Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7b46e93f-f22a-3586-9fb5-92d756f5b625.roa
File:                     7b46e93f-f22a-3586-9fb5-92d756f5b625.roa (raw, json)
Hash identifier:          9T5hlfEGNeodOyoDqJUDKl8n5Hg7dhSf7xoUWLOqOJI=
Subject key identifier:   15:3C:81:B8:78:8B:29:C4:BF:0D:06:AB:08:F0:DF:7F:A6:12:62:31
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E720E6BDA29FB5A2AE38C0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7b46e93f-f22a-3586-9fb5-92d756f5b625.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     395075
IP address blocks:        207.253.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:20:e6:bd:a2:9f:b5:a2:ae:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=8bd7d31a-38a6-4744-b253-9f7b31cfb64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:43:e2:18:e3:1a:ba:f7:26:4a:12:3d:f5:
                    c0:68:b2:e6:df:d7:f0:8e:b5:31:c4:2d:27:23:d5:
                    b0:21:f1:1f:d3:75:aa:a3:84:9f:37:57:07:fe:87:
                    2e:54:00:48:d9:0e:76:a3:1f:ac:64:63:85:c7:95:
                    ce:40:db:e3:b4:69:c2:83:f5:b0:dd:73:85:19:35:
                    2f:91:e9:f9:2d:45:6e:88:10:98:88:56:fe:58:6d:
                    77:7f:33:03:fe:53:b6:96:e6:d6:4e:67:3e:28:8a:
                    13:4e:55:33:6e:c8:d3:75:1f:f8:4a:3e:39:0e:ce:
                    a6:e4:e9:af:55:33:dc:6a:88:1b:d5:3c:36:53:65:
                    ac:53:3a:80:d3:b9:bf:d4:6a:32:49:8b:ab:84:fe:
                    3a:ed:32:90:ef:10:2c:d5:82:26:4b:8e:c9:a6:f2:
                    da:ec:16:0a:d3:23:b2:3c:2c:a5:b7:8a:bc:8e:b1:
                    ef:ed:bb:e0:bd:af:b6:0d:36:b4:90:ef:91:0b:3a:
                    db:47:6c:76:5a:8a:7b:9b:af:b3:7b:d1:4a:a0:2e:
                    03:62:55:4e:9e:de:92:37:4f:47:ac:4e:4c:a9:e9:
                    c1:f8:a0:40:2d:ba:df:c9:7d:20:96:4d:57:69:38:
                    5c:bb:8f:0f:88:ea:d0:a2:27:58:b4:f0:7c:d3:66:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3C:81:B8:78:8B:29:C4:BF:0D:06:AB:08:F0:DF:7F:A6:12:62:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7b46e93f-f22a-3586-9fb5-92d756f5b625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:a9:56:fc:df:ea:c6:80:4a:0f:98:5a:43:79:d4:11:f4:
         3e:23:f8:46:3b:7d:33:28:b7:da:56:03:68:bb:5b:1a:dc:76:
         bc:e5:b0:89:a5:78:0c:1e:0a:ed:ee:1a:ae:c2:e9:50:5a:76:
         4d:12:8d:b0:b5:26:ee:ab:7b:2a:ef:7b:df:8c:b9:8b:2e:bf:
         bf:16:62:33:44:91:3a:c3:8f:34:91:3b:76:43:30:de:b3:88:
         56:6a:22:ee:f2:27:2d:78:53:5d:75:88:af:ad:21:91:2d:e3:
         bb:9c:e7:22:32:3f:d3:f4:72:9d:82:de:a1:ec:e6:1c:41:83:
         12:13:e5:0d:20:f4:39:6f:63:45:10:60:e2:36:43:6d:b2:d8:
         07:c8:85:30:ee:09:95:b4:54:9d:04:96:6a:35:b9:be:36:8e:
         fa:71:50:ac:a7:5c:6c:b2:91:ef:84:22:ce:60:d7:2b:41:96:
         85:7e:80:46:b5:82:6b:99:24:cc:8d:1d:65:13:b8:6b:f9:aa:
         b3:d7:32:cc:20:ea:d4:54:3d:2b:f4:45:ae:c4:1c:bc:81:69:
         b4:77:7e:f0:65:21:01:7c:d2:f0:62:62:7e:97:d0:11:e6:e6:
         92:8b:09:dc:83:07:bc:22:5c:c4:47:fd:35:76:49:9d:35:28:
         63:73:42:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yDmvaKftaKuOMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
OGJkN2QzMWEtMzhhNi00NzQ0LWIyNTMtOWY3YjMxY2ZiNjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZD4hjjGrr3JkoSPfXAaLLm39fwjrUxxC0n
I9WwIfEf03Wqo4SfN1cH/ocuVABI2Q52ox+sZGOFx5XOQNvjtGnCg/Ww3XOFGTUv
ken5LUVuiBCYiFb+WG13fzMD/lO2lubWTmc+KIoTTlUzbsjTdR/4Sj45Ds6m5Omv
VTPcaogb1Tw2U2WsUzqA07m/1GoySYurhP467TKQ7xAs1YImS47JpvLa7BYK0yOy
PCylt4q8jrHv7bvgva+2DTa0kO+RCzrbR2x2Wop7m6+ze9FKoC4DYlVOnt6SN09H
rE5MqenB+KBALbrfyX0glk1XaThcu48PiOrQoidYtPB802ZMAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBU8gbh4iynEvw0Gqwjw33+mEmIxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2I0NmU5M2YtZjIyYS0z
NTg2LTlmYjUtOTJkNzU2ZjViNjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZ8qVb83+rGgEoPmFpDedQR9D4j+EY7fTMot9pWA2i7WxrcdrzlsIml
eAweCu3uGq7C6VBadk0SjbC1Ju6reyrve9+MuYsuv78WYjNEkTrDjzSRO3ZDMN6z
iFZqIu7yJy14U111iK+tIZEt47uc5yIyP9P0cp2C3qHs5hxBgxIT5Q0g9DlvY0UQ
YOI2Q22y2AfIhTDuCZW0VJ0Elmo1ub42jvpxUKynXGyyke+EIs5g1ytBloV+gEa1
gmuZJMyNHWUTuGv5qrPXMswg6tRUPSv0Ra7EHLyBabR3fvBlIQF80vBiYn6X0BHm
5pKLCdyDB7wiXMRH/TV2SZ01KGNzQvw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:49 2025 by rpki-client