Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa
File:                     d3c65396-5041-30f8-854e-d076751f12be.roa (raw, json)
Hash identifier:          596ZHdI5ApgmrEy9oqbIgHztNXA7XlJhn8oQ3iGEyVY=
Subject key identifier:   98:57:C3:CE:84:74:3E:84:23:B7:5F:C5:7A:21:19:47:C0:EE:FF:FE
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841182C866793C9FA85A9080
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:82:c8:66:79:3c:9f:a8:5a:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a897890d-3329-424a-9b33-d2ec08349598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:3d:36:99:7a:ee:ce:4c:ba:07:60:22:65:
                    dd:28:a1:01:f4:e0:b8:dd:8a:8f:b2:9a:1a:0d:85:
                    7a:a5:a3:3a:84:eb:65:d3:16:7a:5e:8b:d7:55:04:
                    13:08:e7:a5:6b:a1:6e:73:34:4a:2d:1b:ad:8d:e5:
                    b8:57:f1:9b:aa:16:64:e4:74:d6:42:df:ee:6e:1b:
                    e9:d0:4f:82:c2:83:8a:f9:7e:7d:f5:94:f0:b0:2e:
                    dd:48:2c:15:95:db:21:e8:55:e8:a9:6b:5a:54:54:
                    62:1a:ed:16:77:85:63:a2:2a:c3:19:b5:88:db:d3:
                    32:56:33:50:ad:65:6d:28:3a:db:8d:b9:ba:2f:dd:
                    d8:7a:6a:6d:9a:7f:ae:9f:e8:58:f9:fb:c4:f7:97:
                    de:21:29:c2:d7:9f:d0:9c:18:ab:a8:64:fc:e7:6b:
                    7d:62:bb:4f:55:50:7d:e7:13:f8:b7:3f:e7:85:59:
                    c9:6c:56:a8:97:13:e7:93:13:90:8a:ba:33:39:af:
                    79:b6:c8:31:9f:a1:1d:70:1f:09:0b:2c:00:ab:d5:
                    79:2a:a5:e2:bf:02:15:07:95:ab:7a:f5:7b:75:fb:
                    42:12:42:90:6e:0c:b2:ab:e7:4d:e2:54:8d:57:47:
                    42:21:a2:85:54:2a:fc:a7:ab:fa:a7:bf:ce:4f:b9:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:57:C3:CE:84:74:3E:84:23:B7:5F:C5:7A:21:19:47:C0:EE:FF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:b6:f9:47:5f:a8:c8:c5:21:21:79:0b:6e:ec:e2:c5:ee:
         e0:53:a7:2b:cb:e8:bb:22:8b:0e:4c:25:40:78:34:79:0f:2e:
         f4:80:82:3d:3e:a6:b1:ec:1d:d7:f7:fd:7d:06:fd:76:46:90:
         97:37:ff:1f:fe:fc:a2:6d:d3:b9:ac:79:2c:bd:a7:93:f0:dc:
         da:19:2c:0f:1c:0d:04:a5:28:d6:a2:c3:4c:a0:45:fe:ce:c5:
         4a:57:92:a1:1d:bb:d3:0c:3e:6b:34:66:6f:b1:7f:0f:2e:05:
         65:d4:b7:88:7f:3a:e6:dd:4d:19:51:a3:0c:96:f6:1f:5f:fa:
         47:53:50:5c:09:55:6e:36:28:58:fe:36:8d:f3:f4:05:ce:79:
         14:09:27:0f:fe:a1:04:90:c3:1a:02:62:30:6c:df:e9:3c:15:
         5a:cd:41:52:f0:cd:c6:94:bb:a6:fb:97:a6:4a:7f:e4:3d:0b:
         5a:62:66:fa:24:67:47:54:10:9a:37:6c:66:80:24:84:60:c4:
         18:2f:34:bf:fc:f5:0c:db:c8:60:85:fe:e0:be:de:98:09:42:
         ee:7c:b4:98:bc:5a:76:66:59:b4:8c:94:65:80:cf:36:a5:3c:
         6c:35:e1:bb:0a:f2:77:5c:1e:97:dc:71:7b:74:4f:c0:ee:35:
         91:79:b2:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYLIZnk8n6hakIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTg5Nzg5MGQtMzMyOS00MjRhLTliMzMtZDJlYzA4MzQ5NTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1s9Npl67s5MugdgImXdKKEB9OC43YqPspoa
DYV6paM6hOtl0xZ6XovXVQQTCOela6FuczRKLRutjeW4V/GbqhZk5HTWQt/ubhvp
0E+CwoOK+X599ZTwsC7dSCwVldsh6FXoqWtaVFRiGu0Wd4VjoirDGbWI29MyVjNQ
rWVtKDrbjbm6L93Yemptmn+un+hY+fvE95feISnC15/QnBirqGT852t9YrtPVVB9
5xP4tz/nhVnJbFaolxPnkxOQirozOa95tsgxn6EdcB8JCywAq9V5KqXivwIVB5Wr
evV7dftCEkKQbgyyq+dN4lSNV0dCIaKFVCr8p6v6p7/OT7ktYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhXw86EdD6EI7dfxXohGUfA7v/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZDNjNjUzOTYtNTA0MS0z
MGY4LTg1NGUtZDA3Njc1MWYxMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG9tvlHX6jIxSEheQtu7OLF7uBTpyvL6Lsiiw5MJUB4NHkPLvSAgj0+
prHsHdf3/X0G/XZGkJc3/x/+/KJt07mseSy9p5Pw3NoZLA8cDQSlKNaiw0ygRf7O
xUpXkqEdu9MMPms0Zm+xfw8uBWXUt4h/OubdTRlRowyW9h9f+kdTUFwJVW42KFj+
No3z9AXOeRQJJw/+oQSQwxoCYjBs3+k8FVrNQVLwzcaUu6b7l6ZKf+Q9C1piZvok
Z0dUEJo3bGaAJIRgxBgvNL/89QzbyGCF/uC+3pgJQu58tJi8WnZmWbSMlGWAzzal
PGw14bsK8ndcHpfccXt0T8DuNZF5sg8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:14 2025 by rpki-client