Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
File:                     630c9798-0269-3e7f-bafe-971b39e013ea.roa (raw, json)
Hash identifier:          5j/3vlHVg1QyWQlgDsOjmIU/oJhWr65LJL1aw3SbhNE=
Subject key identifier:   34:EE:6E:F9:3A:1D:4B:24:DE:5A:4A:C5:F7:0B:B8:FE:19:B4:52:8D
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584AA42B8976F1F95219C72F5F00
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:89:76:f1:f9:52:19:c7:2f:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=9cf9ecc2-c4fc-4669-bfc6-d25bcaee5228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:75:20:3e:d6:bf:12:f6:de:a1:ca:1b:16:
                    0f:c5:38:51:cb:b5:cf:cc:8c:47:29:18:3b:f8:bb:
                    f5:46:d4:94:dd:2a:f6:86:0b:97:4a:e8:ea:cd:7c:
                    95:59:72:24:6f:91:99:41:c1:44:12:ea:4b:72:96:
                    30:00:ff:d1:e6:01:99:64:3b:d3:68:21:59:78:10:
                    10:49:a6:10:98:32:c9:f0:9e:9c:76:34:03:9f:94:
                    ec:bb:4e:7f:de:93:91:0b:5f:fb:b0:c3:d2:ef:4d:
                    9c:aa:47:7e:05:50:55:20:be:01:4c:c6:44:7e:cf:
                    e5:07:9f:e7:f1:28:30:b5:26:3e:91:4e:06:5c:bb:
                    89:7b:57:6d:d3:b0:ed:75:87:53:d4:6b:f7:a1:3b:
                    2d:28:21:4e:40:c1:a0:11:20:30:21:7a:d1:1c:b1:
                    32:65:6d:3e:48:ab:81:29:f5:5d:79:87:e1:e2:f8:
                    ae:04:5a:33:30:5c:97:38:2d:ae:87:6a:b3:0f:15:
                    73:b3:3c:2b:5d:65:8a:30:eb:08:d4:95:35:3a:44:
                    99:9f:d8:bc:8e:23:ad:31:b4:6b:ea:ee:c8:93:c2:
                    75:2d:1c:aa:0f:4f:28:5b:2b:4b:a0:fb:2f:64:e9:
                    ea:3b:82:ae:ac:88:9e:78:d8:4f:c6:d4:2b:e5:66:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:6E:F9:3A:1D:4B:24:DE:5A:4A:C5:F7:0B:B8:FE:19:B4:52:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:18:e9:00:1f:27:e0:7e:20:76:70:f9:db:9f:35:66:c7:
         0e:6a:a1:81:9b:98:85:9d:63:70:28:05:85:6d:66:bb:1b:b9:
         76:f3:11:d3:90:07:ae:d8:67:a2:f6:87:a5:12:51:e6:bf:28:
         63:44:14:2e:14:2e:b5:33:f8:20:51:44:32:4a:30:9a:e8:aa:
         0b:18:ce:38:20:d8:37:40:57:5f:1d:44:53:8e:ab:cf:e6:8d:
         cc:d5:9a:c9:66:ff:9a:bb:e7:71:0a:34:ce:98:eb:e2:0c:3b:
         fd:b2:9a:7b:3e:a8:ec:fe:c3:a3:47:8b:77:ff:04:ba:40:f3:
         af:2c:0f:7d:6a:a7:c5:ce:42:22:df:82:a8:b0:31:16:27:d0:
         5d:19:b4:3a:bc:d2:0d:7d:d4:9f:95:a8:eb:13:58:ae:21:80:
         57:2f:c7:76:81:35:e8:41:69:04:e6:4b:89:20:f0:fd:d8:2f:
         60:0a:61:14:70:32:3c:b3:c9:5f:a4:4b:1a:ea:cb:59:62:a2:
         98:25:b2:67:11:1e:b2:8d:c7:68:46:7c:8d:f6:fc:ed:91:f4:
         20:a1:14:31:12:8e:ac:ff:fc:35:13:4e:cc:44:08:1e:1f:6e:
         2b:a4:a0:be:b1:b5:01:7b:a4:c5:a8:ee:f0:65:27:82:49:49:
         ab:99:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:54 2025 by rpki-client