Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa
File:                     4c193cc9-50e4-385d-9561-9dffb6e87a24.roa (raw, json)
Hash identifier:          OKaW0CrZgBII+4jgfCRDD1AjfY5u549YgJp9aaGQ9sw=
Subject key identifier:   98:96:7E:91:6A:E4:D1:A8:D8:12:96:07:CC:2D:F0:EF:C7:6F:2F:43
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B66823BC1EC4318419C65A1C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa
Signing time:             Fri 03 Oct 2025 15:42:33 +0000
ROA not before:           Fri 03 Oct 2025 15:42:33 +0000
ROA not after:            Thu 01 Jan 2026 16:42:33 +0000
asID:                     22652
IP address blocks:        207.253.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:82:3b:c1:ec:43:18:41:9c:65:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Oct  3 15:42:33 2025 GMT
            Not After : Jan  1 16:42:33 2026 GMT
        Subject: CN=093a58fc-31c0-443e-b5db-3489f12f7c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:60:a3:9e:26:e9:c3:ab:da:38:e7:a9:a9:
                    8b:a6:c4:e4:df:44:95:ef:8a:63:63:53:b3:97:6f:
                    ff:c3:eb:63:58:5e:db:de:dc:ea:a2:b9:7a:14:16:
                    ed:a9:cb:6e:92:e0:c5:bb:2b:af:fa:50:9f:6d:06:
                    ef:8e:72:7c:be:07:e6:bf:b8:b0:9d:14:d6:b9:b9:
                    50:17:07:be:d4:82:2c:fa:26:84:22:6e:13:47:b8:
                    40:c3:e6:37:6d:2e:41:8c:6f:89:ba:1d:87:ff:01:
                    5b:12:12:76:48:1d:53:53:58:c2:dd:87:b4:95:32:
                    80:50:26:0c:57:a5:07:d4:8f:d1:b7:5d:4e:1a:3e:
                    20:77:78:8e:a2:5e:03:ca:f9:ba:35:ed:db:36:81:
                    87:40:cb:e5:e2:8a:77:fb:bb:11:05:bf:65:ff:30:
                    fc:43:56:5e:2c:89:da:ef:3e:78:67:17:05:ef:3b:
                    24:cd:1d:0e:f5:17:cb:8b:99:00:0a:36:c1:9e:05:
                    d4:d8:20:d0:4b:75:ab:86:bc:e6:8b:3e:28:f0:b6:
                    ec:29:ba:fe:10:e7:bd:47:74:99:55:d7:2c:b4:fe:
                    01:57:3a:cc:c8:5b:ce:c5:b9:24:b2:4a:20:50:46:
                    db:3c:88:c1:9e:25:2c:01:f5:d9:85:af:0f:09:1c:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:96:7E:91:6A:E4:D1:A8:D8:12:96:07:CC:2D:F0:EF:C7:6F:2F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c193cc9-50e4-385d-9561-9dffb6e87a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:89:ce:12:28:2b:93:9b:30:37:dd:2d:e9:94:ca:4b:f9:9f:
         1d:38:cf:d8:43:8d:29:f3:e7:55:74:98:e6:4c:8e:36:2f:ec:
         0d:d3:9c:7c:51:f9:60:42:9c:0a:6c:45:27:6c:a2:cb:4d:1d:
         a4:98:73:45:11:d7:c2:d8:99:f9:e5:64:a7:c4:93:cf:6b:6b:
         e9:26:05:e0:b0:8c:0c:da:c3:39:c6:86:2a:0b:14:60:1a:28:
         d7:91:ab:8a:a4:de:07:23:59:a8:c1:5d:3f:89:11:52:ac:1e:
         07:c0:76:9f:d4:21:4e:80:4c:a7:0a:29:d2:96:2a:9b:99:01:
         d0:71:80:4d:0d:3a:80:85:91:84:28:66:00:33:a8:23:6c:0b:
         b7:a9:98:62:60:e6:9c:7b:77:e3:b9:49:15:84:f6:b3:07:ef:
         13:f5:6b:d8:99:43:af:c7:30:57:d6:2a:2f:77:4b:48:33:25:
         18:8d:ea:ab:63:db:36:bb:83:08:df:bd:97:50:32:d1:4e:c4:
         b0:da:a5:08:b1:b9:4f:21:c4:db:57:01:e7:a3:dd:28:0f:21:
         75:3b:56:18:52:12:7e:8f:d8:68:2b:f4:52:d3:75:66:7a:0e:
         fa:68:f8:0c:2b:15:50:a4:0f:99:c3:1b:3f:db:fd:d4:93:97:
         81:58:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:42:58 2025 by rpki-client