Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e110461-1cf1-3ee8-a243-99526096d690.roa
File:                     5e110461-1cf1-3ee8-a243-99526096d690.roa (raw, json)
Hash identifier:          bcTzSVyxpGVdTila4SOjiBIHfpwPRJpfP/uaCPp84LY=
Subject key identifier:   CF:68:C1:BC:A1:2F:C1:94:E1:25:C4:32:50:A5:6D:9D:36:EC:5B:5C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B26E5BAF84069E564A88B9E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e110461-1cf1-3ee8-a243-99526096d690.roa
Signing time:             Wed 10 Sep 2025 20:51:18 +0000
ROA not before:           Wed 10 Sep 2025 20:51:18 +0000
ROA not after:            Tue 09 Dec 2025 21:51:18 +0000
asID:                     54253
IP address blocks:        207.127.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:e5:ba:f8:40:69:e5:64:a8:8b:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 20:51:18 2025 GMT
            Not After : Dec  9 21:51:18 2025 GMT
        Subject: CN=db5d0428-bc40-49ed-9541-74dba6b9e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:bc:c2:67:8b:9a:21:83:d5:b0:43:41:c6:
                    c9:2f:4c:e9:37:69:8d:57:69:f0:b7:7d:ee:d7:58:
                    ca:20:7b:9f:6c:4e:d8:92:f6:ed:8a:22:d6:85:c4:
                    26:37:60:cf:69:41:33:70:e7:97:47:66:8c:66:87:
                    78:00:2d:c6:85:7f:bf:e2:c0:56:17:f7:ae:c5:d8:
                    dc:32:3e:b3:7a:df:c8:37:62:b5:81:43:b3:d0:b1:
                    d9:83:7f:37:5b:5d:67:78:26:75:8a:a4:34:88:e6:
                    11:46:c0:9f:09:17:7c:29:8e:1b:87:d3:6d:2b:40:
                    2d:79:91:20:1f:b7:5f:f4:d5:ed:9d:26:c2:7c:20:
                    c5:98:41:2a:57:5a:5d:cc:18:b7:60:06:6e:25:ee:
                    ec:4b:52:95:23:c0:2f:06:5f:63:02:f2:db:a2:14:
                    f0:a8:64:5f:88:01:c6:6d:75:51:e2:cf:ff:24:32:
                    ef:58:1d:ad:f5:14:54:12:11:15:a8:3a:07:9c:5d:
                    09:ce:f2:47:dc:8d:76:8b:dd:3a:17:17:a0:2e:2b:
                    af:18:d5:c7:c5:f2:ac:67:a7:24:00:26:79:98:80:
                    e1:64:7f:36:34:7c:5e:75:c8:8e:16:23:a1:42:1c:
                    a7:a4:0a:ec:57:cb:78:e1:b2:aa:34:74:97:0c:b9:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:C1:BC:A1:2F:C1:94:E1:25:C4:32:50:A5:6D:9D:36:EC:5B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e110461-1cf1-3ee8-a243-99526096d690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.127.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:c5:dd:8d:14:58:46:c6:7b:d6:9d:20:8a:f7:9f:d4:8f:
         c0:10:56:a8:08:76:69:39:78:ab:7d:d5:7e:45:6d:8d:21:10:
         07:e6:c5:12:a1:fa:b2:53:58:97:2b:ce:23:af:bf:cc:d0:47:
         93:66:bb:01:60:f2:99:ac:a4:28:96:2e:0c:86:11:2a:76:70:
         c2:4f:3c:f7:72:4a:c5:69:3a:22:50:f8:61:e8:ef:04:a0:41:
         b4:34:12:f5:c1:98:7c:80:a0:5e:9a:0b:7e:ec:c6:c9:bf:50:
         b7:3f:70:2e:d5:82:c7:04:65:fd:14:e6:a1:49:a4:f2:d2:7f:
         5a:0f:d4:ff:8c:4d:80:ef:b1:32:8e:0b:83:38:c4:26:e1:ae:
         1b:6f:4e:4e:7f:5e:b2:c7:31:d2:d6:ac:f6:da:f5:3f:cb:07:
         e9:83:47:4a:a5:f8:c3:92:7c:19:81:05:75:6a:ee:de:f1:6b:
         f3:78:7b:26:da:4e:e3:4d:76:33:82:40:92:20:d7:93:ef:25:
         70:14:f2:84:20:f6:a2:49:82:60:34:5f:58:53:60:a6:ff:fb:
         f4:9d:fe:5e:fd:97:16:c6:31:69:51:24:09:64:48:0f:c4:42:
         1d:8c:9c:83:97:25:75:a9:af:fc:49:b0:15:38:1d:d8:7d:22:
         28:e2:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:03 2025 by rpki-client