Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
File:                     41117c2d-5816-38a3-8985-f9c202d75f9d.roa (raw, json)
Hash identifier:          v3slWG9/U3gg7rSwqLypK+vJWLTZuJ1YSfdq6gNYmSw=
Subject key identifier:   1A:2A:32:D2:49:17:5F:A0:3D:2F:B4:C2:73:64:65:67:CC:59:37:BA
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CD5D98DC61C86D83A36660
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        207.126.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:5d:98:dc:61:c8:6d:83:a3:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2dd0a861-f3fe-4969-82cb-9c68d50c6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:34:6e:60:72:34:ec:46:f1:89:05:d0:b2:
                    9c:cf:26:73:bd:26:ae:f8:c1:38:e2:60:95:94:34:
                    0a:dc:74:ca:7e:a8:40:86:5a:7e:2e:35:e4:4b:6b:
                    5e:7b:5f:a5:f1:da:f3:4d:27:69:f8:29:be:0d:ba:
                    ba:60:5b:a0:27:6b:0d:1b:81:75:6a:6a:96:aa:51:
                    c9:d7:1c:29:50:35:ec:90:44:99:48:15:a5:62:f1:
                    b2:b8:a5:c8:ef:dc:22:18:71:80:ea:67:b1:c4:93:
                    26:a8:fb:7e:3b:44:7b:30:84:6f:5f:e4:1b:9e:fd:
                    49:91:b5:07:55:32:27:e2:02:99:08:23:b0:8d:65:
                    bf:55:64:04:cf:ee:34:7b:54:1e:81:a9:46:03:44:
                    3d:f4:ea:c0:29:7b:41:06:22:66:b9:52:ea:3f:89:
                    c5:2f:e8:b6:15:53:70:69:27:5c:25:0b:e2:8a:13:
                    a9:8a:46:c3:9d:a5:e6:0f:06:bd:4f:6d:f3:b5:cb:
                    c7:21:07:45:09:07:fa:96:2e:82:b4:a1:b4:f1:ae:
                    3d:10:11:3c:8d:65:01:4a:4b:13:a5:c4:ab:92:16:
                    f6:62:10:b4:f5:cb:cc:07:24:de:ad:54:f4:7b:00:
                    61:5a:eb:a7:a7:e0:60:5c:4a:8b:c2:05:e6:39:41:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2A:32:D2:49:17:5F:A0:3D:2F:B4:C2:73:64:65:67:CC:59:37:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/41117c2d-5816-38a3-8985-f9c202d75f9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:a8:6b:31:14:09:74:43:1a:e3:30:68:73:da:7d:a1:c2:
         7c:94:55:79:d8:97:ed:f3:44:21:b8:ca:e0:d9:58:f9:71:55:
         f0:c8:03:04:ae:2a:51:31:14:05:1e:95:33:3e:61:be:3c:bc:
         61:58:2d:76:7f:68:cd:b5:c9:9c:55:b3:1f:d1:c4:bc:ce:12:
         ae:1a:0f:2f:56:40:2e:0f:25:7b:6d:c4:e0:60:42:ab:0a:ff:
         88:cb:c0:25:f7:59:12:ad:21:e1:32:2b:05:e2:8b:5b:19:be:
         38:06:a4:33:a9:aa:27:11:37:96:e1:52:da:bc:02:e4:c1:48:
         b2:11:b1:86:21:9b:f1:06:a0:b8:3f:b3:fa:07:f6:42:6f:da:
         87:75:ee:97:fa:3b:e2:54:7a:c1:04:a7:0b:cb:6d:4d:c5:68:
         c7:fb:94:e2:27:8d:09:78:a7:22:a2:54:93:b7:a3:d7:38:dd:
         51:97:4a:de:f7:de:c9:19:9d:52:ad:4f:c7:30:4e:1c:b1:7b:
         de:4f:6c:ef:4a:f4:5d:91:e1:f0:fb:b6:74:83:5a:18:ac:e9:
         a3:5c:78:ff:83:99:1e:b6:6c:7b:c4:ff:40:35:e8:16:af:a2:
         5d:20:b9:26:7f:27:a3:3e:bc:0d:94:b9:7c:76:a2:77:50:26:
         32:7e:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:10 2025 by rpki-client