Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/c4a4c3df-1495-3b1f-90ed-4ec010fe5a65.roa
File:                     c4a4c3df-1495-3b1f-90ed-4ec010fe5a65.roa (raw, json)
Hash identifier:          K8tTulyXAjzkD39YXIGcnHeOBSYdtF+yQfCg6ZpQM84=
Subject key identifier:   18:9A:E4:C4:9B:6D:A8:01:0D:AF:A0:7A:DA:7E:25:36:4F:C8:87:1A
Certificate issuer:       /CN=ef718cd2-ee4a-40e2-a196-3451be20811d
Certificate serial:       010D0C9F4328584AB650CF157C18118A5B4B43A0
Authority key identifier: 02:BF:F9:D8:4C:93:B4:2F:BD:63:1E:F9:DB:75:1C:D3:D5:12:00:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/c4a4c3df-1495-3b1f-90ed-4ec010fe5a65.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     395993
IP address blocks:        163.123.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/ef718cd2-ee4a-40e2-a196-3451be20811d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/ef718cd2-ee4a-40e2-a196-3451be20811d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:cf:15:7c:18:11:8a:5b:4b:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef718cd2-ee4a-40e2-a196-3451be20811d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=f481353b-a42e-4cf9-a44d-192790858814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:8f:30:14:ca:a7:91:5f:d8:70:9d:b7:ca:
                    f1:e6:e1:a8:dc:45:ef:af:fd:60:74:7c:bb:5e:f8:
                    99:11:35:77:e4:9a:78:40:0d:9c:49:40:ab:f3:ca:
                    27:ea:de:07:76:aa:92:19:b5:49:6f:b9:32:51:33:
                    c8:d5:e1:90:24:5a:48:44:5c:18:cf:76:20:94:c4:
                    25:96:fc:dd:85:59:32:cc:1b:18:22:6c:4f:c1:ff:
                    9a:1d:f3:57:c9:22:bc:e6:4e:7e:38:50:16:b4:56:
                    db:7a:0d:64:ec:f5:cb:08:fb:27:7b:6b:ed:00:47:
                    30:cd:b9:13:af:c6:33:66:2a:59:26:10:67:eb:02:
                    24:45:ce:5f:d2:74:a2:09:c9:a0:f1:c1:07:10:17:
                    b3:c5:87:34:af:fe:80:14:93:0e:4b:8e:f1:54:fc:
                    2d:e4:0d:1b:bf:d8:92:82:78:46:ba:1e:32:e2:36:
                    70:7f:9c:e8:6a:31:a1:59:36:db:6a:79:a5:a1:ff:
                    9a:b2:83:03:57:74:6c:57:8a:cc:54:c7:48:29:11:
                    7a:8a:2c:b8:a0:95:8d:ad:b0:04:a2:06:f9:42:ee:
                    c2:ff:14:bc:b1:f7:07:47:1a:6c:a0:fe:00:18:5b:
                    b5:54:c6:28:53:f4:8a:9d:93:48:c5:67:d2:c4:ad:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9A:E4:C4:9B:6D:A8:01:0D:AF:A0:7A:DA:7E:25:36:4F:C8:87:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/c4a4c3df-1495-3b1f-90ed-4ec010fe5a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d/ef718cd2-ee4a-40e2-a196-3451be20811d.crl

            X509v3 Authority Key Identifier:
                keyid:02:BF:F9:D8:4C:93:B4:2F:BD:63:1E:F9:DB:75:1C:D3:D5:12:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef718cd2-ee4a-40e2-a196-3451be20811d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a7:84:f5:9d:fc:8e:03:11:a6:48:f0:e1:93:f5:aa:53:1a:
         03:90:07:cc:e7:bd:b8:09:08:16:9f:1b:7a:f3:16:89:c4:08:
         24:4a:39:87:eb:0b:69:03:70:84:f6:ca:11:9c:a3:31:fc:75:
         0c:cb:82:2c:14:e1:f6:60:99:ed:73:2d:6a:8b:65:07:45:18:
         ac:78:a0:2b:81:00:47:12:df:0f:94:d5:ad:7f:22:33:8d:22:
         47:4a:70:58:7f:cc:a5:1b:f1:e7:c9:36:66:c7:1d:d7:0f:2e:
         76:de:8c:aa:76:ae:5d:5a:53:31:26:f7:dd:ec:c1:ca:4b:57:
         a3:61:37:26:7f:74:99:c4:dd:bd:f7:6d:15:96:96:c5:0b:cc:
         92:ed:75:6a:ae:5a:17:d3:93:bf:f0:40:be:4d:82:8e:e2:f0:
         83:0c:bf:0c:69:b0:58:7a:fb:69:4c:fa:89:4d:76:4f:ca:d3:
         a9:c4:4f:8a:87:3d:a2:08:38:f3:57:04:08:25:67:cf:ec:63:
         25:96:79:a4:56:37:54:c1:06:8f:fa:e1:8f:92:c6:2e:9a:e1:
         6a:d1:03:4a:50:ee:cd:ad:99:b6:e2:fd:94:8f:ed:d4:36:9b:
         3d:6e:5c:1a:ec:82:6a:39:44:59:aa:50:f7:60:31:0c:65:91:
         f6:51:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:15 2025 by rpki-client