Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0ed21c3a-5cdb-3848-8df8-967dbceeb27f.roa
File:                     0ed21c3a-5cdb-3848-8df8-967dbceeb27f.roa (raw, json)
Hash identifier:          W5l5EPdosTzEbbv8rgXaDQ6d6z5oS5ulwju4GxJVV5c=
Subject key identifier:   85:8F:82:55:E1:74:C0:24:80:AD:C3:D1:0E:EC:63:E0:C1:BD:22:6B
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A612B0BC07FDF92A9BD415E80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0ed21c3a-5cdb-3848-8df8-967dbceeb27f.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     395075
IP address blocks:        207.253.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0b:c0:7f:df:92:a9:bd:41:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=d4752718-4336-4149-bdf8-ca52348faa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:60:17:0e:7a:a2:7b:b2:86:c4:78:f8:61:
                    22:c9:50:2c:8b:0b:9a:86:29:72:35:af:f1:eb:a4:
                    b9:1d:12:50:58:9f:22:58:a1:c9:88:a6:7e:c9:bb:
                    1f:50:8d:36:bd:1e:4c:5d:d0:d4:96:2e:69:21:07:
                    9e:fc:a2:9e:be:8b:db:41:64:24:1b:06:4a:2e:3a:
                    ac:de:f9:20:be:9a:07:c8:44:84:4f:fd:f2:0b:a4:
                    53:74:ce:c2:c8:66:83:74:5a:03:3b:c3:37:73:3d:
                    76:ae:2b:f5:0c:da:1d:f8:4a:5f:e5:33:16:e4:b6:
                    74:7a:35:eb:03:28:98:35:67:bb:8b:53:a6:d5:85:
                    06:54:4a:71:da:5b:d4:46:f4:3a:51:3e:36:31:c3:
                    66:1f:68:77:aa:d5:31:5f:77:98:ec:51:db:20:e2:
                    7f:2f:63:7f:eb:4f:2f:38:d1:71:a1:46:d2:c5:e8:
                    4b:3a:95:ef:91:f7:b6:57:ff:ca:a9:93:29:de:bb:
                    83:03:bd:cb:cf:8a:df:e0:b0:1f:94:de:61:3a:9d:
                    98:66:6b:a6:bf:a0:d0:93:08:c6:40:58:74:e0:1c:
                    79:ae:9f:e7:b6:2b:51:7c:5b:98:7b:ad:a2:83:6a:
                    64:6c:46:32:82:57:db:f4:1a:b8:39:cf:68:c0:eb:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:82:55:E1:74:C0:24:80:AD:C3:D1:0E:EC:63:E0:C1:BD:22:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0ed21c3a-5cdb-3848-8df8-967dbceeb27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e3:7c:00:28:dc:1e:e0:e4:eb:43:57:3d:d7:d8:09:ed:be:
         4d:09:97:8e:94:f5:54:b6:8d:48:55:d1:f7:e5:25:16:b8:62:
         64:bf:05:46:d6:d3:e0:07:07:6c:9d:28:d5:cb:63:1d:8c:6c:
         b4:86:80:8c:4e:4e:86:81:c5:58:99:99:93:de:4b:8c:cc:3d:
         ea:20:c1:70:10:d3:9f:e4:7a:b2:a3:6c:fe:2b:f0:67:71:61:
         c8:83:d8:c7:58:a3:da:dc:e3:91:bf:19:7b:ca:c1:8d:f3:43:
         ac:0f:94:01:74:f6:75:f5:45:44:8e:f9:1d:72:35:e4:98:cc:
         e5:57:dc:2a:26:3b:2b:ac:5e:1b:9f:be:50:af:d5:29:38:e0:
         9b:67:3e:c6:0b:6f:44:61:5f:2b:d3:46:24:42:0b:3f:65:b7:
         09:ef:b9:f5:a5:89:d9:16:11:4b:a4:43:5d:e8:13:78:67:4b:
         90:46:11:24:6b:a9:bf:d1:14:57:43:26:b7:26:a6:59:16:16:
         48:69:24:99:dd:88:df:1b:49:0d:99:af:3d:79:c4:38:4d:07:
         4e:1b:5d:e5:91:37:65:27:d3:55:09:94:2b:e8:54:03:1f:a4:
         63:8c:27:97:1e:c6:71:9f:1d:14:f1:56:c0:45:60:37:9b:cf:
         28:fc:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 20:06:11 2025 by rpki-client