Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ef87656d-41ba-3d8d-b7cc-f877baa51b4e.roa
File:                     ef87656d-41ba-3d8d-b7cc-f877baa51b4e.roa (raw, json)
Hash identifier:          XCZfyzIeweK7AgI96CzVTMN0f3lJ1aMSRId61s4V1v4=
Subject key identifier:   36:E7:7D:80:D0:9F:C3:3A:D6:6C:C4:27:2B:A1:47:91:38:C8:13:5F
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584D24E04452D943F16A6AC341E0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ef87656d-41ba-3d8d-b7cc-f877baa51b4e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        207.126.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:44:52:d9:43:f1:6a:6a:c3:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d06c1aae-56b2-429f-b696-a2189295d16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:10:32:ea:67:01:05:a9:e2:66:9f:ae:ca:
                    a3:1a:c9:8a:3d:27:01:c7:94:49:0b:bb:a2:76:5d:
                    43:6f:69:7f:66:3b:f0:a4:eb:eb:cf:6a:e8:f3:64:
                    fb:a4:79:1e:cb:29:bb:8d:8b:3f:b1:6e:09:f5:c3:
                    2d:46:df:68:e3:eb:50:fb:90:09:5b:10:4c:06:50:
                    46:47:7c:b6:0a:c0:a0:db:76:e7:30:aa:ff:4f:b2:
                    0c:56:b5:4e:7b:f5:d3:c9:a4:8d:c9:71:d4:a2:e3:
                    0e:d0:16:3b:f6:9c:ca:ea:94:58:7d:9f:a5:ab:e6:
                    38:46:26:93:b2:76:88:84:3f:24:56:2e:44:2b:57:
                    e9:83:84:62:36:31:31:8d:23:c9:7f:26:d8:31:9c:
                    1b:d3:53:11:55:c9:57:a4:53:1d:15:7b:e7:f5:3c:
                    ca:43:c1:0a:ef:60:b9:80:08:9d:f6:d1:d7:b5:7e:
                    a2:d0:ca:0a:f0:b2:ba:43:19:c4:34:c6:a0:2e:ad:
                    d1:d3:63:8f:57:14:33:dc:cc:73:0f:0b:3b:43:aa:
                    2e:fa:e8:bb:9e:57:5b:0b:73:4c:92:0a:e7:38:89:
                    a8:8a:7a:57:dd:2c:44:bf:15:d1:88:5f:47:71:08:
                    30:32:37:87:de:8b:d2:1c:40:3d:3d:c1:e9:1f:c5:
                    94:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:7D:80:D0:9F:C3:3A:D6:6C:C4:27:2B:A1:47:91:38:C8:13:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/ef87656d-41ba-3d8d-b7cc-f877baa51b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:52:b1:24:30:ab:82:a5:bf:57:95:d8:51:d8:76:56:83:
         86:43:8a:f6:ee:90:ea:5b:d3:6f:f0:9f:47:25:e3:0e:d3:f4:
         ed:25:ab:4f:2f:3e:5c:e8:b3:27:3f:ce:ac:33:6a:fa:1b:94:
         02:41:d3:5d:71:b7:3a:5c:6c:38:6b:cf:82:71:12:8c:1c:e5:
         3d:35:a0:f4:bb:07:5b:35:81:08:d0:eb:3d:5f:13:98:53:c7:
         9e:cb:57:b3:bf:1f:82:94:85:ac:bf:b7:d0:06:b5:0c:45:b1:
         f2:89:71:d2:f3:28:f4:c1:2d:ee:48:9a:cd:b4:38:4d:00:c1:
         8b:fd:69:5b:f3:eb:9b:e3:00:7a:96:44:74:a2:d6:4f:b5:d0:
         5c:84:63:12:4f:2d:08:d3:50:9b:3f:a0:42:f0:5a:70:90:2f:
         08:c4:ce:4f:69:4c:75:01:f9:62:cb:57:5e:8e:4c:c1:5a:fa:
         a3:86:fd:eb:b8:0a:75:20:c1:a9:0c:33:e7:55:cb:3a:1d:71:
         b1:17:b1:4c:39:2c:8c:3f:73:a5:4f:d7:fb:d7:c0:9f:f9:66:
         74:15:b5:f7:3a:00:7d:49:2f:2b:81:a0:c1:77:9e:27:c1:50:
         4d:10:bd:cb:16:a6:56:ef:c7:31:d5:2b:f6:f4:9d:71:13:1b:
         85:ff:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:11 2026 by rpki-client