Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
File:                     51f2f19f-4253-3216-9f67-f810a90a6463.roa (raw, json)
Hash identifier:          vw/QPAnSN9TgqM5+NW2vKs/MP8ehf/xvPs5Z7fv7ZxA=
Subject key identifier:   DD:44:49:93:FB:93:64:79:8B:21:FA:1C:8B:31:46:2D:B3:32:BD:DC
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A612B1F36618620DF329E2200
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     395075
IP address blocks:        207.253.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1f:36:61:86:20:df:32:9e:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=8d48ea1a-e4d3-43dd-bf4d-3123b733834f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:98:89:dd:02:c6:d2:9c:81:7d:e7:a6:61:
                    0e:e0:a9:c5:0b:b7:25:91:fe:f6:6f:e8:6e:d8:25:
                    7f:d5:25:c3:81:55:61:c2:97:c5:e7:c6:f7:e9:e7:
                    2b:36:34:eb:6f:2c:a8:65:be:69:79:ad:c6:3e:6b:
                    04:23:c4:96:cf:23:45:5a:b0:c7:85:66:0e:20:1c:
                    0e:ff:5a:d2:5f:4d:a3:2a:85:b7:0b:49:9a:61:d7:
                    6a:69:f6:92:e1:02:97:0f:25:9e:47:34:e8:86:5a:
                    37:cf:16:7c:48:6c:ca:12:1f:04:11:86:ef:45:2b:
                    bd:8a:a1:85:a6:48:9d:56:2d:8e:71:37:1d:5b:98:
                    ff:d2:67:e4:ca:13:c6:bb:e6:a0:8e:ce:fd:ee:00:
                    fa:6e:0e:aa:c6:14:df:2b:bf:20:cc:19:02:dd:ff:
                    46:d3:de:10:eb:59:fa:3e:5c:4a:0d:82:cd:33:0e:
                    22:88:a1:5f:67:55:e1:e6:ec:e5:cc:dd:1a:61:54:
                    1a:c9:e2:d6:23:e8:08:69:20:e7:24:32:4b:22:df:
                    e1:37:3c:a2:cf:c4:54:f4:2c:f3:65:63:b7:a9:c2:
                    39:36:f0:82:e1:f2:0b:05:34:a1:77:0e:6b:6d:69:
                    6a:c0:dc:b9:b9:41:ab:ae:79:54:0d:42:d9:38:ea:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:44:49:93:FB:93:64:79:8B:21:FA:1C:8B:31:46:2D:B3:32:BD:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:18:e1:7f:73:59:1b:85:15:24:2b:bf:db:56:a2:6d:68:95:
         cf:37:f3:46:f3:2a:89:18:49:b8:01:a0:fc:b2:8d:ae:5f:b8:
         5b:a6:59:14:5c:5e:48:bb:7e:7e:17:65:00:ee:68:d3:d2:f4:
         f6:f9:20:75:a2:a3:db:b7:e4:80:5c:27:0d:1b:60:6a:3a:b8:
         b7:cb:aa:ba:ef:79:ef:84:ab:13:a2:e0:a3:74:a0:89:60:e3:
         65:f6:3e:aa:75:f1:94:a1:fa:12:58:3d:79:42:7c:65:d6:6d:
         c5:25:a9:40:4d:00:82:97:89:91:8f:82:19:f4:75:c5:e2:b3:
         89:1e:8a:6c:9b:14:62:c5:ea:4f:b6:89:9d:20:f7:24:93:9a:
         cf:f2:fd:77:d1:fa:97:8d:e5:7c:d0:ef:88:cb:e3:bc:13:92:
         60:d2:b7:58:8d:cc:ac:08:19:50:0b:5a:d1:71:29:8c:f8:ab:
         9a:93:ed:36:ad:03:9a:d5:99:ae:7f:0f:e0:f8:80:ea:19:07:
         1a:86:e2:9b:90:b4:cb:4d:ac:d8:50:d8:bf:06:7a:48:0a:e2:
         33:c0:70:b9:ab:68:4d:11:2c:05:71:9f:04:54:6f:a8:2b:7a:
         73:10:55:f2:cb:54:90:f0:01:79:57:da:2d:8e:ad:45:fd:0a:
         46:a4:06:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKx82YYYg3zKeIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
OGQ0OGVhMWEtZTRkMy00M2RkLWJmNGQtMzEyM2I3MzM4MzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYaYid0CxtKcgX3npmEO4KnFC7clkf72b+hu
2CV/1SXDgVVhwpfF58b36ecrNjTrbyyoZb5pea3GPmsEI8SWzyNFWrDHhWYOIBwO
/1rSX02jKoW3C0maYddqafaS4QKXDyWeRzTohlo3zxZ8SGzKEh8EEYbvRSu9iqGF
pkidVi2OcTcdW5j/0mfkyhPGu+agjs797gD6bg6qxhTfK78gzBkC3f9G094Q61n6
PlxKDYLNMw4iiKFfZ1Xh5uzlzN0aYVQayeLWI+gIaSDnJDJLIt/hNzyiz8RU9Czz
ZWO3qcI5NvCC4fILBTShdw5rbWlqwNy5uUGrrnlUDULZOOqszwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1ESZP7k2R5iyH6HIsxRi2zMr3cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTFmMmYxOWYtNDI1My0z
MjE2LTlmNjctZjgxMGE5MGE2NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/0bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAAY4X9zWRuFFSQrv9tWom1olc8380bzKokYSbgBoPyyja5fuFumWRRc
Xki7fn4XZQDuaNPS9Pb5IHWio9u35IBcJw0bYGo6uLfLqrrvee+EqxOi4KN0oIlg
42X2Pqp18ZSh+hJYPXlCfGXWbcUlqUBNAIKXiZGPghn0dcXis4keimybFGLF6k+2
iZ0g9ySTms/y/XfR+peN5XzQ74jL47wTkmDSt1iNzKwIGVALWtFxKYz4q5qT7Tat
A5rVma5/D+D4gOoZBxqG4puQtMtNrNhQ2L8GekgK4jPAcLmraE0RLAVxnwRUb6gr
enMQVfLLVJDwAXlX2i2OrUX9CkakBgY=
-----END CERTIFICATE-----
Generated at Tue Jul 29 20:12:18 2025 by rpki-client