7:02:6c:8f:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=eab18a76-158f-40cf-a840-ee34e9854ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:1f:5b:c6:38:30:0d:18:2a:d8:a0:18:0d:
                    e8:b2:59:01:1b:a6:2e:5d:6c:bf:9f:b5:80:e9:56:
                    dc:7c:b9:a9:c7:0d:88:7d:b8:53:b6:a7:d5:d3:a9:
                    bd:6a:ad:e6:f5:c5:6e:1d:83:62:6f:68:d8:29:b0:
                    93:8b:ae:25:c8:68:af:19:9f:f7:05:bf:a8:38:2a:
                    2d:c6:f6:92:65:17:21:88:44:3c:d3:64:1b:00:bd:
                    dd:ed:3f:58:26:e4:72:9c:e9:ea:1b:3f:36:29:ff:
                    96:ff:ab:d6:b7:51:68:47:81:5d:e9:8d:cf:91:7e:
                    c4:68:f1:19:af:49:d5:a3:cc:fd:6c:fa:e8:62:a7:
                    c9:58:65:86:26:71:99:ac:e7:91:21:df:15:88:4f:
                    b0:60:e7:19:31:3e:30:6e:df:23:36:47:38:40:a0:
                    97:28:a1:69:b3:bb:81:e2:71:48:e1:7f:bb:1b:ba:
                    00:cc:64:25:82:71:79:0a:ad:96:3c:4b:40:da:bf:
                    62:20:82:98:01:86:69:5a:01:93:0a:88:f7:0a:2b:
                    b4:e8:5a:b2:b6:c6:db:41:a9:d6:77:d5:85:50:58:
                    ab:41:b2:d5:04:ca:2d:5e:61:f8:7e:48:1a:72:9d:
                    c5:74:bd:13:d4:60:0e:7d:41:7c:cd:4b:db:8c:79:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:87:4A:23:77:F4:3C:B4:12:F7:83:C1:36:1D:87:78:8B:C5:5F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b3a5ea2a-644e-3ca6-956d-097bbfbc8b3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:85:b4:90:77:86:4f:98:91:e1:f6:fe:79:be:56:d5:e8:
         e5:67:02:b8:9d:2c:c8:fb:a8:ba:c3:1a:d1:dd:7c:8f:28:6d:
         50:11:fe:04:63:8b:c1:a9:f3:df:dc:17:dd:23:f2:ac:16:0f:
         bd:1a:b4:50:0f:80:b9:4a:2e:3d:8d:17:37:87:f4:51:3c:4e:
         07:38:73:8c:d7:92:19:28:49:ff:30:6b:d6:a0:29:1e:ac:8f:
         fc:0a:01:73:3d:be:95:0d:22:ba:8f:fb:88:48:10:1f:f9:8b:
         5b:e3:3d:32:87:9d:b8:b3:fa:68:4f:7d:d4:52:c0:6f:14:d6:
         03:b0:ca:89:e7:9e:28:a5:95:c7:1e:54:8d:8a:9f:0d:8f:57:
         9d:88:f6:0c:58:44:b5:53:d0:71:b6:48:dc:b3:a2:f5:cb:73:
         84:06:7f:78:a6:78:12:72:73:b6:bf:e3:56:78:d3:6b:ef:d0:
         ca:98:30:b5:b6:21:87:a0:03:2e:d4:81:bb:b1:78:15:26:3b:
         31:ce:15:d1:83:c4:1a:43:34:ea:d3:30:e9:19:3f:13:29:26:
         8b:c1:03:ac:a4:d5:37:2e:82:74:6e:76:3e:b6:1e:d7:72:47:
         70:0f:e9:23:a1:f3:a1:1c:fd:4f:71:69:24:44:7b:4d:b9:86:
         f3:53:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:44 2025 by rpki-client