Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
File:                     784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa (raw, json)
Hash identifier:          ukggLtfNEmg2TNNNnySdtEXBj08I1chx4r/9Pnmaln0=
Subject key identifier:   B9:EC:0B:CE:6D:82:F1:65:E3:E9:36:7F:AD:3D:B0:4C:C3:A3:A5:90
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E723A9A720447F6F6E3700
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:23:a9:a7:20:44:7f:6f:6e:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=47a022d9-eb60-4327-8073-340b94057c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:cc:a3:7c:c1:86:79:23:29:d8:70:00:9d:
                    6e:fc:a9:0e:7d:9f:f6:1d:4a:2b:78:2d:da:19:6c:
                    4e:e9:35:6a:ba:1e:46:4f:be:05:0f:2b:c3:7d:ca:
                    bc:33:4a:ce:06:68:41:47:24:8a:f2:75:77:1e:97:
                    c2:0a:a6:8b:6d:60:7b:dd:5a:bb:6d:c6:f6:66:c8:
                    ce:32:c4:aa:b4:51:35:6a:57:43:42:1b:a0:a5:bc:
                    0d:05:12:f6:66:a8:b0:95:f6:ad:0f:92:32:35:7c:
                    20:bc:2e:6e:af:f7:53:8d:c1:5a:de:ce:6a:cb:4c:
                    6a:db:8f:5c:20:00:67:51:6b:ea:4e:c1:5a:45:ef:
                    73:7c:02:a4:f6:c4:9d:a3:6f:06:25:5e:09:54:9b:
                    f4:f8:30:de:e4:f1:bc:3f:44:8c:b2:01:f3:26:98:
                    bc:d5:d0:d8:73:45:0e:42:59:6e:f5:63:8a:df:b5:
                    bf:f9:38:07:b4:d0:74:65:6e:26:0a:d0:01:cc:ae:
                    6a:15:01:53:5d:2b:85:86:91:81:b4:27:c9:4e:48:
                    23:43:4b:6e:25:fc:10:ac:b0:80:a7:8c:d0:81:3d:
                    51:76:3d:1b:eb:9b:ea:d7:b1:1a:bd:24:a4:82:ba:
                    69:8b:c4:96:46:4d:24:30:f6:7b:9b:a6:5e:ca:3d:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EC:0B:CE:6D:82:F1:65:E3:E9:36:7F:AD:3D:B0:4C:C3:A3:A5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/784a9fd2-0e64-37b9-8c83-c9dde5b10cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:99:73:20:7c:d8:1d:40:a9:66:35:e3:57:a8:34:97:9a:
         e7:26:4c:19:10:d9:41:8f:67:72:e1:f0:b8:cd:48:ba:c6:c5:
         c9:2e:fe:a6:f0:a8:06:1c:72:c9:8e:65:4c:09:a0:31:23:44:
         8a:f4:ad:ca:e0:a0:a2:c0:d0:26:c3:02:de:5c:e7:62:d9:88:
         66:19:35:ea:e5:ac:6b:f1:b0:2c:4b:a9:43:dc:5f:ad:4e:15:
         96:b0:22:af:fb:53:8f:d9:b7:5b:95:e5:c1:1c:40:88:2e:b1:
         58:86:a4:ce:c0:13:ef:da:c3:a5:1f:3a:10:2a:ca:6f:fc:e7:
         11:07:c9:82:43:c5:4d:87:c3:9c:0a:d4:c3:d6:17:5c:2c:20:
         46:06:a8:cc:aa:a4:4c:ad:89:60:61:14:da:a3:a5:5f:4c:6a:
         11:78:76:a1:d8:f5:43:1a:57:1e:d9:ab:f7:80:02:0f:f5:f7:
         94:c1:d5:47:df:3b:7e:57:2d:05:62:66:13:45:42:64:29:bc:
         05:4b:1f:19:2a:38:75:fa:2b:32:da:3a:53:94:b2:0e:69:5d:
         fc:c6:96:0d:e1:13:1f:48:21:8e:e9:9f:e7:84:2b:0d:ac:6d:
         76:b8:49:aa:46:01:78:a4:1b:8b:23:d2:33:b2:e7:ed:cb:e5:
         f6:04:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:03 2025 by rpki-client