Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5610bb9d-039e-3625-827b-aecaf27f3f48.roa
File:                     5610bb9d-039e-3625-827b-aecaf27f3f48.roa (raw, json)
Hash identifier:          mF6LHtPQ3NrAYRTqBZ/+gbgu3+mjANCP6hNuyWA+ygk=
Subject key identifier:   B1:8A:1B:42:81:BF:D3:3E:34:14:D1:4E:32:75:F6:2C:C7:9A:F4:6F
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E726B1632F6A339E08AA40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5610bb9d-039e-3625-827b-aecaf27f3f48.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:26:b1:63:2f:6a:33:9e:08:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=faf3403a-ccfc-4f09-bae5-e26046483c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:52:0a:ca:a0:67:67:52:2d:e4:b1:37:68:
                    d6:fd:e8:c9:9c:d7:63:e6:60:76:31:eb:49:97:25:
                    f7:c7:87:bd:0b:3b:e3:ad:07:ca:06:1e:5b:a1:c9:
                    ae:09:92:cd:3c:5f:ff:0b:ac:8a:2b:c2:9b:38:cf:
                    e1:e4:ab:d6:7e:dd:46:2b:d0:6a:84:2b:2b:e9:a6:
                    ce:39:eb:e2:7d:69:f1:20:eb:d3:aa:23:84:60:90:
                    39:c1:10:a3:08:92:39:f6:9f:9a:10:52:4c:99:b5:
                    37:9d:2f:2c:01:1f:23:8c:b7:cd:ed:3a:53:9c:ef:
                    ef:85:f8:34:3d:c2:d9:13:71:a5:b0:05:5a:70:bf:
                    8b:38:36:a6:e6:2e:ed:ed:fa:d6:d3:81:95:cd:66:
                    61:45:ae:6c:ad:6b:10:d8:10:70:5d:9a:b2:fc:0c:
                    58:bd:34:fd:e3:0f:dc:82:dd:19:1b:16:c0:cc:e9:
                    71:8b:96:43:89:9f:fd:fb:b7:eb:43:e5:01:28:4d:
                    fd:3a:14:b1:b8:59:8f:93:07:df:b1:fa:a3:e6:0d:
                    1d:b0:13:e3:2f:74:e8:0f:9e:b6:fb:c5:f4:81:99:
                    7f:37:63:4f:6e:1e:f7:8f:57:0e:a7:12:68:48:13:
                    65:98:06:79:e0:8c:f4:37:a7:38:12:1d:65:7b:00:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:1B:42:81:BF:D3:3E:34:14:D1:4E:32:75:F6:2C:C7:9A:F4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5610bb9d-039e-3625-827b-aecaf27f3f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:2f:d9:5a:c5:6a:62:58:f3:af:83:4a:f0:de:7a:75:5f:
         b2:d8:df:9a:3d:63:55:0b:87:cd:95:30:dd:8c:61:02:46:7a:
         9c:3f:82:83:ba:4c:6e:f2:aa:38:44:6d:7e:23:5d:4a:89:b9:
         ca:a8:38:ab:d1:3c:22:70:31:35:63:05:f4:06:7a:67:aa:33:
         b8:eb:98:fc:1a:bd:52:c0:eb:4a:f4:52:9b:e9:25:41:35:07:
         14:44:8c:b6:68:38:fa:40:a8:cc:b2:30:2f:e6:6f:a2:9e:29:
         99:e9:1e:52:23:00:6a:8b:96:62:a0:0c:15:01:56:73:97:6a:
         a8:8c:75:c8:13:94:19:27:e9:f1:23:34:84:38:e2:4d:d3:9f:
         03:18:2b:06:11:4c:01:63:5f:be:04:91:14:61:df:ff:7c:56:
         96:e1:d9:56:0a:a1:29:c5:80:29:f4:67:4e:5c:a0:70:d4:49:
         09:7a:cb:d6:f7:5d:02:7b:3f:87:8e:cd:c5:19:40:d4:be:dd:
         17:ef:71:34:4f:3e:b6:5b:2f:cc:07:df:08:e3:4a:5e:83:0c:
         c8:24:68:9c:8f:c3:c9:09:ae:60:9b:79:00:0e:a8:6d:42:00:
         aa:a9:0f:19:57:38:56:c9:7b:a3:b6:cf:ac:ab:76:c1:9f:00:
         ef:cb:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:33 2025 by rpki-client