Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/266a50ef-d98b-38c9-9f5d-a79411de887e.roa
File:                     266a50ef-d98b-38c9-9f5d-a79411de887e.roa (raw, json)
Hash identifier:          d2PoF2ouGC0icrKOeS+yyvSCZJKJ8Iji/3kv30voRcM=
Subject key identifier:   EA:15:D3:4C:B9:94:CA:C3:C4:1D:5D:1D:B7:EC:0B:E9:9B:4B:00:72
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CD5E9C896722BD28355800
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/266a50ef-d98b-38c9-9f5d-a79411de887e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        207.126.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:5e:9c:89:67:22:bd:28:35:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=912a5694-dbaf-44d8-af6c-971011e30c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:fc:25:8c:fd:7c:88:af:d4:db:65:07:ec:
                    8c:41:13:a5:ea:1c:73:d6:e7:f1:74:f5:85:38:d7:
                    7b:f4:f4:df:b0:f5:b6:44:f6:49:39:b9:ff:24:95:
                    23:91:77:d9:22:43:d5:57:f0:fe:5b:80:57:da:cc:
                    e7:bc:a7:23:71:89:f4:2d:6a:aa:b1:68:0e:6c:ce:
                    80:de:06:f0:8c:dd:ce:4d:8a:de:31:c4:61:2c:9e:
                    db:24:8e:19:e8:37:50:09:74:9b:e8:70:22:ad:3b:
                    f9:de:89:58:8a:a5:6f:eb:d6:42:68:b8:43:84:f5:
                    19:9d:55:3b:23:6c:ca:96:ff:35:c4:05:9f:73:05:
                    e3:85:9b:cb:6f:d7:4d:3a:00:eb:7d:c6:57:10:af:
                    6a:bc:6f:6a:50:a7:f9:c2:09:0b:18:5c:e2:fa:5e:
                    4c:98:2f:64:a3:cb:a8:f2:9e:1c:9e:d0:bf:a3:20:
                    13:bb:e9:6e:f4:08:32:38:a8:c4:59:5c:ca:aa:0f:
                    21:81:dc:20:99:f8:d2:53:ea:d0:ec:c0:46:72:76:
                    c0:11:b3:28:e7:64:dd:6d:e0:8d:0d:47:d0:a3:45:
                    72:28:f3:2d:f7:79:d6:27:76:ce:c3:6c:b0:ae:68:
                    35:60:be:1d:02:22:94:0b:fb:4a:51:da:d4:b9:81:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:15:D3:4C:B9:94:CA:C3:C4:1D:5D:1D:B7:EC:0B:E9:9B:4B:00:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/266a50ef-d98b-38c9-9f5d-a79411de887e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bd:d6:61:60:8f:a6:cd:a7:7a:d3:bc:1d:48:66:5e:e6:3d:
         d4:31:83:d5:15:5d:c7:bc:99:b3:54:99:58:d2:b6:6e:04:9b:
         38:89:6c:df:ed:dc:87:11:c1:de:d1:50:7b:53:3a:24:fd:a4:
         b4:24:84:c8:1b:62:73:70:85:b0:7e:40:41:b7:b2:28:f9:eb:
         71:83:ae:9b:ae:6d:b6:a6:40:63:1c:9c:82:5b:d1:f3:53:ff:
         9a:b1:b8:4e:32:9f:93:29:56:bf:54:0c:10:c4:9c:ee:47:5e:
         49:1d:07:c4:6f:69:f0:29:80:33:b8:1f:d1:22:be:65:e1:08:
         be:43:ac:26:6a:0e:fc:98:4e:e0:15:da:e1:99:58:d3:b5:7e:
         ce:e1:31:a0:e9:3e:ef:d3:a2:d5:8d:05:e5:24:59:8a:30:76:
         4d:59:72:eb:08:11:de:73:43:4e:39:78:76:29:a1:c4:a4:ed:
         c9:1a:83:4a:6c:1d:e2:9e:81:ea:e1:7e:47:39:ca:70:6e:c7:
         ea:10:4a:da:78:b2:0c:e5:2d:23:f8:d1:c8:2c:23:90:76:a9:
         30:9b:6d:f9:52:9f:3b:da:ea:67:c2:66:0b:fc:05:e2:4d:a2:
         23:10:f9:b9:1c:e4:28:4c:12:eb:e5:79:b0:5f:47:cc:74:76:
         5e:4e:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:21 2025 by rpki-client