Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1e467faf-97eb-3545-8b09-2099591da92f.roa
File:                     1e467faf-97eb-3545-8b09-2099591da92f.roa (raw, json)
Hash identifier:          voR9euq4jFEdOY4IVN4C+EZ0MkELeYD1oauIm5JuCZo=
Subject key identifier:   B0:F4:BB:70:2F:B9:47:5A:4A:CE:FF:A1:69:2B:19:A9:B2:17:70:1D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126EBFACBB1376285E419F0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1e467faf-97eb-3545-8b09-2099591da92f.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     395075
IP address blocks:        207.96.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:eb:fa:cb:b1:37:62:85:e4:19:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=a96dbb3a-2745-4d27-a7b0-e37153551529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:e6:a4:93:8a:1f:cf:c1:ba:c9:1e:37:54:
                    f5:89:f2:b2:d4:c6:db:25:e4:08:1a:35:89:fc:79:
                    a9:e4:4b:3a:23:1c:58:64:96:fb:3f:72:66:e8:d0:
                    b7:11:d6:94:c0:84:e7:b8:08:ef:89:9b:04:25:e5:
                    0c:df:5b:69:f0:3c:df:93:70:82:9c:95:49:e3:a8:
                    8a:57:3a:b1:fd:1e:67:ec:6d:78:9a:55:67:2d:27:
                    66:6a:4c:05:4e:ba:84:6a:b3:01:89:0d:29:82:85:
                    25:45:20:d8:eb:42:61:09:f6:9a:1c:b1:49:8c:41:
                    72:2a:10:7f:b2:80:e6:b7:1e:ec:95:3f:03:d7:cb:
                    07:b0:29:99:9c:20:49:71:ed:ba:83:ba:9c:5c:da:
                    b8:ad:1e:84:3d:59:59:91:a9:d0:f0:10:e1:e8:e1:
                    61:3b:53:6f:36:a3:c6:f8:d6:a6:a2:24:e2:46:8e:
                    36:54:53:73:3d:d6:a2:f3:95:b5:a1:e9:ce:20:2f:
                    c3:d0:29:9a:09:6c:a3:0d:a2:a5:0c:c9:77:6d:b2:
                    dd:c0:4d:b3:3e:e5:45:e4:34:5d:b3:ab:18:2a:95:
                    b9:94:ee:e0:2d:f8:89:80:0d:ab:9f:de:ae:72:c3:
                    c2:4a:39:30:d1:11:4f:10:f6:33:d1:06:d2:76:9b:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:BB:70:2F:B9:47:5A:4A:CE:FF:A1:69:2B:19:A9:B2:17:70:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1e467faf-97eb-3545-8b09-2099591da92f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:1a:da:28:19:76:02:a6:4b:47:0c:d7:28:0f:81:1f:df:
         98:7f:bd:26:23:bc:91:b1:76:2e:1c:6d:e2:9f:9f:e0:6d:ac:
         75:24:9c:ee:69:87:0b:0c:03:6c:75:61:37:db:bd:97:0f:b9:
         8f:29:b4:85:30:ff:b9:f3:9c:63:28:77:2a:81:0a:c8:e0:37:
         ae:89:0d:31:cb:0e:9e:32:48:f9:cb:79:06:1c:ad:62:31:4d:
         72:55:17:7e:ca:58:28:0b:56:5f:bd:cf:a6:fc:6a:84:5e:c0:
         6f:43:b6:86:5f:78:96:52:a9:22:85:8e:b2:a7:10:66:6b:61:
         10:8c:3f:9f:c9:a5:45:bc:1d:e9:e8:c3:ba:76:9b:68:62:5c:
         ac:55:48:ba:10:84:83:db:84:98:46:97:3c:85:13:ac:66:38:
         50:c3:2b:23:9e:92:83:86:fe:15:5a:9b:90:8f:85:78:e7:5f:
         8d:6a:4d:2e:84:e8:d3:e0:4b:2d:95:40:64:6f:90:bc:3f:cb:
         f7:1e:ab:cc:9f:ab:4e:87:bf:94:2b:8d:10:e5:75:ea:d5:e9:
         e4:9b:3c:5d:4e:d5:d9:b1:9b:0e:07:48:e6:1d:71:45:d0:8e:
         3f:49:fb:22:5a:23:cd:fc:69:63:1e:1c:f5:6d:46:c0:1b:38:
         96:5d:52:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJuv6y7E3YoXkGfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk
YTk2ZGJiM2EtMjc0NS00ZDI3LWE3YjAtZTM3MTUzNTUxNTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP/mpJOKH8/BuskeN1T1ifKy1MbbJeQIGjWJ
/Hmp5Es6IxxYZJb7P3Jm6NC3EdaUwITnuAjviZsEJeUM31tp8Dzfk3CCnJVJ46iK
Vzqx/R5n7G14mlVnLSdmakwFTrqEarMBiQ0pgoUlRSDY60JhCfaaHLFJjEFyKhB/
soDmtx7slT8D18sHsCmZnCBJce26g7qcXNq4rR6EPVlZkanQ8BDh6OFhO1NvNqPG
+NamoiTiRo42VFNzPdai85W1oenOIC/D0CmaCWyjDaKlDMl3bbLdwE2zPuVF5DRd
s6sYKpW5lO7gLfiJgA2rn96ucsPCSjkw0RFPEPYz0QbSdpvj/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLD0u3AvuUdaSs7/oWkrGamyF3AdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMWU0NjdmYWYtOTdlYi0z
NTQ1LThiMDktMjA5OTU5MWRhOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2C4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9aGtooGXYCpktHDNcoD4Ef35h/vSYjvJGxdi4cbeKfn+BtrHUknO5p
hwsMA2x1YTfbvZcPuY8ptIUw/7nznGModyqBCsjgN66JDTHLDp4ySPnLeQYcrWIx
TXJVF37KWCgLVl+9z6b8aoRewG9DtoZfeJZSqSKFjrKnEGZrYRCMP5/JpUW8Heno
w7p2m2hiXKxVSLoQhIPbhJhGlzyFE6xmOFDDKyOekoOG/hVam5CPhXjnX41qTS6E
6NPgSy2VQGRvkLw/y/ceq8yfq06Hv5QrjRDlderV6eSbPF1O1dmxmw4HSOYdcUXQ
jj9J+yJaI838aWMeHPVtRsAbOJZdUpo=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:48:27 2025 by rpki-client