Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
File:                     07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa (raw, json)
Hash identifier:          oeOmzCfNzFevaZ4U7ay5ylD9e9/yiqFoS50i4npASi4=
Subject key identifier:   1A:87:54:72:B2:10:BA:40:F9:5E:90:25:FB:BB:AE:BD:63:E2:4B:75
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584A8C70C7FFFE81BFAA34332380
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c7:ff:fe:81:bf:aa:34:33:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=bbbe66e0-7ae9-4aa7-8db7-de55791e7094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d0:f0:fb:7d:fd:dc:e0:f8:ed:af:dd:08:5d:
                    52:56:fc:f4:b2:a3:ad:e7:fd:90:75:e3:e0:da:28:
                    99:e6:9b:9d:bf:a3:9b:16:e3:e5:af:3c:12:80:30:
                    a0:89:d9:0f:46:85:39:3b:30:66:74:e4:5d:aa:1b:
                    08:19:61:db:b2:55:0b:55:8b:a0:c3:e9:d2:ba:99:
                    5c:34:7d:91:0c:df:f9:d2:1e:a2:7e:f4:ed:e3:fa:
                    b9:4b:28:46:0d:4f:56:ea:a6:1c:08:22:15:90:76:
                    07:22:7b:08:05:95:3e:8e:45:af:05:83:f1:4a:50:
                    d6:6f:b9:85:10:71:08:fe:a3:60:5e:91:46:e7:59:
                    59:a3:50:4a:6e:d6:e2:09:05:92:b5:9c:48:55:ae:
                    62:10:4b:84:f4:11:29:c8:9d:b8:a1:06:18:c3:a1:
                    9a:f2:69:71:ef:d2:5e:77:51:5b:a3:f7:da:5e:72:
                    1d:f2:94:92:60:68:fc:0e:5b:07:a7:12:c9:d6:99:
                    e7:c5:d1:3a:48:2a:4a:ef:e5:17:c2:50:02:6d:7f:
                    07:52:23:10:49:c6:da:78:7b:6a:84:05:69:49:ae:
                    3e:08:57:f2:22:f6:5b:21:4e:54:a4:b2:79:a9:ec:
                    c4:a5:b6:da:31:18:5d:50:1c:fc:33:e8:0b:dc:cd:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:54:72:B2:10:BA:40:F9:5E:90:25:FB:BB:AE:BD:63:E2:4B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:ea:5b:8a:bc:f0:ae:fe:da:91:e3:50:5c:b0:5b:81:1e:
         22:c7:53:97:17:b0:0d:eb:d0:61:ab:2d:b1:cd:1d:39:b6:62:
         ac:fa:6d:03:2c:c4:cb:b2:12:76:93:66:79:ef:98:ec:25:0e:
         f1:eb:8f:90:bf:f7:16:b5:d7:50:4a:5b:2e:2f:42:37:a7:b3:
         d6:75:a2:9e:87:14:1c:93:5c:b7:5c:4f:9e:82:1d:41:33:ed:
         d5:37:da:af:7d:9b:ac:8b:6b:0a:ff:44:dc:86:a0:f8:26:24:
         d4:3a:7e:21:3e:69:41:a4:c7:c1:62:09:91:e9:6f:20:93:27:
         6d:28:41:25:ef:9d:a0:ac:54:4e:97:ab:55:be:7a:c8:3e:b8:
         02:b8:ba:cf:1c:39:bc:26:2b:65:8a:22:63:06:55:34:51:59:
         31:85:0b:9c:18:24:cf:8b:57:f7:3a:01:6f:d8:66:e1:ff:4a:
         bd:c6:7f:a0:0b:2e:42:14:83:c4:9d:c6:49:8e:4c:c0:87:9c:
         3a:37:11:b2:a7:66:3f:a8:0a:2a:52:d9:65:13:33:01:8c:10:
         f2:6b:f7:1c:fc:51:ec:e5:86:95:e4:90:15:3f:e6:e9:fb:49:
         75:07:fb:f8:26:4c:bc:4d:10:da:34:f5:59:a0:54:69:9d:88:
         fe:04:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:07 2025 by rpki-client