Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6806929a-98bb-3249-9dc5-41ad723576a0.roa
File:                     6806929a-98bb-3249-9dc5-41ad723576a0.roa (raw, json)
Hash identifier:          Du+TGqDduiVCKxtpUn+y1bFz5rhsRRM2alsI9z4VCJ8=
Subject key identifier:   C1:40:8F:FF:47:AA:0E:9B:6D:27:78:B2:F0:D7:B8:FE:80:82:B5:24
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CE284338AD0804DB18E800
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6806929a-98bb-3249-9dc5-41ad723576a0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        207.126.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:28:43:38:ad:08:04:db:18:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c16ea773-0660-4af2-ab70-ade01cbd3836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:d1:72:37:63:c9:c2:39:17:f1:e4:9c:33:
                    4d:3b:48:e1:3f:6d:76:6b:0f:ad:a9:bb:a4:05:db:
                    0c:19:a8:ed:fa:45:d6:1f:5c:95:98:f7:4f:18:54:
                    7a:f1:06:8b:65:f1:a2:36:22:86:60:3c:13:33:02:
                    69:30:e1:c2:eb:ae:f4:d5:42:8e:69:01:3e:51:0f:
                    11:59:d0:fb:41:ed:31:3b:c6:87:16:a3:92:13:d0:
                    db:ce:32:12:8f:04:49:6d:1a:22:46:3b:82:c3:10:
                    89:90:e3:35:8f:14:d9:32:52:86:7e:e8:59:96:3c:
                    a0:af:52:d9:03:06:43:f2:ff:ee:aa:a9:18:3b:53:
                    93:60:d2:fc:7a:3b:79:b8:42:ca:70:39:00:77:c7:
                    32:50:d1:43:64:e7:f3:ad:68:ba:95:ed:93:b5:c3:
                    45:dd:60:0b:ed:2b:98:19:a9:e9:8b:0c:fd:f1:88:
                    2a:32:1b:3e:01:d2:c8:82:c6:88:b8:56:4f:02:dd:
                    c1:8e:b1:6b:7e:9b:84:c4:0b:2e:8a:ca:2f:14:1e:
                    3c:1e:f2:4a:98:a0:1d:53:25:d7:c0:d6:8f:05:21:
                    9a:ba:21:28:3f:51:62:35:47:52:1c:ac:f2:0f:68:
                    ea:8b:5a:c9:f6:7f:ba:11:9f:6f:80:94:44:f0:18:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:8F:FF:47:AA:0E:9B:6D:27:78:B2:F0:D7:B8:FE:80:82:B5:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/6806929a-98bb-3249-9dc5-41ad723576a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:22:a8:4d:55:2a:22:70:f8:97:9d:c5:73:74:2b:c4:6c:
         2d:86:de:0e:a2:3b:99:83:d1:ae:1f:7d:1a:73:56:c6:b9:d1:
         c5:f1:77:86:47:6e:01:2b:fc:81:df:6d:22:c1:01:93:0a:22:
         b2:82:4c:af:c0:92:e4:5c:dd:44:a6:09:05:13:e7:95:37:8f:
         37:96:cf:3c:70:77:65:0f:15:6f:fe:2c:24:9d:89:77:0b:ba:
         38:dd:19:1a:98:d1:12:7a:21:4e:9f:56:d9:dc:cb:ff:2a:51:
         ff:53:0c:bb:09:d9:f6:7f:01:de:d9:c0:53:7d:d5:f0:a7:63:
         dc:36:03:74:60:2d:d5:e5:ba:0e:48:d9:e6:97:ef:aa:09:59:
         e7:6c:c6:46:ea:75:8b:f1:1c:fc:ec:ad:b8:1a:8c:06:38:35:
         68:76:d7:06:29:55:88:90:b2:b1:1e:88:83:8b:ed:ed:85:34:
         8a:c9:a9:a4:b4:27:62:ed:a8:c6:63:57:ae:30:76:32:df:99:
         bf:56:bb:ac:8b:f7:b7:3d:4a:2a:4a:44:54:33:a6:49:9d:f5:
         aa:af:cc:11:29:c1:9a:9f:cc:85:4e:84:03:95:2a:0e:43:bc:
         01:da:ba:12:6f:fc:a1:e1:7e:70:41:ee:e2:f1:fc:3f:fc:ff:
         02:f0:ae:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:01 2025 by rpki-client