Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/36468591-97b0-3ea5-8478-d699f32182a8.roa
File:                     36468591-97b0-3ea5-8478-d699f32182a8.roa (raw, json)
Hash identifier:          YqFi6JTkAbTu2fXPLYLDMj2V4wYwA1aEHBb4U4G6zOk=
Subject key identifier:   BB:67:E3:95:86:94:6B:05:04:8B:EF:20:83:4B:47:84:65:71:7E:C2
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CD57C2DAB45060F39B8600
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/36468591-97b0-3ea5-8478-d699f32182a8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        207.126.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:57:c2:da:b4:50:60:f3:9b:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=80705242-f886-429b-b309-77e03e6ee5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:fe:e4:95:b1:6b:f1:12:e2:f8:55:13:a3:
                    34:fe:4e:c1:57:a8:42:78:2f:ee:32:7e:40:a4:61:
                    b5:cb:9b:8a:a4:d5:d6:d1:82:a7:95:8d:63:f9:60:
                    c2:20:bb:d7:ec:01:a9:01:4a:11:67:6b:7a:25:74:
                    a8:ab:d2:5f:e4:cd:18:09:7c:29:c5:01:85:14:29:
                    a6:ea:c4:c0:50:72:ef:31:8c:81:a3:3f:25:62:d9:
                    83:7a:92:eb:5a:56:b2:d8:69:39:52:ba:e1:d6:5a:
                    93:4d:30:cf:9f:48:ba:f5:b7:17:34:fc:88:38:24:
                    15:85:25:44:0d:6e:14:05:7f:c4:9c:2d:f2:f2:17:
                    48:4f:3f:fa:c2:5d:f6:7e:2b:c4:e1:05:89:df:f8:
                    dc:59:70:db:89:8b:09:8b:56:19:1a:80:f5:b6:f1:
                    62:95:fe:e3:a9:55:3e:a5:02:4b:59:c5:5c:26:c8:
                    a4:cd:1a:74:7f:7c:46:b9:de:ad:e1:69:05:55:dd:
                    6a:63:ac:d5:ad:f5:4f:ea:48:4c:ec:7b:38:e4:e9:
                    86:e7:6d:ed:ba:4d:18:60:fb:6e:e9:c3:cf:94:fe:
                    81:ae:98:60:20:92:6e:e0:a0:7c:ab:e1:12:f6:63:
                    32:9d:ef:f3:9e:20:41:42:a9:95:c4:26:92:5d:80:
                    72:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:E3:95:86:94:6B:05:04:8B:EF:20:83:4B:47:84:65:71:7E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/36468591-97b0-3ea5-8478-d699f32182a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:b3:43:71:d9:9e:f9:f9:c1:83:00:7c:33:47:11:e3:77:
         e9:c0:21:06:33:b5:23:9a:19:3c:2b:72:a6:cf:1e:2b:38:1e:
         d3:7b:47:91:97:65:7a:89:d0:15:ef:9a:3d:b8:b2:c6:26:06:
         bb:0c:8b:dc:c3:a2:d7:65:9e:71:9d:6c:fe:29:2c:f5:49:de:
         ba:e0:4c:ba:69:4c:11:60:78:ee:5d:ea:f9:cf:5c:c9:5e:8e:
         d5:89:f1:a1:e9:23:d5:2a:df:b0:98:36:fd:11:ae:ec:61:c9:
         e0:9a:e2:1d:3b:a2:bd:3b:e8:76:cf:1b:71:a7:cd:6e:38:49:
         1b:9d:e1:1b:17:a2:92:10:f1:d9:8e:99:1d:53:41:ba:36:46:
         f8:3e:7c:4a:da:7d:08:70:d9:95:46:3f:d2:5b:2a:52:b7:3b:
         01:eb:3c:4f:32:7f:5e:d7:17:8a:d4:43:7c:b1:7c:03:49:cf:
         9a:c1:09:a0:de:af:04:ce:f7:a8:71:f6:22:be:ba:91:b3:a8:
         a4:de:95:ab:b2:9b:90:26:7d:af:63:c2:a7:5c:54:4c:b5:25:
         14:d5:bb:b2:98:6b:47:f2:40:f6:4b:6b:db:aa:45:8d:52:85:
         c5:e3:a9:e0:42:68:cb:45:ab:ae:6a:a4:b2:1c:6f:4e:38:b0:
         d2:c1:1c:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVfC2rRQYPObhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODA3MDUyNDItZjg4Ni00MjliLWIzMDktNzdlMDNlNmVlNWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIT+5JWxa/ES4vhVE6M0/k7BV6hCeC/uMn5A
pGG1y5uKpNXW0YKnlY1j+WDCILvX7AGpAUoRZ2t6JXSoq9Jf5M0YCXwpxQGFFCmm
6sTAUHLvMYyBoz8lYtmDepLrWlay2Gk5Urrh1lqTTTDPn0i69bcXNPyIOCQVhSVE
DW4UBX/EnC3y8hdITz/6wl32fivE4QWJ3/jcWXDbiYsJi1YZGoD1tvFilf7jqVU+
pQJLWcVcJsikzRp0f3xGud6t4WkFVd1qY6zVrfVP6khM7Hs45OmG523tuk0YYPtu
6cPPlP6BrphgIJJu4KB8q+ES9mMyne/zniBBQqmVxCaSXYBytwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtn45WGlGsFBIvvIINLR4RlcX7CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvMzY0Njg1OTEtOTdiMC0z
ZWE1LTg0NzgtZDY5OWYzMjE4MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4zs0Nx2Z75+cGDAHwzRxHjd+nAIQYztSOaGTwrcqbPHis4HtN7R5GX
ZXqJ0BXvmj24ssYmBrsMi9zDotdlnnGdbP4pLPVJ3rrgTLppTBFgeO5d6vnPXMle
jtWJ8aHpI9Uq37CYNv0RruxhyeCa4h07or076HbPG3GnzW44SRud4RsXopIQ8dmO
mR1TQbo2Rvg+fErafQhw2ZVGP9JbKlK3OwHrPE8yf17XF4rUQ3yxfANJz5rBCaDe
rwTO96hx9iK+upGzqKTelauym5Amfa9jwqdcVEy1JRTVu7KYa0fyQPZLa9uqRY1S
hcXjqeBCaMtFq65qpLIcb044sNLBHNw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:33 2025 by rpki-client