Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa
File:                     3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa (raw, json)
Hash identifier:          C7D6htcd2+qvfvz7RZzvBQ5ZYcMNFd5kS3chxr1AyDc=
Subject key identifier:   B6:53:3B:F2:64:4A:D2:7D:D0:69:DC:82:4A:F4:B8:60:4B:64:43:48
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F4328584BAEC7C095488C00FD527F1740
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        207.207.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:c0:95:48:8c:00:fd:52:7f:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=bc292b71-0d8d-4902-b773-773544572e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:a7:19:7b:61:cd:44:ee:4a:8d:e7:c0:8f:
                    74:2b:94:78:a5:ed:e6:02:58:01:cf:94:40:3b:45:
                    27:7e:06:64:e8:85:3e:11:96:89:5c:3e:29:d6:59:
                    db:1b:f5:b8:00:90:c5:02:38:7a:a0:99:22:7d:ab:
                    84:52:25:c9:71:12:e5:58:91:c1:33:ae:2b:47:bb:
                    2c:23:b7:90:0b:08:77:45:b3:fc:35:67:6a:ac:82:
                    27:5e:27:f2:f9:83:57:50:e2:c1:23:1e:e4:57:d4:
                    83:85:c5:72:93:33:39:7b:d5:ca:da:b9:08:2f:35:
                    3f:6b:f6:32:1c:6d:dc:31:56:60:dc:17:34:44:d4:
                    68:93:e3:c6:26:65:b7:dd:b9:15:aa:e5:a9:57:61:
                    6c:9d:27:7f:21:e0:e1:07:e1:9c:a7:3e:29:86:a3:
                    56:17:28:92:6c:f3:3d:f0:2d:39:12:86:2a:95:c4:
                    5e:82:97:e3:c5:49:6f:b2:1d:ef:d4:50:da:05:1f:
                    57:50:2d:ce:a2:04:96:72:cd:6b:23:3c:96:77:94:
                    b0:ed:2d:02:c6:55:19:a8:3c:0d:72:55:a0:00:3b:
                    2a:e2:e7:06:ec:33:27:2a:10:0f:23:5b:43:ae:0c:
                    78:06:a9:12:6a:6f:af:ef:38:12:6c:34:16:8e:60:
                    93:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:3B:F2:64:4A:D2:7D:D0:69:DC:82:4A:F4:B8:60:4B:64:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:44:bd:3e:74:b6:c4:c6:93:f4:32:02:76:fc:a6:c5:0f:80:
         69:5c:dc:f1:5c:03:1c:7b:0d:86:22:6c:c6:89:29:b7:a4:12:
         ab:d4:d4:bf:42:54:b7:d7:4e:cf:f9:4e:6d:ee:ba:27:30:ec:
         a0:6f:03:64:b0:68:d1:0a:e1:47:f8:bc:3b:9c:7f:6b:ca:40:
         14:de:a7:0e:7c:6e:00:7b:32:b5:2f:49:34:00:a3:e6:67:04:
         8e:92:4f:ad:d2:4c:f5:d2:cf:dc:0d:09:65:c5:71:99:b1:89:
         43:85:bd:f4:cb:8d:95:e8:b8:99:e5:e3:44:e8:f2:cc:21:4e:
         e0:29:41:21:4e:ec:15:af:54:c9:73:ef:8f:9f:af:c3:19:88:
         49:c0:ad:6e:29:82:b6:3e:f7:3b:b7:68:42:4f:08:70:f4:fb:
         57:30:98:f5:e5:df:b2:57:23:11:e6:ef:6e:ec:cb:eb:15:d0:
         f3:e0:c2:bb:1e:2b:10:11:53:4f:fc:ac:f2:f9:ae:26:14:79:
         33:bb:50:38:60:a4:02:90:9e:4b:b3:fb:13:11:ff:a7:c6:06:
         f8:02:23:b2:94:4e:b3:3c:ef:f2:8d:24:60:dd:5e:59:a5:b6:
         12:23:78:bb:38:e1:91:c0:c9:9a:42:bd:90:29:e9:77:0a:c6:
         39:c3:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:16 2025 by rpki-client