Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0277498-f0bc-3a5e-8f6e-ada8c68819c2.roa
File:                     b0277498-f0bc-3a5e-8f6e-ada8c68819c2.roa (raw, json)
Hash identifier:          4LpdcrHglaLbb9R5Qh69ZK+MYLK+65TkPviNoUVBPOg=
Subject key identifier:   5A:44:C5:2C:5D:77:09:EB:06:D4:39:BA:FE:5A:CD:1F:6A:6C:AC:89
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A506AEB268E0D28C9C6B64700
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0277498-f0bc-3a5e-8f6e-ada8c68819c2.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     12132
IP address blocks:        207.96.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:eb:26:8e:0d:28:c9:c6:b6:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=c5c9ae2c-9731-429d-b882-98ae1f5d6f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:bb:eb:14:f7:ce:57:03:7b:32:25:4e:26:
                    ff:0e:d4:b2:37:11:f7:24:50:c7:0c:a0:3d:a2:22:
                    7c:8e:aa:66:8c:45:6c:d0:33:08:24:ff:b9:b1:ef:
                    4e:11:ee:5c:3d:c0:69:c3:c4:e5:ac:db:56:ed:95:
                    0c:94:4b:b6:5b:e7:ff:63:2d:35:c8:9e:be:70:c9:
                    0a:88:ae:65:95:90:7d:79:2e:3b:f1:f7:fe:80:bf:
                    22:75:f7:e1:53:9c:ec:f4:8c:e9:40:bd:e0:fa:1f:
                    d5:14:b5:ae:80:0d:46:05:a2:87:3d:49:a7:99:6e:
                    67:e0:13:ef:ad:c7:b0:bb:a1:5f:0a:3a:4f:71:0a:
                    76:70:38:30:c4:df:1b:ed:cf:f6:76:63:79:c5:6e:
                    7a:a1:3f:0b:59:6f:9f:f8:a3:5c:01:c0:10:92:aa:
                    c0:42:cb:1d:55:8b:bc:28:4d:b8:25:b2:07:b8:d5:
                    00:fd:52:1d:ab:da:eb:bf:62:b0:fc:87:44:70:4a:
                    6a:cd:6b:c6:8b:f2:d3:78:7e:9d:50:89:6a:0e:a2:
                    97:e7:ea:7a:a4:89:1d:4a:5d:3f:a6:43:77:90:02:
                    46:59:e4:4c:69:c3:d8:a8:3a:f8:af:ca:63:76:76:
                    0f:20:1b:17:a9:9e:b3:70:99:5b:11:54:db:09:5d:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:C5:2C:5D:77:09:EB:06:D4:39:BA:FE:5A:CD:1F:6A:6C:AC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0277498-f0bc-3a5e-8f6e-ada8c68819c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:af:13:8e:15:fb:ba:82:d0:1f:2d:31:ce:c4:9a:ee:9a:0e:
         3b:36:3f:75:20:45:6d:e2:a2:c9:b3:9b:94:d8:9b:46:37:03:
         5b:47:db:e2:d6:36:94:19:c4:56:4a:ae:af:44:51:dc:5b:3d:
         c6:5c:18:45:a1:ef:9b:b0:e8:28:99:28:ef:3a:27:6e:07:6a:
         ae:73:9f:9b:06:b9:65:ee:56:cd:68:06:10:16:e1:65:9f:d7:
         80:76:13:a4:b1:14:ae:68:ff:5a:65:94:7f:ce:e7:7a:60:07:
         d2:ae:ae:bb:d7:71:94:79:c7:b4:44:4a:14:af:76:9d:ea:06:
         1d:ee:7e:40:8a:46:b6:dc:6c:04:31:a8:26:3a:61:62:c4:e6:
         2e:c6:5d:e8:20:96:84:a7:0b:80:3e:86:c5:e4:a2:38:0c:ca:
         c0:12:dd:f6:8a:f3:3b:e0:d1:fe:63:25:cd:e9:fc:00:45:2b:
         6f:46:4b:16:e2:ab:0c:da:b7:c7:ad:f1:74:f5:b1:da:50:fc:
         8e:54:e6:66:c4:01:7a:63:af:62:f2:fe:9c:e9:4a:13:31:52:
         8f:7f:51:b5:14:34:b5:76:d4:58:99:f6:d9:a9:27:c0:09:5d:
         bb:87:b1:2a:c8:9d:a7:d1:04:f6:94:3f:47:fa:53:9c:75:b4:
         38:6a:b8:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQausmjg0oyca2RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk
YzVjOWFlMmMtOTczMS00MjlkLWI4ODItOThhZTFmNWQ2ZjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUS76xT3zlcDezIlTib/DtSyNxH3JFDHDKA9
oiJ8jqpmjEVs0DMIJP+5se9OEe5cPcBpw8TlrNtW7ZUMlEu2W+f/Yy01yJ6+cMkK
iK5llZB9eS478ff+gL8idffhU5zs9IzpQL3g+h/VFLWugA1GBaKHPUmnmW5n4BPv
rcewu6FfCjpPcQp2cDgwxN8b7c/2dmN5xW56oT8LWW+f+KNcAcAQkqrAQssdVYu8
KE24JbIHuNUA/VIdq9rrv2Kw/IdEcEpqzWvGi/LTeH6dUIlqDqKX5+p6pIkdSl0/
pkN3kAJGWeRMacPYqDr4r8pjdnYPIBsXqZ6zcJlbEVTbCV05hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpExSxddwnrBtQ5uv5azR9qbKyJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjAyNzc0OTgtZjBiYy0z
YTVlLThmNmUtYWRhOGM2ODgxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2DOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOvE44V+7qC0B8tMc7Emu6aDjs2P3UgRW3iosmzm5TYm0Y3A1tH2+LW
NpQZxFZKrq9EUdxbPcZcGEWh75uw6CiZKO86J24Haq5zn5sGuWXuVs1oBhAW4WWf
14B2E6SxFK5o/1pllH/O53pgB9KurrvXcZR5x7REShSvdp3qBh3ufkCKRrbcbAQx
qCY6YWLE5i7GXeggloSnC4A+hsXkojgMysAS3faK8zvg0f5jJc3p/ABFK29GSxbi
qwzat8et8XT1sdpQ/I5U5mbEAXpjr2Ly/pzpShMxUo9/UbUUNLV21FiZ9tmpJ8AJ
XbuHsSrInafRBPaUP0f6U5x1tDhquNE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:50:59 2025 by rpki-client