Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa
File:                     d3c65396-5041-30f8-854e-d076751f12be.roa (raw, json)
Hash identifier:          UZgLfGS4UlqTtQi62B5wUoaWmUFyCOzKT6ksXV1W6+8=
Subject key identifier:   94:D1:6A:BF:12:9B:F9:02:CF:BD:F7:D9:B1:94:92:B7:0C:DC:07:BF
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CD60BA1996826C14551A40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        207.126.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:60:ba:19:96:82:6c:14:55:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5f41964d-76bd-49d7-a94b-fd7670a677ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:0e:38:63:3f:6d:18:07:aa:a5:c6:78:49:
                    67:0e:bd:b8:29:51:a1:03:d3:cd:66:56:01:dc:7e:
                    d4:e1:e5:d0:02:13:bc:a4:db:4d:2e:27:9e:ca:8c:
                    26:43:df:89:6e:d4:9c:e6:0c:f5:c9:d2:f5:84:dd:
                    3e:4c:2a:ba:a5:60:f5:e8:7d:be:fa:50:ee:77:0f:
                    bf:df:09:80:70:58:ee:c3:16:35:f7:fc:98:6b:ca:
                    1f:dc:fd:54:f1:83:07:7d:87:5a:4b:af:96:78:07:
                    89:88:dc:83:6e:6b:39:26:36:65:85:73:d9:ac:ab:
                    7f:ad:68:9d:5e:c6:c4:37:1e:0f:cc:b8:5e:08:55:
                    de:3f:50:8f:90:38:bc:4b:b8:d7:14:c9:da:0b:43:
                    a9:67:4b:9d:90:14:cd:cc:d5:28:dd:c9:12:c1:ca:
                    d5:8c:70:d8:5b:a7:83:e7:c3:6d:e8:05:65:62:eb:
                    dc:0c:69:81:a3:64:99:6d:3e:f5:16:e1:c1:14:30:
                    ca:4d:87:ae:7c:a3:d2:0b:e0:5a:f6:a0:68:af:e7:
                    78:8f:29:bf:30:a5:28:7d:93:b7:01:fa:81:d3:05:
                    00:27:63:19:84:91:64:03:51:8b:aa:a9:34:55:a6:
                    d4:b7:f4:0f:4a:3e:1b:fe:ed:b0:e6:d9:61:05:1e:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:6A:BF:12:9B:F9:02:CF:BD:F7:D9:B1:94:92:B7:0C:DC:07:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d3c65396-5041-30f8-854e-d076751f12be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:70:05:a7:2a:64:86:d7:ed:cc:bd:6b:99:e8:a8:fb:83:38:
         69:08:4c:3a:b7:62:2a:98:9b:69:3b:41:b6:0e:55:5b:af:27:
         b7:bd:e9:d3:e6:2d:e3:78:f3:e0:28:71:06:56:03:e2:7a:bd:
         23:91:39:01:63:e4:41:66:9c:ba:ea:63:bb:b5:c0:82:79:5c:
         b4:98:61:c2:c2:62:98:78:f6:4b:84:ad:14:50:56:bf:4a:a0:
         76:31:fb:61:82:de:cc:8d:9b:73:e9:08:11:f7:3d:e8:26:6a:
         07:4a:48:d5:30:ea:ab:91:05:3f:48:f4:b7:81:13:a7:a1:ee:
         57:c8:c0:6a:7e:d0:ac:47:0e:91:ce:2e:78:f5:79:7c:45:e2:
         a9:4c:73:05:63:88:1d:f3:b0:29:35:e9:0c:8a:74:20:74:04:
         94:cc:9a:3e:94:78:1b:dc:68:56:ed:ca:0c:02:6e:36:9d:8e:
         c8:ce:9d:45:c0:52:0b:c5:c3:cb:10:75:34:68:d9:63:d6:68:
         3e:5c:e8:8f:e5:3a:e8:ef:7c:25:61:ab:0b:74:63:82:18:96:
         40:e9:cb:6b:23:8f:97:cd:02:72:5f:41:b4:38:3c:3d:f2:06:
         cb:89:76:ba:ac:3b:4d:51:b4:0f:00:d7:ae:6e:2b:76:fa:22:
         76:ec:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:58 2025 by rpki-client