Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa
File:                     c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa (raw, json)
Hash identifier:          VyYjA2LxO4621vv5lqxDGvKPrwlUPdVXsFFPJ9n75z4=
Subject key identifier:   B4:A9:7A:B6:82:65:9C:D3:26:87:6D:23:73:62:EF:01:3F:6B:1B:AF
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B41E724B8B54B2902A8303540
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        207.253.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:24:b8:b5:4b:29:02:a8:30:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=354779dd-370b-405d-98fb-620a0e393bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:00:8f:4a:7c:c4:9c:cd:8e:7c:d3:fb:40:13:
                    fa:8f:0f:89:7b:a6:48:c5:2d:1d:1f:d7:4f:13:62:
                    fd:7d:18:cb:77:dc:e4:30:ac:e3:ff:5c:bd:6a:12:
                    a1:be:a5:5a:99:37:ad:67:27:d5:09:2e:c6:5c:2d:
                    da:ce:04:5b:09:17:1c:7d:42:c8:09:b4:54:55:ae:
                    15:45:bc:d7:28:96:f6:c3:3b:43:11:36:8a:ef:4b:
                    12:13:24:7b:83:d7:c4:76:ac:17:37:85:4f:3b:46:
                    9b:1d:c6:93:25:aa:63:3e:94:47:89:f0:ab:30:11:
                    a5:01:2e:a5:d2:3c:f6:1a:c4:73:48:b5:ca:27:35:
                    0d:54:8d:07:ae:0c:73:9c:ee:a8:6c:3d:b6:bb:df:
                    80:40:c6:0a:ad:94:a2:47:2e:08:63:53:59:bd:ad:
                    67:1c:5c:e1:94:8e:8b:8e:bb:b6:20:e0:93:68:82:
                    27:3b:32:81:09:52:cc:34:78:65:ae:a9:dd:2a:60:
                    1b:84:15:9d:c2:b6:3f:20:f7:8d:ea:e0:e5:6a:40:
                    13:fd:c5:c5:2b:3e:57:e7:49:54:db:89:77:4e:c7:
                    9f:9b:20:89:5b:d6:2c:05:1c:9b:4e:67:99:82:ed:
                    09:f1:a0:1e:98:01:cc:9c:9c:7b:03:30:87:e7:0e:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:7A:B6:82:65:9C:D3:26:87:6D:23:73:62:EF:01:3F:6B:1B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:4e:bc:a4:17:96:a7:0b:11:74:ba:3d:2a:d6:4c:5e:14:
         5e:cc:f5:21:97:21:36:31:82:df:ff:15:ea:8b:bc:eb:b4:91:
         d0:97:01:0c:16:5e:9f:a8:92:85:cf:77:8f:25:ed:0c:bd:9d:
         95:d4:51:76:f7:01:a6:f9:95:9e:68:d0:25:ee:82:7c:5c:81:
         32:9a:05:38:b8:40:9b:60:d8:f8:73:4e:89:e9:ae:1d:43:f9:
         09:16:b8:fe:6b:3d:24:f8:5e:58:50:e3:9f:b8:3a:10:1b:f0:
         91:a0:99:5b:9f:84:f2:47:97:28:a4:2e:f2:84:4a:68:d2:87:
         ff:5f:fc:e0:50:7d:49:f8:c2:05:fa:9e:95:d4:da:8e:35:50:
         1d:3f:b5:08:60:ec:1b:f1:3d:bc:f8:4a:22:83:06:7b:00:88:
         a0:2d:08:f4:ef:f0:6a:50:28:2d:45:19:5c:22:50:06:55:9c:
         33:46:6f:c8:d5:f6:94:c1:90:39:16:4b:f9:54:05:92:33:3b:
         bc:ce:9a:76:f9:27:06:8e:57:f7:67:ee:38:ef:f3:89:99:f3:
         25:22:de:9b:42:bc:74:03:84:ae:aa:2d:1a:1e:92:e6:a3:1d:
         2f:1d:67:4f:4a:2a:62:72:c0:e5:b9:06:f4:50:19:0c:65:a7:
         c8:40:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:31 2025 by rpki-client