Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa
File:                     de2b23cb-f504-3c48-9f13-c9c082c146db.roa (raw, json)
Hash identifier:          FFn+bITQpUoRujqk/FYL9x9x9abV6bYby3H2NSVGYs8=
Subject key identifier:   CE:17:69:D1:2B:46:AE:A6:B9:9E:3C:90:D0:07:2B:3A:92:98:69:F8
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CD57D3AC6849B96FD20B00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     32381
IP address blocks:        207.126.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:57:d3:ac:68:49:b9:6f:d2:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9e6dcbd7-4db0-4355-8059-c8b522e6a610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:71:c5:90:1f:bb:d0:ea:ae:d4:6d:e3:6a:
                    9a:d5:a8:c4:1e:b8:41:55:05:26:75:5f:c0:e5:f9:
                    11:34:35:33:ec:41:c6:9d:71:10:a3:8d:74:69:50:
                    63:01:ad:4f:8e:55:04:58:0b:52:e5:03:33:42:ca:
                    1a:5c:36:7d:cd:82:64:2a:2f:6a:c3:90:89:a2:d4:
                    1c:cd:9d:24:f0:55:7a:11:63:f9:cb:8e:96:bb:70:
                    4c:9f:91:ea:a4:fc:84:a3:aa:9a:e7:5e:52:5c:56:
                    f3:87:6c:d1:9e:b6:a6:6f:54:ca:64:6d:34:64:65:
                    ce:85:f3:25:50:8c:20:2f:ca:13:ee:7b:52:36:5e:
                    02:21:7a:c6:fa:b1:91:39:a1:01:5f:ae:c0:b2:c0:
                    b0:54:60:c5:fe:1d:56:15:d1:da:0c:29:cf:89:06:
                    9d:d0:fd:48:6c:b1:41:37:9a:dd:c5:78:e2:08:6a:
                    3f:7b:2d:19:05:a0:00:9f:92:1d:62:9f:4f:99:56:
                    b9:f1:c0:a7:12:ba:13:d0:a8:5a:68:bb:49:ce:0e:
                    68:b0:bf:e0:de:0a:b8:74:f3:b5:6e:5d:13:23:57:
                    d8:ca:26:c2:36:3e:6b:4c:fb:76:61:78:5d:33:a8:
                    b4:4d:35:49:a0:e1:3c:3c:55:02:15:7a:0e:40:0b:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:17:69:D1:2B:46:AE:A6:B9:9E:3C:90:D0:07:2B:3A:92:98:69:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/de2b23cb-f504-3c48-9f13-c9c082c146db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:f7:4d:8a:53:0b:38:e8:e0:22:61:88:94:5a:65:92:34:
         d5:63:33:7f:9c:6a:99:22:b6:62:eb:be:1d:f4:fe:3b:ef:6a:
         68:08:c7:2a:17:f9:72:f2:4f:8f:17:99:c0:d3:f3:36:4b:4f:
         b2:1e:09:3a:a0:43:a5:23:6a:53:be:4c:17:a4:e2:93:6b:5b:
         97:66:fd:28:0a:a6:e7:1f:85:6e:46:de:f4:7c:59:fd:9b:f3:
         3c:07:56:c5:58:fd:cd:64:c0:67:5e:60:d8:6c:b2:9c:a1:7f:
         39:fd:27:24:55:39:0d:9c:aa:e3:04:ef:b7:82:69:80:5d:27:
         b3:a0:08:66:c9:d1:bb:3d:b5:e2:9e:fb:73:b8:9b:c9:f6:0f:
         8a:14:d0:ec:56:c6:d2:81:11:e3:2e:40:e7:05:6c:22:4a:9d:
         47:94:c0:d5:7e:c7:bc:64:a9:e4:e7:f4:10:25:bf:46:ce:b4:
         73:c5:96:88:5b:2f:f4:26:de:fd:5a:eb:65:44:e3:3a:74:3f:
         32:85:6d:ec:4f:8b:92:1f:3f:88:8f:19:6c:d3:77:98:aa:00:
         fc:d6:08:7d:b3:98:38:23:bb:42:f7:e0:e9:35:05:c2:e6:6e:
         b9:4c:94:1f:12:ca:ff:e9:6a:94:a9:33:51:fb:07:7b:9c:4a:
         f4:54:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:33 2025 by rpki-client