Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e63ab17f-b70b-3ff1-9c3f-c703ea6fb86f.roa
File:                     e63ab17f-b70b-3ff1-9c3f-c703ea6fb86f.roa (raw, json)
Hash identifier:          rPyK7LFhwiqnlOvJqtaTt/kbV46/XDtGJ8CoyRI0d/8=
Subject key identifier:   CA:50:C1:07:75:55:F1:7F:BC:BA:E6:60:E2:78:22:CD:78:A3:FE:88
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126F95548714D4F887566D0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e63ab17f-b70b-3ff1-9c3f-c703ea6fb86f.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     30336
IP address blocks:        207.96.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f9:55:48:71:4d:4f:88:75:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=cada6ac5-852c-4720-aa9c-f4fee0444e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:29:df:52:93:3e:08:5c:7b:54:77:1d:3b:
                    a5:22:40:fc:97:23:70:ee:53:8b:8a:d5:b4:f5:f8:
                    26:75:7e:f8:b5:df:78:80:b3:c1:94:0b:35:76:a8:
                    12:67:87:6d:f2:7d:68:7c:fe:5b:2e:e4:76:1b:8f:
                    dc:98:b8:0a:24:05:c0:56:db:8a:e5:f1:9a:5e:cb:
                    59:20:b4:ea:9a:61:de:bc:73:44:5a:b6:78:7c:10:
                    76:be:4c:53:fc:a5:77:4b:ad:35:ad:5c:1b:0f:1e:
                    2c:f0:34:c1:2a:bc:90:10:20:e4:fc:06:0d:33:59:
                    c2:14:01:6c:e8:2e:c3:33:2e:1d:e5:93:fe:b2:f0:
                    96:b5:9e:64:58:81:02:d9:db:60:65:e1:88:66:42:
                    ea:19:7d:ff:f5:4f:e8:a0:0f:cf:40:46:ed:ae:f2:
                    a6:a5:b2:e8:b1:ef:fb:6b:22:97:30:23:db:d7:3f:
                    85:04:2e:83:7b:dd:05:f2:67:ee:21:2d:4b:20:73:
                    eb:98:99:0c:ae:a7:3d:2f:43:12:71:14:8d:b8:9f:
                    51:db:57:af:3d:19:69:3a:d7:a8:88:18:87:fd:cf:
                    62:0b:ef:19:a5:99:9c:bd:b0:d0:b1:6f:eb:1e:f0:
                    0a:d6:16:1d:2a:ec:58:4c:e0:67:62:3e:f3:8d:89:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:C1:07:75:55:F1:7F:BC:BA:E6:60:E2:78:22:CD:78:A3:FE:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/e63ab17f-b70b-3ff1-9c3f-c703ea6fb86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:a9:f2:72:3a:06:68:47:b0:59:7a:9f:5e:0e:46:13:e5:
         a0:c2:22:78:2a:3f:78:20:9f:90:af:91:93:49:a7:cf:21:71:
         70:1b:ab:4e:1d:fe:5d:45:9a:5b:e8:e3:4a:23:c4:89:88:49:
         1a:7f:4b:a8:1d:66:00:c1:29:8a:e3:5d:f3:56:bc:53:32:5c:
         a1:ab:34:a1:a3:ce:6e:07:c7:b8:ce:c2:bd:80:78:f2:0f:a1:
         96:90:3f:1f:d5:bd:57:5c:64:4c:7d:79:f7:82:f7:dd:27:51:
         a7:ad:98:02:4c:d1:2c:0c:88:dd:c0:7f:d0:17:76:fc:28:8d:
         7d:13:60:ae:35:20:1b:67:57:1f:07:4d:26:4d:11:e1:e1:47:
         e3:ce:ae:2d:1e:f7:a5:19:40:7e:e1:80:ee:ca:be:89:a8:d7:
         24:54:2e:30:18:55:4b:a0:b8:44:2b:9e:7a:de:87:78:43:16:
         0f:62:f1:b9:5c:0f:d6:35:ce:60:fe:82:da:d4:3e:4f:73:09:
         13:73:60:43:ec:75:67:3f:67:77:5b:87:35:08:d8:83:e3:e9:
         1a:e5:13:3e:ff:8c:ec:09:d2:fa:9c:c5:b0:08:b9:2f:ed:ef:
         a5:dc:1e:c5:19:f1:53:b0:9b:47:9b:cf:83:d3:f2:2d:ee:4d:
         f9:dc:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:06:02 2025 by rpki-client