Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
File:                     630c9798-0269-3e7f-bafe-971b39e013ea.roa (raw, json)
Hash identifier:          eoyWGhIYLrQNkS2PHXLbGgfTYyKe2HlCIdB+a1p/TkI=
Subject key identifier:   91:50:75:21:98:CC:E5:F9:3D:40:46:72:1F:1F:04:F7:F9:00:0B:2E
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F4328584B84E7822B2D6FD46557622BE0
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
                          158.26.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:82:2b:2d:6f:d4:65:57:62:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=58d56b7b-6d33-4398-bdc9-1789131cec98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:b8:f5:05:f4:68:68:c4:13:95:23:ce:9b:
                    c6:06:5c:3b:14:11:02:d3:4d:bb:a7:53:77:52:ab:
                    ec:66:88:c5:2b:a3:b6:17:fd:4a:a2:df:96:d0:31:
                    11:0a:ca:57:fa:db:fb:fc:a7:5f:fa:7d:13:48:c6:
                    5a:10:ce:47:80:88:03:21:e8:1d:b6:46:8a:15:6d:
                    95:2f:b1:e2:53:37:09:48:65:29:0c:3f:8c:fa:8a:
                    44:33:bb:2c:75:af:db:1b:a2:22:0a:50:77:9f:6b:
                    57:6d:2b:10:e9:76:48:76:ed:90:6a:d5:30:45:2e:
                    c0:4c:68:c8:33:fb:dc:ae:58:97:d9:4b:ec:d5:6d:
                    3b:c1:00:96:56:99:6a:b9:35:ea:27:ae:95:37:c6:
                    f6:ed:20:f5:6f:ab:6f:4f:76:88:0e:18:51:89:86:
                    1c:9e:62:8e:76:74:a6:f5:33:a3:95:cd:59:05:6f:
                    45:2d:5a:c3:43:95:1a:e6:20:89:d8:36:d3:c6:b3:
                    5f:aa:23:4e:93:f7:86:e3:a8:de:54:3e:41:26:dd:
                    e9:8d:8e:49:cc:b4:58:e4:a0:53:92:ef:5d:0d:7e:
                    82:bb:19:b1:54:50:69:b8:ae:5f:2b:72:c8:cc:60:
                    79:51:c9:8f:32:79:7b:e1:6f:4a:b9:80:84:b5:80:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:50:75:21:98:CC:E5:F9:3D:40:46:72:1F:1F:04:F7:F9:00:0B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21
                  158.26.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:26:a9:01:a3:e2:ba:03:ac:e3:3c:31:9e:f9:fb:1d:6c:c7:
         16:25:a2:a2:24:d0:6c:15:c5:75:4a:0f:e2:69:fb:e0:4d:0e:
         72:81:d8:5e:0e:a4:3c:73:4f:6f:0c:da:01:ca:2b:1e:21:3b:
         cf:f2:89:1f:b9:c4:77:7f:33:74:fb:2e:28:e6:27:7e:96:6e:
         0a:48:b4:95:9b:af:8b:c6:66:30:ce:57:b5:ee:bc:b8:b2:2a:
         e6:20:28:56:5d:ea:01:5e:0f:08:66:09:f2:10:a5:ff:7b:93:
         03:5d:a2:a8:95:d3:54:4c:7e:aa:3d:1f:8d:16:3f:93:3a:e3:
         cd:66:e8:1c:aa:eb:77:74:50:3a:99:cd:2c:28:03:f9:ac:da:
         5a:99:dd:e3:6d:b8:2f:54:b6:22:7c:6a:dc:ea:e5:59:e4:a2:
         a8:de:4f:7e:da:02:d2:48:ee:05:72:69:32:f7:82:d3:4a:10:
         80:3e:52:5c:cb:56:45:e7:23:af:39:df:c2:49:2f:43:fc:18:
         fe:5a:71:2e:35:82:7e:d2:d8:50:07:d4:ae:4f:03:78:d6:41:
         a2:21:39:6a:ed:1e:50:bb:c8:4d:39:e2:53:5c:7c:15:ee:65:
         8d:35:d7:f0:12:5d:e9:af:ac:53:92:6f:88:2f:c8:72:0e:db:
         d9:51:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:27 2025 by rpki-client