Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa
File:                     26d0ec30-673c-3c09-acc5-b6d96cb73524.roa (raw, json)
Hash identifier:          IsabYso+Jn62bOL7hrZ+i6tSw27QWZaPV+gLIdS6vZI=
Subject key identifier:   7A:DF:85:99:30:35:C8:FC:0B:4B:A9:C3:4B:C3:04:70:FC:C9:AA:1E
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E707B4486F8D4C9A91EEB0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:07:b4:48:6f:8d:4c:9a:91:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=0145c4c3-fd1b-43bd-b4c4-ac8941f14ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:f3:d2:f7:e6:4d:f6:2f:5d:a5:6e:8e:57:
                    7e:5f:f9:8f:c5:b8:e5:a2:29:4f:8e:21:f7:ad:ba:
                    a5:4e:16:2d:83:bf:32:39:56:06:50:38:79:f1:1a:
                    74:db:f3:be:83:6e:08:f5:37:ea:6f:f7:f9:43:85:
                    17:6e:84:92:9d:5b:48:e9:50:28:85:44:52:d4:b7:
                    4d:cc:c0:21:ad:5e:d1:56:dc:f3:cc:40:97:31:13:
                    00:9a:55:98:00:e9:84:e1:d3:87:1e:18:bb:79:78:
                    c0:4d:7f:d6:ef:a4:0e:76:fe:09:8b:4e:a4:64:00:
                    b9:9a:61:20:73:20:ef:bf:f0:b4:c9:a6:eb:52:5c:
                    b3:b1:07:0c:10:f0:8d:b3:cc:89:bf:03:bf:71:c3:
                    84:8b:00:23:3f:8e:39:59:e1:62:31:7e:db:70:2f:
                    68:b4:c7:ce:0d:0a:7f:a3:94:aa:65:b9:ac:0d:c2:
                    95:c4:ab:5d:81:33:65:c1:42:8c:0b:8d:be:94:79:
                    6a:7b:65:c9:75:68:75:8c:b8:09:fa:41:ad:5b:46:
                    33:8b:28:bf:3b:9b:21:28:4e:fb:a9:50:7b:a4:33:
                    6a:48:97:1d:89:9e:be:6e:ed:05:34:7e:bb:be:c5:
                    9d:19:b2:21:b9:51:19:b2:c2:9f:33:6e:41:1b:67:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:85:99:30:35:C8:FC:0B:4B:A9:C3:4B:C3:04:70:FC:C9:AA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26d0ec30-673c-3c09-acc5-b6d96cb73524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:aa:6d:d9:1e:d9:0d:a0:7c:d6:6a:83:18:8c:28:ce:36:
         22:c7:af:c6:de:1b:46:57:6e:89:a6:53:a4:c9:a2:d8:ac:8b:
         e1:6f:72:ac:c7:d8:ec:95:81:e9:97:34:d1:b0:56:c1:1d:01:
         dd:c0:77:22:4e:d7:b2:e5:2c:c5:95:e3:92:02:75:a2:13:13:
         02:2a:50:e1:3d:9f:c9:9b:0f:52:f6:bd:17:85:77:2b:b1:cd:
         3d:c1:f9:72:a7:88:66:b6:62:52:7c:80:b1:54:9b:03:cf:e0:
         bd:90:04:76:ee:f4:b2:84:ba:61:c4:b2:79:48:1a:cd:70:aa:
         d0:6a:e8:44:77:fd:ae:46:75:8e:fa:1d:97:4e:b2:21:c3:57:
         d1:7f:fb:f5:bd:06:c7:fe:d1:3f:55:0c:ec:37:99:9d:59:9a:
         3f:d8:66:6e:d2:b6:3f:58:c7:0d:66:04:11:e2:ee:a6:ce:6c:
         48:a1:df:a5:bc:31:7d:0a:45:c2:11:d0:5d:55:66:14:1e:8d:
         d8:b9:ec:ae:c7:a4:59:99:6b:16:77:91:8c:52:32:4d:27:c6:
         54:c2:7b:1c:3d:dc:68:ea:05:af:50:4c:6b:21:32:5d:42:51:
         5e:2e:73:8b:1d:e3:28:43:ff:a4:9c:60:ed:db:4f:f1:7c:8c:
         9b:11:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:35 2025 by rpki-client