Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7a7a5f79-d02e-37a7-8fe1-65f3ae98d3b6.roa
File:                     7a7a5f79-d02e-37a7-8fe1-65f3ae98d3b6.roa (raw, json)
Hash identifier:          AlNGxLaLZgUwTmUZL2Kei1x7Oe1p9AGTfs09+SeFokg=
Subject key identifier:   D2:4A:6B:63:19:C3:49:A3:03:0A:36:1C:C3:0E:21:94:13:3C:58:76
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E70738B9CFEF4214D63480
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7a7a5f79-d02e-37a7-8fe1-65f3ae98d3b6.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     395075
IP address blocks:        207.253.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:07:38:b9:cf:ef:42:14:d6:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=3847fbd1-c2ad-4846-ae46-00dc6caad966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:ea:b6:33:17:5b:ea:21:d8:a1:55:88:87:
                    f9:d7:1a:17:4d:aa:d6:31:89:14:61:97:07:63:3e:
                    e2:a2:69:97:a8:67:fb:14:52:9a:31:a9:60:5f:a5:
                    fa:61:e4:ef:41:f8:df:20:cc:ce:a9:a2:4a:f7:5c:
                    b4:47:dc:00:5d:94:4f:24:22:f5:d3:6c:90:6d:53:
                    75:c3:e5:a5:2d:79:23:94:d0:5f:21:30:cb:0f:aa:
                    f7:fd:2c:f9:a7:dd:e0:7b:55:6f:b6:4a:2c:68:c6:
                    05:e4:96:d5:1c:3d:d7:fa:6f:cf:7e:25:57:a2:fe:
                    68:b3:9e:6d:39:bc:59:17:f3:2e:a8:1f:a4:6a:b8:
                    6c:b9:9a:1f:16:2a:f6:4f:57:06:42:08:47:30:5c:
                    b4:f8:56:ce:10:50:c2:b0:03:43:b1:b8:7f:a9:19:
                    32:eb:5a:f3:f7:f8:52:77:00:2c:c3:32:e8:e1:6d:
                    f5:87:ef:1c:16:5d:83:6a:5a:58:c1:50:f9:45:5a:
                    d3:21:87:b9:cc:1d:ce:f1:e1:af:b3:95:f8:e7:dd:
                    b6:92:35:af:f1:e7:88:a9:b0:ef:cb:f4:e2:0e:56:
                    65:ce:2d:55:9c:16:4c:14:ac:85:2f:c3:82:09:83:
                    08:0c:4a:49:8c:03:96:8d:f1:0d:ec:cd:6b:71:8b:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4A:6B:63:19:C3:49:A3:03:0A:36:1C:C3:0E:21:94:13:3C:58:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7a7a5f79-d02e-37a7-8fe1-65f3ae98d3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:90:99:ba:ce:d4:93:36:22:e7:55:7d:4f:8a:27:59:b6:
         24:a3:a9:92:22:f3:a4:6c:46:ff:9c:79:43:30:77:77:51:a0:
         25:e1:10:34:8d:42:13:3f:35:fd:4d:cc:94:bb:8a:50:04:19:
         71:c3:f6:ef:03:c8:07:0a:b7:a0:56:cb:f8:b4:84:7f:91:8a:
         07:5e:0f:d2:bc:45:15:7c:26:4a:93:06:d9:76:64:f6:0c:5c:
         3d:7f:da:46:74:9f:3e:53:b9:5d:84:89:6b:4c:96:0b:19:47:
         41:ee:38:af:9c:65:61:c6:04:84:58:1c:04:61:18:2d:63:fa:
         27:dd:10:f3:e9:38:29:c1:57:54:b8:cd:36:04:bb:95:18:c9:
         61:43:f9:f7:ec:94:4e:9e:af:4e:c9:01:a8:c1:e9:0e:9e:20:
         1a:cc:78:de:36:7f:c3:27:b2:0b:7e:5f:2b:bc:a4:b0:28:84:
         6c:7b:a4:f9:0c:57:a1:4e:e5:95:6b:c6:27:8e:e6:fe:a2:de:
         25:b0:4a:6c:5a:41:6a:e1:a2:96:4c:c3:7f:93:e7:62:aa:ef:
         d2:8a:18:e0:6b:aa:f2:18:c0:9b:2a:8e:5d:ff:f5:e4:67:10:
         1f:ab:c0:48:75:2a:5f:69:cf:92:29:19:ea:38:75:22:81:3d:
         61:30:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:41 2025 by rpki-client