Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a9bd3644-6d18-3ad4-9e62-57d9d74a914c.roa
File:                     a9bd3644-6d18-3ad4-9e62-57d9d74a914c.roa (raw, json)
Hash identifier:          +7LVWbGuSH3nuuVJQopfJ7JnnpXMuxnqvrhg7n8a6uU=
Subject key identifier:   BC:1D:62:79:9E:C4:3C:37:9C:9A:2A:13:02:7F:73:9A:FE:75:C4:EC
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126EC8F5EF02C48124AB380
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a9bd3644-6d18-3ad4-9e62-57d9d74a914c.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     395075
IP address blocks:        207.96.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:ec:8f:5e:f0:2c:48:12:4a:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=f5cc26b4-836e-429d-a0d0-94d7e248d2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6a:d3:81:e5:51:d6:c2:b2:5d:03:a7:9f:52:
                    e1:56:27:37:09:ac:34:0b:32:69:61:b2:97:c7:20:
                    a1:23:14:ae:f7:f9:68:4a:20:8a:25:2a:e8:8b:0f:
                    d6:b7:cb:6a:12:05:5e:fa:71:03:36:1b:28:52:97:
                    c9:1e:ea:a1:67:6a:aa:39:79:6a:35:71:f8:f4:75:
                    a9:11:87:e6:60:3d:4a:a3:0b:32:d8:bf:9d:75:8f:
                    84:14:25:83:06:b2:6c:1b:88:4e:83:d3:31:7f:8c:
                    08:e0:b3:2a:a5:50:59:61:7d:95:79:70:9f:69:79:
                    a5:ab:64:d3:b6:3e:eb:28:95:e9:0e:1a:29:96:9a:
                    b3:cf:8c:e9:b7:c2:7f:84:11:55:44:c6:76:e1:ea:
                    f6:ff:e5:9d:37:8c:8f:1c:28:66:1c:f2:75:4f:e5:
                    e9:4b:6f:0c:e4:ea:3b:9e:cb:e7:ce:63:a7:5e:4f:
                    84:22:e6:09:3b:40:bf:1f:2a:17:8c:d2:b3:63:72:
                    72:a8:8a:19:a6:36:3b:47:48:69:1c:85:98:84:1e:
                    8d:80:2e:d5:14:63:a1:6d:a8:e9:6c:c5:93:34:73:
                    5b:e1:19:69:e7:5e:4a:75:45:96:b6:f2:9b:3b:a7:
                    da:5d:b5:c0:83:e5:ab:26:b6:05:3c:6d:ee:1b:5d:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:62:79:9E:C4:3C:37:9C:9A:2A:13:02:7F:73:9A:FE:75:C4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a9bd3644-6d18-3ad4-9e62-57d9d74a914c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:cc:c0:e5:c1:e7:94:0d:2a:96:0f:0a:eb:d0:53:dc:ef:
         09:e2:e8:91:8f:4a:75:e8:b5:a3:b8:db:11:35:b6:52:38:5e:
         b9:11:e6:04:58:a0:b4:75:0c:d0:ea:37:69:c9:ef:ae:0b:1c:
         ec:32:bc:81:b6:dc:55:0d:67:f2:54:07:98:2d:d2:22:ff:6f:
         7b:65:c6:4a:83:a6:36:04:c6:d3:76:03:09:27:b1:d1:0a:31:
         92:48:9c:e4:5d:1d:0d:71:4f:04:b8:d0:20:9f:1d:bb:7b:59:
         21:ce:8f:a6:58:d9:dd:df:e8:b3:52:04:2c:f6:1f:f5:f0:11:
         67:f4:b8:ad:77:60:cf:8f:55:6f:bb:3f:bf:e3:08:5a:8a:cc:
         05:d9:ec:1c:81:6c:b2:90:7f:7d:38:c6:fd:60:a5:39:8b:eb:
         12:22:58:e5:07:17:90:05:d8:fd:a8:06:e5:53:bb:1c:35:78:
         3a:9e:79:a1:bf:0e:d7:3b:cc:5e:ae:ea:d2:ce:89:72:45:fb:
         d3:1c:14:fe:14:e0:ab:c5:95:27:40:14:8a:78:7b:cf:02:40:
         6c:ef:b7:8b:0f:08:bf:2c:e6:bb:b2:f7:dc:38:8a:a4:66:ed:
         dc:3e:a4:cc:c9:99:c0:8d:c3:f4:53:9a:6c:21:49:b0:95:6a:
         83:64:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:25:11 2025 by rpki-client