Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/fcc6e930-0ac4-3e07-8c6b-6faa3e11845b.roa
File:                     fcc6e930-0ac4-3e07-8c6b-6faa3e11845b.roa (raw, json)
Hash identifier:          ExgF9mVV/Y+W+XcPGQSPZ8OJ5FfQDYtgU0aUrj9PABM=
Subject key identifier:   FA:8F:3D:55:4B:AF:1F:5B:9D:3A:8C:AF:04:E9:17:7B:90:2A:14:F5
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584B64CE191936A4C371ABC5EB00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/fcc6e930-0ac4-3e07-8c6b-6faa3e11845b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     32381
IP address blocks:        207.126.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:19:19:36:a4:c3:71:ab:c5:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bb413715-6466-4a0c-b788-a903efb0dcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:78:e8:68:d2:9d:3e:28:a7:b1:c6:7c:d2:
                    d5:e5:ba:35:fe:ae:bd:c1:92:54:ce:ed:08:7c:07:
                    9c:cd:29:ec:ab:c6:a4:3c:ca:c9:6f:e2:3c:48:0e:
                    7d:49:f4:8b:af:28:0e:66:89:a3:d9:be:d8:23:87:
                    62:0c:fa:5e:7c:ca:c0:2a:bd:65:52:dd:1e:78:9b:
                    c5:d8:b9:f5:26:95:c2:7c:dd:d7:1b:e6:1f:6f:c6:
                    d5:7b:f5:5d:1c:72:3c:f6:2b:b4:0e:28:bc:16:0d:
                    02:e5:e6:61:7c:cc:81:ff:ae:29:87:00:12:a8:30:
                    ab:59:2f:13:da:ec:de:e3:85:5c:67:3d:b0:b0:60:
                    2a:60:c1:31:ef:83:a6:c7:4f:96:a1:36:ab:be:e5:
                    b6:2b:69:46:e7:2c:aa:1e:8b:2e:56:a8:60:9b:39:
                    d3:70:05:14:03:49:fb:9e:f9:7f:5a:d3:63:29:e8:
                    e1:87:f9:94:4c:63:1d:f8:98:e5:8f:34:f5:12:96:
                    db:4b:38:13:9b:5c:59:61:06:d5:16:a7:c9:4c:b2:
                    39:09:4d:e7:d8:ca:42:3e:65:25:e8:b5:6a:40:14:
                    79:ed:8e:1c:08:83:1c:5c:5f:2c:fb:68:e6:cb:32:
                    9d:4b:54:06:fe:49:6c:af:c4:44:63:35:d1:b1:a1:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:3D:55:4B:AF:1F:5B:9D:3A:8C:AF:04:E9:17:7B:90:2A:14:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/fcc6e930-0ac4-3e07-8c6b-6faa3e11845b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3e:0b:32:f4:c5:f3:d0:b8:df:94:22:e8:d0:b0:fa:56:c0:
         9c:ee:28:71:a8:8d:93:06:c2:b4:07:3f:6f:8c:4e:90:f7:46:
         98:e2:bb:0e:c1:f9:38:e7:ca:60:1a:cd:e6:db:1b:85:28:4f:
         f2:0f:2c:19:7e:00:a2:70:ea:2a:fa:d0:ca:f5:6d:33:ff:1b:
         15:43:97:c6:50:ad:a3:d7:cb:d1:83:cc:f3:d2:d3:d8:25:20:
         3c:7d:52:9f:dc:99:7e:5d:60:ff:7a:f0:a2:9b:65:cf:c8:43:
         88:94:ba:56:92:fd:36:42:37:ad:33:aa:b8:fb:35:6f:8c:9c:
         91:35:80:f1:9e:d7:7f:78:f6:91:9a:5e:dc:d9:85:6d:e7:98:
         40:37:96:47:da:2e:bf:00:26:82:c1:56:f7:03:06:1f:eb:0f:
         d4:d8:c7:a5:20:b7:25:cc:73:05:1a:c5:b6:36:03:73:f6:da:
         26:6a:1b:cc:07:53:96:5b:65:2c:1a:1c:dd:06:fa:e8:f3:aa:
         2e:0b:15:da:02:f8:25:8a:d4:d8:d6:33:56:d0:23:e8:a3:d0:
         83:88:51:64:2d:52:d3:52:89:80:1a:49:d5:ea:4b:0c:69:46:
         4c:02:4e:ff:b9:03:5e:15:19:ee:14:09:0d:42:f2:f6:2d:c5:
         a3:fe:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:02 2025 by rpki-client