Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
File:                     1dc07208-ca23-362a-a20c-22d013df9b70.roa (raw, json)
Hash identifier:          hCA7WIYN28w8/GQrcBCN9BgPqOyb+FRsVN9YQ7zu5hE=
Subject key identifier:   B4:E7:23:E5:1F:1A:7A:CC:8C:57:A9:EA:40:2C:FB:C2:8A:73:C3:80
Certificate issuer:       /CN=68f1635e-5871-4108-b726-e99a09258e31
Certificate serial:       010D0C9F4328584A9900B583A81097594D102880
Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     33510
IP address blocks:        204.126.156.0/24 maxlen: 24
                          204.126.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b5:83:a8:10:97:59:4d:10:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=b258ec17-ee12-434f-bb68-72a89f13f09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:a6:1e:ef:2e:b7:42:b7:c0:ca:5a:39:49:
                    8a:70:78:e2:48:aa:db:e9:56:94:91:18:ce:a1:e4:
                    1e:12:90:b3:a9:1c:41:1d:9d:58:b6:7d:c0:2a:e6:
                    15:26:75:5d:93:4b:a4:07:b9:62:47:e6:7c:1e:9d:
                    67:03:99:6b:77:f5:d1:83:bc:2b:42:e7:64:1e:4a:
                    f1:6f:34:c5:24:4c:d1:58:f8:67:82:32:54:40:05:
                    8d:67:21:bf:df:c4:ed:c9:52:21:f0:b2:68:b0:d9:
                    84:aa:ec:b6:89:8e:f3:47:60:22:fe:21:d2:07:f0:
                    29:5b:9c:54:d0:5b:6b:d9:e2:f5:5d:4b:ed:cb:85:
                    b4:a3:3f:17:d7:2f:8f:7d:bc:49:10:6d:94:8b:37:
                    f2:fa:03:75:e7:f4:8c:8f:54:60:e2:68:8d:b9:37:
                    cc:8a:d1:82:c2:e8:e9:dd:37:9c:6f:24:71:72:dd:
                    d9:30:37:90:ed:67:49:80:bc:cf:26:7f:41:96:21:
                    e8:23:58:19:53:2b:4a:eb:e7:df:74:96:d4:5f:42:
                    bb:62:71:03:3b:3a:16:b6:46:0c:fe:d9:a6:1f:c3:
                    6a:a7:d2:19:2a:da:8b:ea:28:e0:9a:7c:fe:05:21:
                    bb:48:f1:e4:e9:91:44:15:fd:61:50:94:ec:09:e7:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E7:23:E5:1F:1A:7A:CC:8C:57:A9:EA:40:2C:FB:C2:8A:73:C3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl

            X509v3 Authority Key Identifier:
                keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:42:41:7e:27:96:19:c1:11:8e:47:e1:c9:5c:ad:bc:3b:07:
         87:40:b0:13:95:cf:19:5b:61:7b:86:db:28:f6:65:29:c9:77:
         0c:02:6b:65:17:61:22:1d:cb:d3:22:42:00:49:65:61:fd:30:
         12:45:56:3a:71:4c:0b:73:5d:bc:54:62:09:6f:38:e1:37:f9:
         1f:12:18:e6:77:44:08:07:44:69:49:98:e7:ba:d4:2f:5b:5e:
         0f:f9:54:32:5c:99:3a:c8:93:02:44:ea:f1:78:ec:78:ad:8b:
         6d:ce:03:2f:2e:bd:3b:ea:66:2b:b2:4c:87:e3:82:6d:29:38:
         71:ce:07:bc:76:c2:17:67:76:c8:bf:85:e0:58:37:3f:23:42:
         a2:fb:cd:26:6b:2d:28:b3:21:6d:0e:8d:77:28:5f:23:1f:38:
         c4:86:c8:bd:31:24:58:e0:0d:4f:a1:fc:16:65:db:15:27:ed:
         02:11:70:2c:f8:a8:6b:c2:3a:e7:c8:3d:cc:17:d6:9d:79:c0:
         85:59:bf:fa:d7:39:aa:a6:3a:cf:f1:33:d5:af:63:9e:75:2b:
         73:4a:14:27:f3:69:b6:90:18:04:d1:47:be:c5:10:19:43:f6:
         0d:b4:b8:5c:ed:1c:6d:41:a5:e5:fb:98:97:f9:b2:24:0d:f9:
         62:9d:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:33 2025 by rpki-client