Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7c1fb750-565c-357e-b11f-c738ac2c4829.roa
File:                     7c1fb750-565c-357e-b11f-c738ac2c4829.roa (raw, json)
Hash identifier:          JNo2vgTnmMiF0mE9w4NUmX0bCp7119/v15j/rA04kQM=
Subject key identifier:   4D:05:17:69:FD:88:71:4E:8B:52:58:AF:97:4A:07:AB:05:DD:4D:79
Certificate issuer:       /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial:       010D0C9F4328584AAB264F2D1A972B4276B27FC0
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7c1fb750-565c-357e-b11f-c738ac2c4829.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     15296
IP address blocks:        162.246.156.0/22 maxlen: 22
                          162.246.156.0/24 maxlen: 24
                          162.246.157.0/24 maxlen: 24
                          162.246.158.0/24 maxlen: 24
                          162.246.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:2d:1a:97:2b:42:76:b2:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=8c657653-adde-420e-a62d-2c5071180ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:25:96:ac:2d:1a:a5:0a:0b:8d:36:b2:1f:
                    14:00:f9:6b:7f:c9:cb:b3:ca:be:cf:8a:5d:7e:9f:
                    5f:97:1e:a4:bd:e0:46:0a:84:d5:c8:d2:f7:37:d7:
                    c4:89:d3:45:e8:89:f3:73:70:eb:8f:2d:d2:e4:75:
                    2c:77:59:4a:87:c4:7a:a4:ee:4a:e4:18:d2:f2:c2:
                    f1:1a:27:4b:eb:0e:50:3a:b1:46:4c:7d:19:17:dc:
                    39:b2:64:8c:c2:a1:ae:c4:0e:7b:33:80:e5:47:3d:
                    9e:1b:e5:72:db:60:a0:99:cd:c7:2a:fb:0d:c0:2f:
                    e4:7c:b3:3c:0a:49:73:44:e3:cc:99:24:9f:88:50:
                    f1:cd:22:ce:8d:03:29:8a:f2:c9:6f:25:8d:48:09:
                    61:66:fe:6a:d0:2b:f0:3d:d2:43:21:2a:ac:77:96:
                    a3:54:5f:9c:fd:b4:18:99:45:86:6e:a3:8e:46:7c:
                    e5:18:59:ba:e9:fe:d5:50:c8:14:98:a9:2b:0e:98:
                    3b:3f:32:a1:14:03:4e:56:77:67:9f:ba:a3:dd:c2:
                    dd:27:cf:90:fd:d3:ec:a1:5e:f5:6d:9f:52:e0:52:
                    88:47:91:58:c1:66:1b:49:73:51:ff:e1:cd:ec:1c:
                    3a:d5:ba:1a:b7:42:71:fc:ae:cd:74:e5:58:8a:4b:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:17:69:FD:88:71:4E:8B:52:58:AF:97:4A:07:AB:05:DD:4D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7c1fb750-565c-357e-b11f-c738ac2c4829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl

            X509v3 Authority Key Identifier:
                keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:02:43:b6:16:f7:5d:fb:38:37:15:27:e6:3d:db:86:f2:6e:
         2a:35:7e:37:8e:9b:45:12:b5:6d:ab:0a:b2:f9:28:8c:61:f8:
         c9:60:0e:c1:64:91:6e:0b:3c:61:f5:16:f1:cb:d0:08:49:ca:
         ee:3d:f6:d7:b2:5c:36:65:eb:cc:ce:ff:66:26:1b:a7:e7:0c:
         7c:bb:8f:ca:ee:b3:26:68:38:35:4f:86:18:69:51:c4:f8:d5:
         01:9a:2c:7f:43:75:5e:de:35:49:30:c4:6f:90:2c:5d:b3:fd:
         ec:d4:32:d4:f0:ae:f8:3a:80:fd:5a:74:cf:43:72:cc:c8:d3:
         7a:4b:b5:56:94:9c:38:b6:bd:b2:aa:65:21:25:77:93:11:73:
         ed:ac:13:c7:8a:8c:36:86:25:31:51:a4:8a:53:d5:a7:b2:66:
         fe:21:a7:57:53:4c:34:c1:8b:f4:73:ff:20:5d:dd:5b:c9:73:
         86:81:e2:9c:1c:38:97:0f:03:a4:2f:9f:67:72:00:25:db:c5:
         fb:8d:7c:61:f8:cd:3c:19:3c:ae:c6:53:40:14:39:b8:c7:e6:
         3c:a4:55:07:85:38:a0:a9:0c:24:40:e8:73:f5:65:5a:cb:86:
         b6:11:b6:bd:b9:96:95:69:e1:dc:d5:12:4c:bf:88:9b:9b:e6:
         47:bd:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:14:37 2025 by rpki-client