Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa
File:                     eb453663-5b86-3561-99f6-c2c79f2476ec.roa (raw, json)
Hash identifier:          XSzI96bYCZzSd0oMnbvi6hYelCzTLGujLBwWXVQAOHg=
Subject key identifier:   3A:D4:34:65:71:EF:9C:9E:21:83:5E:ED:53:3C:17:BF:CA:E3:7B:0A
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584ABD4BA74121B90060E88B0F00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     53508
IP address blocks:        209.127.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a7:41:21:b9:00:60:e8:8b:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=65cff50a-4bc9-44d3-8bbe-572f93cca84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:00:2c:59:1e:3a:50:f5:de:0c:5f:35:55:
                    30:90:b8:18:57:1a:38:d1:c6:20:b5:10:b7:a7:8d:
                    25:54:62:35:da:b9:d7:07:9c:9e:63:d3:89:76:41:
                    00:6d:c7:0a:73:e9:b4:2d:11:8e:64:d1:77:a2:46:
                    fc:58:fd:86:5f:89:f6:3b:d9:80:29:ac:1f:c8:b8:
                    fd:91:94:0b:f8:e5:e7:1d:bc:af:db:e7:52:aa:7d:
                    fe:87:55:e0:ef:a1:46:8e:4f:2d:2a:4f:73:72:26:
                    0a:e4:ba:d0:03:00:32:f8:71:3f:af:36:2d:69:2e:
                    78:92:02:a4:0f:47:49:b3:8e:fe:5a:36:7b:31:ec:
                    17:ea:4c:09:54:5b:17:f3:4e:58:de:15:7e:40:a3:
                    27:bc:94:74:0e:3e:e2:3d:cd:21:07:10:fe:20:e8:
                    62:76:28:11:a4:b3:e0:cf:34:06:51:08:c6:12:29:
                    d5:f4:2f:97:d4:5a:22:31:2f:fb:7d:c2:be:c7:31:
                    34:61:e3:c0:59:03:4b:4f:c7:87:80:cd:d5:76:54:
                    1f:40:e3:0c:98:28:02:4c:0e:9f:a3:9b:94:22:d2:
                    bf:87:28:92:8c:9a:77:09:96:78:61:ea:a2:3b:6d:
                    aa:2f:ca:6a:f8:fd:3a:a5:72:b3:fc:8e:ed:d6:04:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D4:34:65:71:EF:9C:9E:21:83:5E:ED:53:3C:17:BF:CA:E3:7B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/eb453663-5b86-3561-99f6-c2c79f2476ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:f3:a5:d8:81:f3:6e:a4:21:9c:8d:94:f5:58:6c:0e:0a:
         4e:9e:02:03:f1:f1:83:41:a2:09:38:0b:40:fc:dd:92:8a:22:
         13:c8:a5:2b:a6:6c:3d:19:28:0d:81:e1:3c:b2:b7:5b:c5:e4:
         0a:25:6e:5f:9d:16:f0:5f:f2:94:91:1f:52:9c:78:ba:fa:97:
         50:9c:21:d1:68:de:35:21:df:86:a7:2b:e6:02:92:2e:41:21:
         78:d9:4a:1e:a1:8b:46:77:f7:a6:63:7a:e6:97:f0:38:c2:62:
         1d:c6:96:17:6e:84:ec:95:7a:49:81:47:d4:be:4d:ea:63:07:
         c6:d6:bb:45:ec:68:50:4c:37:7c:25:92:84:49:d8:9b:03:55:
         a3:0b:d6:b7:8d:12:ad:18:d8:77:43:bb:dc:9c:22:e7:c3:dd:
         49:d0:68:ea:73:d4:e8:52:54:f3:c2:7d:06:ce:6d:74:cc:64:
         36:c9:77:ba:79:8f:ec:15:97:3f:b1:3f:16:86:6d:e3:65:57:
         ca:85:a5:02:97:31:ff:07:1d:e0:2f:14:70:a8:8a:62:c1:9f:
         6e:01:49:e8:51:a6:a0:5d:5c:af:ba:de:fb:55:f0:7a:79:b8:
         7d:5e:0f:c3:e6:7c:ea:16:bc:dc:3b:78:3d:a4:36:86:be:bd:
         52:e7:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:13 2025 by rpki-client