Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fac5c55c-3217-32b1-920d-643257fb4067.roa
File:                     fac5c55c-3217-32b1-920d-643257fb4067.roa (raw, json)
Hash identifier:          Zsr8jyLgpG6liivLdsRLeJLLPROMedrt/9uscX7+EB4=
Subject key identifier:   73:43:37:9A:DE:B8:DB:9B:EE:41:F4:E2:15:B4:DE:57:1E:EF:03:A2
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AB650E71F74D1A4D57E4B5480
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fac5c55c-3217-32b1-920d-643257fb4067.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     63673
IP address blocks:        207.226.153.0/24 maxlen: 24
                          207.226.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e7:1f:74:d1:a4:d5:7e:4b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9f3bf674-fa8a-4db5-a7d6-cef74111b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:72:50:00:74:bf:d3:be:23:55:e9:de:69:
                    0b:ec:60:c3:84:64:52:75:fb:2f:57:77:a9:e1:6c:
                    02:5a:67:9e:ba:3a:0e:3e:e6:37:53:48:ce:56:a9:
                    33:58:64:96:5f:37:ca:72:53:42:2e:b2:e3:f1:12:
                    dd:37:8e:0f:a8:36:3f:06:32:b7:f3:2a:8d:0f:42:
                    a8:a3:1e:a1:7d:78:aa:eb:cd:ce:81:1b:ce:73:10:
                    05:05:c1:69:6f:9e:29:84:dc:5b:07:cb:61:e9:5c:
                    ac:5c:0c:c1:39:16:44:0f:1a:3b:df:6e:9e:27:78:
                    d9:d6:ce:94:f5:2b:33:19:e3:74:4c:03:ec:70:b7:
                    5a:1e:f1:7e:6a:96:32:1c:b3:bb:f4:ce:33:62:30:
                    96:72:11:75:fa:bc:ae:fd:a1:a9:51:fb:d5:34:39:
                    b6:e6:d5:07:32:20:0e:7a:94:d2:04:35:ef:74:02:
                    3a:10:3f:09:05:3d:c3:2c:47:21:bb:e7:e3:06:9b:
                    69:fb:c1:6f:0e:8f:81:73:8f:a7:f5:aa:bd:39:64:
                    60:40:c0:63:ce:66:d2:ef:7b:08:64:7c:38:06:41:
                    6e:11:7c:16:b2:43:51:97:b4:0f:75:6a:14:99:66:
                    b6:e7:b7:4c:26:91:95:27:fa:b1:f2:e9:db:98:34:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:43:37:9A:DE:B8:DB:9B:EE:41:F4:E2:15:B4:DE:57:1E:EF:03:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/fac5c55c-3217-32b1-920d-643257fb4067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.153.0-207.226.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:50:db:3c:68:53:aa:0c:6a:8e:f6:f1:0d:a8:69:3e:58:
         be:f1:32:c3:3e:7f:4a:97:ff:c2:1e:2f:de:2f:09:4a:e5:70:
         12:cf:06:c4:84:05:07:95:b7:b8:ae:05:fc:d0:33:e6:f7:75:
         6e:4b:21:d5:2b:ae:b0:8a:7e:09:81:df:05:1d:13:b2:91:d9:
         67:64:48:4c:e2:d1:62:db:01:db:78:c9:9b:40:4f:8b:8a:37:
         b8:7e:8a:aa:cc:21:b5:6f:7c:81:37:90:43:cc:c8:81:75:11:
         e8:85:58:70:dc:c1:6f:12:84:54:72:3d:46:4e:6c:93:2d:db:
         be:58:c5:ed:32:05:ee:fa:c4:8c:a2:bb:20:6f:5e:44:e4:b1:
         f2:21:42:d1:ba:c7:d3:0b:8f:ce:7e:5f:65:dd:fb:fc:7f:90:
         95:db:2f:e5:75:d3:c4:b4:cb:bd:0f:ff:9c:9f:5c:b3:65:86:
         7a:a4:4b:5b:89:4a:79:dc:f2:af:85:15:73:2c:d9:16:9c:c2:
         27:a6:d1:31:03:c4:92:13:3b:07:ff:c1:e9:bd:74:b9:ed:4b:
         94:cd:1e:11:b5:39:61:ae:e3:01:a6:d1:fe:36:9d:a1:cb:4e:
         db:23:27:3f:60:8d:d2:7d:d8:9e:0d:04:0c:d2:e7:b0:59:76:
         64:77:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:09 2025 by rpki-client