Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
File:                     784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa (raw, json)
Hash identifier:          9d0mNAJxX0xg0bj0u5QA8cGDLURvO+MfNRd8X/XDr5Y=
Subject key identifier:   07:71:60:19:4A:26:7B:3C:A4:50:01:F4:79:3E:BF:E7:C0:E8:09:02
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584F4989916EA26DBC803C5F0580
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22652
IP address blocks:        207.253.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:91:6e:a2:6d:bc:80:3c:5f:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f599a21-87fd-4259-a3b4-49933f15ca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:5e:a5:fa:28:42:a0:47:54:8b:7b:6e:77:
                    46:e8:84:35:b7:82:ff:63:5a:12:4c:7c:d1:e0:7c:
                    e5:43:ec:c2:12:20:06:75:69:d0:75:45:0b:03:5e:
                    5a:ea:2e:60:f6:c6:a8:ec:87:ef:ce:a6:4f:18:d0:
                    59:ed:3e:dc:d5:e0:31:84:68:50:15:9e:f3:ba:8b:
                    a5:92:49:65:2d:fb:56:3a:80:43:c7:6d:a1:f7:e1:
                    92:39:76:d1:58:b1:0d:6a:dd:ac:a2:34:32:22:01:
                    00:4d:b5:35:2c:a7:67:ba:da:5c:49:03:f5:aa:86:
                    35:76:ed:aa:33:22:34:73:9a:14:d1:31:b9:72:42:
                    7f:2d:83:e1:8f:6a:93:e8:4a:6a:95:ce:0b:aa:ce:
                    63:1b:66:17:2c:9f:35:00:8b:f4:86:e4:25:42:96:
                    0c:90:f1:f2:a9:e5:f6:cd:40:c9:1a:d1:94:e3:e3:
                    71:24:52:98:40:c1:a5:28:16:05:23:48:c2:70:2f:
                    7c:9e:9a:1b:1c:d3:36:3f:8c:7e:3d:7e:b2:47:72:
                    fd:6c:ff:e2:f2:11:7a:b1:7f:27:b7:5a:8f:19:95:
                    cc:1f:42:38:c7:7c:0d:2f:d8:b4:67:49:ef:50:6f:
                    fc:c4:56:07:fc:70:89:cf:b8:d6:5f:15:11:bf:c1:
                    67:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:60:19:4A:26:7B:3C:A4:50:01:F4:79:3E:BF:E7:C0:E8:09:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:52:6c:1d:2e:f3:46:a2:61:00:2f:d4:3d:ac:38:a1:74:
         bc:3c:65:6f:ae:22:20:55:2f:ca:a1:39:f4:ed:5e:84:61:27:
         d2:b3:01:b2:52:e3:d0:1a:10:2c:2d:fc:51:81:77:b0:5f:5e:
         99:13:2c:ae:c9:3f:f2:2d:ba:66:f6:7e:86:18:1b:73:06:c1:
         41:f4:0d:b9:46:52:fd:17:27:0e:5f:40:dc:38:67:88:57:e3:
         47:35:9d:c2:71:2b:7b:6c:aa:77:e3:04:c2:14:75:3e:d7:88:
         88:2c:8f:ce:35:13:7e:c3:a1:50:3f:24:8f:4f:2d:97:76:d9:
         4a:2b:86:6d:8f:bc:6f:f0:10:e6:51:e1:b0:92:e5:41:d0:de:
         2d:6e:23:e5:74:8a:25:83:b4:c0:5d:25:46:39:dc:69:63:f5:
         8d:9e:d4:87:f4:bd:15:c0:b7:81:ca:24:f2:a2:0d:17:53:30:
         5e:fb:8b:51:13:86:dd:a5:e9:fc:d0:01:1c:d3:ac:3b:10:cf:
         84:21:d9:23:8e:77:4b:a8:2d:94:ef:fc:f0:a3:0f:99:97:a4:
         e7:61:f2:18:73:99:1c:6b:8a:64:f2:ba:0b:b8:aa:26:40:19:
         d9:91:76:48:61:40:a0:ca:d3:35:aa:fa:ef:23:58:56:d0:bc:
         ab:29:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:33:46 2026 by rpki-client