Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/263f0da0-054f-3615-9cf8-0e98c3d75ded.roa
File:                     263f0da0-054f-3615-9cf8-0e98c3d75ded.roa (raw, json)
Hash identifier:          PdToAj1C3sGGnC6ryA0QmY9GSxxcru038thQ3e/nC60=
Subject key identifier:   69:0B:F4:10:5D:51:94:DB:28:35:91:35:AA:A1:CC:A7:9A:F1:89:42
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B6F0AC361E38E831DAD568280
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/263f0da0-054f-3615-9cf8-0e98c3d75ded.roa
Signing time:             Mon 06 Oct 2025 17:04:07 +0000
ROA not before:           Mon 06 Oct 2025 17:04:07 +0000
ROA not after:            Sun 04 Jan 2026 18:04:07 +0000
asID:                     7922
IP address blocks:        207.180.8.0/24 maxlen: 24
                          207.180.9.0/24 maxlen: 24
                          207.180.15.0/24 maxlen: 24
                          207.180.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:0a:c3:61:e3:8e:83:1d:ad:56:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Oct  6 17:04:07 2025 GMT
            Not After : Jan  4 18:04:07 2026 GMT
        Subject: CN=2b8b0e13-4aa2-4479-a84f-04c64889e82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:b8:4e:7b:ff:26:89:33:9b:de:79:13:4a:
                    1c:3c:6d:1a:56:fe:d6:53:0a:fa:6a:19:df:fe:62:
                    e4:33:06:80:93:36:30:8d:77:79:ca:f6:69:d0:88:
                    37:22:17:a1:23:2d:66:89:32:62:f1:56:48:a3:6c:
                    93:97:a3:53:ca:df:05:20:6c:9c:8d:21:61:41:20:
                    a2:5e:a8:ef:cf:b3:0c:4b:51:16:ee:d7:7f:91:ee:
                    8e:d4:50:d6:ee:1f:7e:e1:fc:a8:49:58:64:1b:88:
                    cf:6e:f8:76:fa:33:ad:96:8e:dc:d0:2c:66:46:d0:
                    fe:c1:40:ad:4e:97:eb:42:1f:93:06:51:dc:94:5a:
                    c6:3f:a9:ea:a7:29:6b:7b:c9:79:c5:81:6c:b0:5d:
                    57:85:8c:d4:04:c2:12:d3:c9:e9:f3:72:fc:cd:12:
                    0b:f9:d5:dc:48:8b:8d:06:75:80:f1:a6:22:88:42:
                    02:cf:f8:39:25:5f:25:ef:e1:6c:ce:05:cd:99:e6:
                    ca:88:f2:bf:a7:99:32:83:98:75:c0:48:ad:7c:24:
                    97:4a:41:9b:5d:07:ef:1e:33:10:c3:cf:8c:09:e7:
                    68:79:26:73:ed:e8:e3:6a:54:13:d4:a7:8d:7b:bd:
                    6a:77:ee:7c:08:ba:d7:13:31:ff:1f:67:25:65:3a:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:F4:10:5D:51:94:DB:28:35:91:35:AA:A1:CC:A7:9A:F1:89:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/263f0da0-054f-3615-9cf8-0e98c3d75ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.8.0/23
                  207.180.15.0/24
                  207.180.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:5b:54:69:ac:29:06:7c:a8:14:92:9e:c1:fc:19:e6:b9:
         5b:09:1d:2e:49:09:8f:15:2f:32:d1:1f:b8:a4:18:97:51:b8:
         b4:6b:94:f2:1d:28:46:f5:c7:67:99:b0:fd:83:92:7c:f1:32:
         f2:78:9a:7e:3e:04:3b:f6:26:ff:69:dd:3b:57:2f:3f:0b:f2:
         d6:d2:fb:26:06:0b:28:b0:a2:43:1e:66:a3:fe:5b:99:0a:3f:
         76:9e:db:51:4f:d4:15:b9:82:80:b2:4d:07:88:4a:f2:57:b4:
         f6:da:c7:b0:90:fd:6b:0b:05:64:ff:bd:23:d5:6b:70:0f:2e:
         30:4d:ad:dd:f0:46:05:36:53:c8:e7:0e:d3:c8:33:3c:2d:d1:
         29:28:96:de:2f:5a:1e:d7:ac:f2:fd:8f:fb:ad:a4:63:4a:e9:
         b7:90:c7:5a:38:c1:cc:97:82:c0:f3:55:f8:4b:d3:7b:20:40:
         09:11:ae:e7:9c:de:84:8f:18:ea:df:ac:fe:d8:7f:99:aa:64:
         4a:cd:b8:6c:cc:d9:ba:fc:5d:4b:1a:37:b1:ba:5c:d0:ad:c3:
         12:9f:c9:62:c5:c5:d3:cd:89:1d:b4:20:01:7c:5e:4d:c3:2f:
         90:87:78:1a:36:6c:ca:30:34:7e:3f:c5:6f:c5:f2:bc:bd:55:
         8d:cb:54:f4
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtvCsNh446DHa1WgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI1MTAwNjE3MDQwN1oXDTI2MDEwNDE4MDQwN1owLzEtMCsGA1UEAxMk
MmI4YjBlMTMtNGFhMi00NDc5LWE4NGYtMDRjNjQ4ODllODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh664Tnv/Jokzm955E0ocPG0aVv7WUwr6ahnf
/mLkMwaAkzYwjXd5yvZp0Ig3IhehIy1miTJi8VZIo2yTl6NTyt8FIGycjSFhQSCi
Xqjvz7MMS1EW7td/ke6O1FDW7h9+4fyoSVhkG4jPbvh2+jOtlo7c0CxmRtD+wUCt
TpfrQh+TBlHclFrGP6nqpylre8l5xYFssF1XhYzUBMIS08np83L8zRIL+dXcSIuN
BnWA8aYiiEICz/g5JV8l7+FszgXNmebKiPK/p5kyg5h1wEitfCSXSkGbXQfvHjMQ
w8+MCedoeSZz7ejjalQT1KeNe71qd+58CLrXEzH/H2clZTps/QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGkL9BBdUZTbKDWRNaqhzKea8YlCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMjYzZjBkYTAtMDU0Zi0z
NjE1LTljZjgtMGU5OGMzZDc1ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBz7QIAwQA
z7QPAwQAz7Q2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEPnW1RprCkGfKgUkp7B/BnmuVsJHS5JCY8VLzLR
H7ikGJdRuLRrlPIdKEb1x2eZsP2DknzxMvJ4mn4+BDv2Jv9p3TtXLz8L8tbS+yYG
CyiwokMeZqP+W5kKP3ae21FP1BW5goCyTQeISvJXtPbax7CQ/WsLBWT/vSPVa3AP
LjBNrd3wRgU2U8jnDtPIMzwt0Skolt4vWh7XrPL9j/utpGNK6beQx1o4wcyXgsDz
VfhL03sgQAkRruec3oSPGOrfrP7Yf5mqZErNuGzM2br8XUsaN7G6XNCtwxKfyWLF
xdPNiR20IAF8Xk3DL5CHeBo2bMowNH4/xW/F8ry9VY3LVPQ=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:13:00 2025 by rpki-client