Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa
File:                     25199343-1161-33f9-b82e-3f54d559b4c4.roa (raw, json)
Hash identifier:          IBIa42H2x29mM1wnmoereTt7oL5hz2UYs8UXaLI0dpI=
Subject key identifier:   0A:D6:8B:50:DD:2D:19:A3:EF:FA:C5:30:29:1E:65:2F:1C:7F:DD:0F
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E708F1731FFFF12B3B8100
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:08:f1:73:1f:ff:f1:2b:3b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=ef6c259c-7404-43b9-a84e-e78ade630849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:97:05:c5:ec:8e:58:28:fc:75:5e:f9:94:
                    fd:69:65:00:ef:08:45:0b:e2:d8:74:04:5f:a7:9e:
                    15:41:be:27:52:b1:08:cd:89:d9:59:df:ad:2a:d6:
                    55:ca:b9:d6:d5:58:fd:46:52:ba:44:7f:70:2f:5c:
                    c0:44:83:c7:19:0d:23:43:09:53:05:d1:ee:f5:3e:
                    7f:a2:22:d3:48:41:d6:be:56:67:3e:11:44:05:61:
                    4f:b8:c8:2b:62:99:6e:e0:18:a5:f5:73:51:38:3d:
                    61:53:88:12:95:07:6f:a5:91:71:54:42:52:ab:bf:
                    a7:ef:5c:8b:6f:8f:14:5b:cd:cb:9a:41:28:81:4d:
                    e4:45:25:37:32:e0:23:57:15:95:e2:1d:b1:c9:6c:
                    23:01:af:35:8c:13:23:8e:46:fc:17:a3:f6:8b:5b:
                    74:18:4c:ed:56:50:00:3b:68:23:ee:6e:86:c0:03:
                    66:47:7a:2d:67:e6:0f:85:8e:0d:3d:85:0c:35:4a:
                    14:ad:66:0d:cc:d1:7a:f2:3f:10:10:da:89:70:0e:
                    c6:28:ce:78:a6:3c:2d:fa:97:6a:0a:99:5e:8f:7e:
                    86:4f:8f:34:d9:af:f0:bf:61:bb:0e:37:c8:00:93:
                    1d:9c:17:4c:15:3a:24:ab:e4:81:f9:31:11:96:b9:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D6:8B:50:DD:2D:19:A3:EF:FA:C5:30:29:1E:65:2F:1C:7F:DD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/25199343-1161-33f9-b82e-3f54d559b4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:3d:b2:ca:d5:5b:d2:08:36:bf:13:43:a1:13:d4:4a:22:
         81:49:87:8b:5d:06:ec:7a:2a:93:3d:48:73:a4:ce:c5:e5:48:
         24:61:8b:24:8c:77:e6:81:92:89:06:f1:5b:2a:75:3f:21:8d:
         46:17:be:32:0b:08:c7:be:b7:42:c9:61:ed:eb:90:06:65:72:
         ad:d8:f4:82:16:78:46:d1:ac:4c:c9:3b:a2:16:a9:9d:a7:04:
         67:63:db:34:99:2a:f0:4d:6a:d5:c1:b5:d8:4f:f0:22:7e:36:
         54:fb:76:4f:e6:50:43:8c:51:2c:b4:82:b1:b1:33:dc:ff:87:
         d9:bc:0e:0e:b6:f5:db:cd:c3:61:be:ba:b7:4d:b4:9c:bf:e1:
         7e:fe:f9:05:6b:fb:19:97:e8:dd:07:e3:07:ae:ae:5f:95:71:
         ed:71:48:f4:b6:74:44:77:a2:13:6f:9f:33:93:b1:14:a3:4a:
         dd:e1:94:e8:a5:4e:3b:2e:93:50:40:b0:60:6c:ed:58:ac:96:
         97:02:ae:cb:b6:81:f8:a1:12:b6:45:58:f1:32:fc:cf:63:64:
         f7:b5:9a:04:0f:0c:bd:29:b4:b6:9b:96:20:86:83:92:3c:de:
         ee:30:16:47:19:3f:46:e6:70:79:3d:fc:6e:cf:41:34:b8:7e:
         62:ec:39:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:06 2025 by rpki-client