Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc7b5941-4d2e-398c-a31d-ddde0cfc2e99.roa
File:                     dc7b5941-4d2e-398c-a31d-ddde0cfc2e99.roa (raw, json)
Hash identifier:          OrHd9qGdGUocZo+nh0jL3yQTTIbfgYfXZ6DUbTPGl2E=
Subject key identifier:   4A:76:EF:27:1B:CC:C5:66:51:B5:6F:23:D8:BA:31:15:93:22:ED:00
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A841180F6342B706D88BB6500
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc7b5941-4d2e-398c-a31d-ddde0cfc2e99.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     32381
IP address blocks:        207.126.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:80:f6:34:2b:70:6d:88:bb:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=03e27742-34af-42ee-a04e-1e56bda0db4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:d9:fa:af:05:59:1b:bb:a4:2c:75:58:61:
                    9b:02:3d:f6:d8:41:d2:c5:81:a9:14:1c:c1:7b:d1:
                    1f:4b:d7:f0:76:23:a2:81:21:54:9d:6a:f8:70:98:
                    09:be:40:43:7e:68:1b:1c:14:5d:f2:ee:43:0d:e5:
                    60:e1:a9:96:51:98:c2:02:bf:bf:bf:18:cf:6b:01:
                    cd:f1:9d:17:20:8f:21:0d:60:bb:d5:44:6c:3f:ad:
                    db:67:dd:d5:97:b9:77:63:e9:e9:05:84:41:91:74:
                    6e:c8:1d:55:18:09:bf:24:14:f2:92:1c:b5:44:66:
                    a3:59:2f:30:e6:1e:22:c1:c8:fd:00:1a:44:d0:f3:
                    17:24:04:d0:7a:18:e8:a6:3f:98:e1:78:60:f2:aa:
                    6d:9e:7b:44:ad:d5:9f:e8:dd:5f:5c:0c:60:2b:62:
                    26:96:fb:c9:19:38:13:ca:72:bd:70:ad:30:31:34:
                    5d:ec:92:a2:d7:87:f9:97:a4:38:9b:62:0a:b7:f8:
                    3b:2e:e4:56:cb:32:64:c0:2e:be:ba:0d:56:ca:b5:
                    3e:f4:b2:18:f9:48:24:34:25:38:3f:2c:79:17:95:
                    f2:a0:a7:2f:44:dc:67:12:1f:3e:87:b0:15:23:8c:
                    75:fa:c2:f6:98:de:8b:20:b8:11:ad:08:4d:39:86:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:76:EF:27:1B:CC:C5:66:51:B5:6F:23:D8:BA:31:15:93:22:ED:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/dc7b5941-4d2e-398c-a31d-ddde0cfc2e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:41:8e:ad:92:9b:bc:c6:6e:9d:d7:07:bb:0c:70:ff:0f:
         c7:b6:73:2f:26:72:d4:b6:6b:d6:a7:38:c3:d3:2f:0a:df:11:
         a0:36:7b:a3:74:d1:d6:7c:9f:55:f6:2c:c3:20:1a:78:78:48:
         87:59:c6:2b:b2:d6:66:6c:c0:ca:f9:13:96:cf:00:1a:c3:1a:
         20:bd:f0:c2:9f:10:f1:41:89:69:b5:2c:8f:79:dd:d8:7c:06:
         20:6d:34:9c:6c:ac:33:36:fd:40:25:28:41:6f:c6:70:8d:5d:
         2f:eb:2e:70:a1:7c:ed:98:28:d8:20:0b:ba:eb:46:95:4b:16:
         4a:7d:15:87:b6:6c:bb:5c:b8:dd:a4:d9:5e:30:69:06:27:c6:
         5b:de:a1:be:36:18:3b:93:03:49:28:69:2e:b8:90:a5:ce:c2:
         9c:e5:ed:03:c3:3b:ae:b2:33:cc:6c:bb:6b:e8:88:ba:cb:6c:
         02:02:b0:93:7b:c5:ef:3f:15:8e:e3:20:8a:da:99:4e:2b:c0:
         43:0d:d4:9e:28:c2:e1:10:81:69:2c:63:ce:fb:a0:d4:04:32:
         b4:af:c0:11:4e:70:93:4b:1a:35:dd:26:ef:42:64:3a:82:1b:
         14:be:4f:11:22:83:4d:d0:55:2f:dd:52:43:3f:02:d7:72:49:
         d9:c2:4a:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYD2NCtwbYi7ZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MDNlMjc3NDItMzRhZi00MmVlLWEwNGUtMWU1NmJkYTBkYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW/Z+q8FWRu7pCx1WGGbAj322EHSxYGpFBzB
e9EfS9fwdiOigSFUnWr4cJgJvkBDfmgbHBRd8u5DDeVg4amWUZjCAr+/vxjPawHN
8Z0XII8hDWC71URsP63bZ93Vl7l3Y+npBYRBkXRuyB1VGAm/JBTykhy1RGajWS8w
5h4iwcj9ABpE0PMXJATQehjopj+Y4Xhg8qptnntErdWf6N1fXAxgK2ImlvvJGTgT
ynK9cK0wMTRd7JKi14f5l6Q4m2IKt/g7LuRWyzJkwC6+ug1WyrU+9LIY+UgkNCU4
Pyx5F5XyoKcvRNxnEh8+h7AVI4x1+sL2mN6LILgRrQhNOYbV0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEp27ycbzMVmUbVvI9i6MRWTIu0AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZGM3YjU5NDEtNGQyZS0z
OThjLWEzMWQtZGRkZTBjZmMyZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCeQY6tkpu8xm6d1we7DHD/D8e2cy8mctS2a9anOMPTLwrfEaA2e6N0
0dZ8n1X2LMMgGnh4SIdZxiuy1mZswMr5E5bPABrDGiC98MKfEPFBiWm1LI953dh8
BiBtNJxsrDM2/UAlKEFvxnCNXS/rLnChfO2YKNggC7rrRpVLFkp9FYe2bLtcuN2k
2V4waQYnxlveob42GDuTA0koaS64kKXOwpzl7QPDO66yM8xsu2voiLrLbAICsJN7
xe8/FY7jIIramU4rwEMN1J4owuEQgWksY877oNQEMrSvwBFOcJNLGjXdJu9CZDqC
GxS+TxEig03QVS/dUkM/AtdySdnCSrU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:26:10 2025 by rpki-client