Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
File:                     41117c2d-5816-38a3-8985-f9c202d75f9d.roa (raw, json)
Hash identifier:          f8Onb/CGOyv6BFwhpUE7lP7l8SyNN5Rek7NvGvkii5g=
Subject key identifier:   6D:89:D4:1E:15:43:0C:EA:C3:9C:F5:70:26:48:88:DA:77:E3:06:9A
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584A8411800AE28D6EAB661EF18E
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        207.126.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:80:0a:e2:8d:6e:ab:66:1e:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=465cfdbd-5423-4d8a-bc07-25c0e770b8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:92:8f:83:99:0d:de:a8:11:23:37:19:57:
                    cf:29:92:09:c7:77:02:d0:4b:5d:31:f4:01:56:0d:
                    00:fb:13:53:77:43:31:17:27:14:b4:57:b0:df:58:
                    66:8e:c4:e2:30:fb:11:15:5e:cd:51:23:54:45:76:
                    e4:c1:c9:37:92:87:a7:bf:7e:26:b4:6d:bc:4a:16:
                    4d:ad:d8:66:d3:9b:c2:64:4c:93:97:9c:78:88:91:
                    d4:cf:18:e0:ad:ff:71:a4:24:76:11:46:1d:08:62:
                    26:69:c8:00:36:1a:0a:0c:5b:80:3c:37:fc:dd:ad:
                    54:00:ef:05:10:97:92:8d:b3:32:7f:f1:cc:d6:ad:
                    df:56:a4:90:18:43:aa:7e:b4:61:3d:2a:8e:9e:a5:
                    12:03:fb:f4:10:7f:13:0c:f2:36:40:5e:34:9f:82:
                    98:51:26:3a:20:a6:27:ae:84:90:fc:c9:09:da:be:
                    cf:2b:9d:85:47:26:ec:44:d7:ea:07:7a:61:a3:77:
                    ec:85:59:b5:12:db:16:da:25:13:c8:07:e8:31:25:
                    5c:03:f2:78:d3:51:fa:68:20:02:55:4e:34:70:15:
                    c2:71:bf:d4:b1:10:7b:1c:9d:cd:10:1d:41:5b:d7:
                    97:34:bb:5b:3d:7f:07:44:c2:ba:43:55:d8:c2:05:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:D4:1E:15:43:0C:EA:C3:9C:F5:70:26:48:88:DA:77:E3:06:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:54:fc:9d:cc:fe:67:ac:ef:fd:25:95:df:a0:ca:53:8c:
         79:b6:c7:52:47:d3:cc:a9:dd:73:c3:c5:9d:1a:f7:45:c8:59:
         86:2d:c6:48:73:23:8f:48:d8:20:e0:41:66:fc:c3:d0:12:33:
         54:ad:d6:03:79:d5:1e:9e:a0:c2:1a:1d:4f:9a:13:dc:d6:ac:
         aa:64:43:fe:46:97:de:be:57:38:21:9e:78:bb:9e:60:d6:09:
         fd:2b:70:97:f7:02:05:04:08:a5:d3:cb:49:6a:db:88:f2:6e:
         64:c2:6f:9f:27:71:c1:72:ee:de:42:14:80:93:28:cd:85:a3:
         9d:13:ee:d4:a7:2e:54:28:24:c0:7b:92:d8:53:60:1a:d4:81:
         07:f9:1e:c1:0e:17:ab:8c:2b:c6:15:3a:c9:c2:d5:08:e2:77:
         88:ae:aa:32:bd:79:7a:3e:a5:92:94:97:1f:f9:c5:e7:88:93:
         f3:4d:b2:91:bf:cf:9a:8f:3b:0d:47:09:95:1e:bc:d4:ee:d9:
         68:23:a5:8f:04:3e:5f:f3:35:e1:57:79:af:3a:f3:c2:7e:2a:
         64:ff:6b:5f:69:87:99:0e:75:fb:05:db:4f:16:20:5a:4a:51:
         33:f1:ef:84:b7:24:7e:20:56:5f:60:ff:7f:46:9f:71:b1:e3:
         58:17:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:37 2025 by rpki-client