Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04e7b99f-79c4-3734-bae0-0c4fb3cdb51c.roa
File:                     04e7b99f-79c4-3734-bae0-0c4fb3cdb51c.roa (raw, json)
Hash identifier:          SHdD7qypIePe86l07plbVUvtad5HINns1vG3r3eaAdk=
Subject key identifier:   BA:66:D9:A6:8F:49:BC:F7:02:51:FF:74:F6:BB:3C:5A:B6:E7:0D:E4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B5DD1F033645AF3EC6C918180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04e7b99f-79c4-3734-bae0-0c4fb3cdb51c.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     3360
IP address blocks:        207.37.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f0:33:64:5a:f3:ec:6c:91:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=88dd4694-382e-4de4-87ee-7aebd7d58d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:91:97:bf:5f:db:c9:88:4e:29:e4:d1:e9:
                    39:b8:28:51:30:ed:af:ec:90:61:94:7b:6d:bc:e5:
                    b0:3f:d2:80:a6:d0:ad:9b:c9:12:97:f9:d7:29:4c:
                    82:5b:34:22:fe:82:0c:b6:3a:9d:49:f4:34:02:07:
                    1e:19:d8:86:c6:30:39:97:b5:20:98:ef:84:e6:5a:
                    48:66:db:6a:be:4d:d8:e6:6c:6a:6f:09:80:73:56:
                    5d:34:6e:35:a6:28:2d:93:6f:32:1c:4e:79:89:7f:
                    a9:48:66:4b:e6:c1:9c:ed:fa:2c:4e:4a:41:18:00:
                    a2:13:83:bd:9b:ea:08:83:4e:3c:f4:a4:ac:35:4f:
                    37:2d:b5:20:c7:48:27:3e:10:55:bb:be:36:03:ba:
                    68:54:aa:be:cb:06:7a:5a:2d:4a:f9:6f:67:34:c7:
                    d6:69:2a:8b:db:0c:f4:44:59:e2:b6:47:21:f3:58:
                    5c:94:de:d7:eb:b7:7e:20:06:65:ac:eb:d0:b7:3e:
                    60:36:78:b9:c5:38:b8:d2:79:84:78:2d:b2:94:ac:
                    d5:b8:26:37:81:b8:bc:7b:64:ac:cd:c5:11:f3:a5:
                    4b:56:6b:e4:63:a5:65:ff:78:f8:f4:8d:d0:86:5e:
                    ea:07:bd:20:fd:26:dd:df:d8:45:65:f1:1c:b7:30:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:66:D9:A6:8F:49:BC:F7:02:51:FF:74:F6:BB:3C:5A:B6:E7:0D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04e7b99f-79c4-3734-bae0-0c4fb3cdb51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:c4:28:e4:4a:a3:21:bf:09:5e:00:d1:5a:6b:00:09:1a:
         9d:67:66:f1:38:e6:04:7b:61:2a:25:b4:89:bb:a0:a6:6d:5f:
         f7:ff:6c:96:48:51:f7:1f:e4:9f:a6:46:80:1a:d0:b9:e7:0a:
         02:8b:f1:78:5c:52:24:9b:be:e8:bb:36:13:ab:fe:45:37:4d:
         ec:6f:4b:f8:fb:f7:5f:b6:c1:d6:89:c4:54:85:30:76:06:1d:
         8b:f5:f3:b7:0e:4d:94:d3:49:ba:6f:eb:b1:13:e7:de:7f:ba:
         ea:ed:21:ac:8a:57:f8:20:b4:34:c5:e7:99:26:14:7d:6b:3b:
         d4:4b:27:50:5d:ae:ec:4a:c2:b1:76:b9:b0:fc:b5:6e:da:74:
         73:eb:f4:6b:4f:38:a8:e8:f1:f9:45:0e:63:71:42:c2:8d:34:
         4e:62:ee:d3:18:78:b3:b4:e1:90:b2:a6:30:ad:43:dc:2c:b1:
         30:85:fe:95:6e:78:da:7f:ee:51:f4:4b:c3:4a:9b:bd:31:25:
         4b:f8:36:45:66:71:b0:fa:29:79:1f:d0:98:4d:d1:a1:2b:79:
         fe:41:b1:4d:b5:0c:e0:f2:1b:ad:ce:55:fc:c6:45:25:ed:45:
         16:af:5c:34:ed:a2:83:4b:88:57:1e:72:89:92:68:ba:9b:3c:
         e8:2c:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:39 2025 by rpki-client