Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa
File:                     9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa (raw, json)
Hash identifier:          ZQv9imQGEauoaHi3o8I1Cq9zlDZaPEDtadvraNwTTR4=
Subject key identifier:   D5:C0:BE:BD:1F:79:54:14:EA:32:BA:30:8B:AC:49:80:1F:37:07:11
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A94D0D5538A2DF3A9704FACB0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     202656
IP address blocks:        206.123.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d5:53:8a:2d:f3:a9:70:4f:ac:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=741a2734-026f-4b78-969b-b5f25199f695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ec:4b:2b:b5:80:34:95:2d:aa:28:2e:f7:5f:
                    94:43:d0:05:19:ea:1a:c2:0a:b3:54:c3:c7:d6:ed:
                    72:ba:25:a2:50:6e:bc:af:19:7c:46:dc:6f:b3:fb:
                    46:c2:4c:eb:fa:7c:4a:9c:a8:74:e5:61:9d:85:8b:
                    c0:ae:0f:0a:50:96:ea:81:3d:6e:6c:b7:b9:93:83:
                    99:2a:b6:80:08:95:7d:9b:3c:6f:e8:02:09:a7:b5:
                    4b:b7:c2:d2:90:48:5e:59:22:04:6a:71:96:0d:84:
                    0b:37:1c:1c:ca:da:f0:8b:90:11:e7:0b:e8:53:a9:
                    2c:79:41:be:fb:92:d9:e6:01:fe:86:ca:94:ec:d6:
                    40:99:0e:10:cf:e0:2b:42:1d:ca:87:7d:e9:94:2b:
                    1a:0a:0e:b7:a9:99:b9:e9:c8:41:31:6c:2f:a6:a7:
                    0c:ca:3a:b2:2a:c8:b9:9a:67:1c:5d:6f:d0:87:e6:
                    b5:87:96:48:ad:fd:ec:be:0e:d7:90:17:8e:0a:b8:
                    0d:38:a0:7c:8c:08:13:a2:a0:40:a7:fd:1e:08:ab:
                    ef:1c:d7:b5:26:31:9a:dc:93:8d:92:42:07:31:e0:
                    09:d2:4d:42:2b:79:05:d8:cd:18:36:03:c1:39:22:
                    75:21:77:f1:f9:63:c6:7f:fc:bc:11:4a:5e:06:f3:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C0:BE:BD:1F:79:54:14:EA:32:BA:30:8B:AC:49:80:1F:37:07:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b0b2658-bf79-35f3-968a-0e042b83ecdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:df:a7:35:0b:27:e6:8c:01:05:d1:1c:24:8a:93:e7:7c:
         4f:9a:7e:8b:0b:c5:26:4c:cb:4b:78:09:93:09:ba:9b:e4:f2:
         9c:3a:69:9b:b4:44:98:fe:5c:22:23:97:69:c3:7e:c6:af:71:
         52:41:cc:b5:4e:9c:61:7e:5b:9f:36:e8:1f:ab:9d:0d:de:ec:
         40:e8:ff:95:ff:48:2a:5e:61:56:d6:5c:a7:b2:2d:f1:22:59:
         1c:41:7c:e2:5d:04:7c:28:26:9f:dc:9a:df:b8:cf:7e:d7:f3:
         b1:f3:2e:c9:5f:9c:0b:e5:eb:42:1a:51:fb:9b:39:71:dc:20:
         38:bf:f3:44:76:87:b5:38:7e:cd:99:48:90:db:50:dd:72:a8:
         16:99:14:71:09:de:86:0c:66:52:60:c5:aa:49:97:e3:45:b6:
         1e:bb:93:aa:4a:51:4a:f8:fb:fa:96:43:ad:63:32:d8:b8:33:
         1a:26:2e:96:07:bf:62:88:31:25:98:81:22:33:32:5b:c1:9a:
         79:77:60:fb:51:55:4c:b2:8f:e7:4c:b7:be:61:14:27:9c:a4:
         63:77:27:4c:21:6a:f3:81:c7:3c:96:44:20:85:1f:10:2a:17:
         cc:b0:3a:14:0a:fc:f9:91:9d:fb:78:09:2a:14:44:87:1f:9f:
         17:be:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:54:53 2025 by rpki-client