Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e60629fc-984b-3303-b12f-3a19d2ba4a16.roa
File:                     e60629fc-984b-3303-b12f-3a19d2ba4a16.roa (raw, json)
Hash identifier:          Wx7AREBWxI7eoeBfkQhoihdtCGPns3M7Z4sxdUsJ8Oo=
Subject key identifier:   C7:35:1B:F7:B7:48:47:3F:67:D1:EC:6E:57:CE:2F:AA:E4:CF:23:37
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A9BCB74B4079B283FA2B5BFC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e60629fc-984b-3303-b12f-3a19d2ba4a16.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     16739
IP address blocks:        162.254.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:74:b4:07:9b:28:3f:a2:b5:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=ed20f57f-dd8e-418b-a51a-b5fb904c2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:97:bd:55:d9:3c:04:f7:b8:ac:c7:b8:7a:
                    90:e9:a4:ec:0d:d1:4b:3f:d4:32:87:fb:b5:cb:05:
                    71:c1:bf:e2:c1:48:5e:4a:7f:bb:d1:f3:79:2b:5b:
                    40:db:d6:ae:b3:4e:f4:5b:f9:87:52:fb:c3:54:b2:
                    00:ba:7f:45:38:e1:f3:2f:ad:6f:e1:5c:ce:15:98:
                    8c:e5:5f:14:5a:39:89:4d:2a:93:22:ae:92:62:24:
                    5a:f7:dd:72:bf:ce:f4:93:58:c0:02:1c:55:53:40:
                    bd:a2:14:f1:f6:2b:83:e7:ed:d7:44:ad:6a:04:ce:
                    c3:94:ee:57:5d:3d:26:4c:c7:c0:04:e6:15:82:80:
                    07:cc:02:6f:c0:0e:ee:74:18:c4:89:61:2d:b8:57:
                    73:4b:e1:89:97:07:d5:53:94:2c:d2:46:ca:6d:58:
                    0c:0a:9c:8e:e7:e4:e7:b8:9a:81:9a:49:96:8e:f8:
                    6d:97:7e:5b:ef:a4:41:3a:b4:dc:b5:8a:55:7e:f0:
                    f6:bd:f7:b4:5b:26:62:58:80:93:64:b5:dc:73:b6:
                    4e:6b:ca:59:33:8a:ca:e8:4c:fb:0e:66:4b:18:f4:
                    9f:ce:5a:06:02:f5:36:71:84:49:6d:5f:b3:04:6b:
                    dc:d8:88:e7:24:7c:5d:62:43:7a:6d:31:83:3e:22:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:1B:F7:B7:48:47:3F:67:D1:EC:6E:57:CE:2F:AA:E4:CF:23:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/e60629fc-984b-3303-b12f-3a19d2ba4a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:6e:f6:31:c4:28:3f:8c:58:ba:9c:d1:c8:f3:92:25:27:
         88:db:08:c2:71:ac:76:fa:8b:16:2b:15:e7:19:06:8f:43:dd:
         51:8d:5a:ed:cf:65:27:83:8c:25:9f:70:89:8c:1e:f9:aa:49:
         f6:ad:c7:1c:63:2e:93:e0:e0:f0:df:69:cd:68:67:3b:24:a9:
         51:40:cc:5c:b6:f2:1c:d4:3e:9a:c6:82:83:6d:32:a7:50:a0:
         c1:10:78:4f:26:53:06:0f:0e:6f:99:86:55:f7:91:cb:5a:2f:
         f9:7f:4e:98:50:42:a9:0a:e0:fa:07:3b:d2:7d:29:e9:a0:b2:
         81:65:5d:b6:a9:69:c9:91:5d:e3:5b:42:58:3f:10:eb:fa:5d:
         df:e8:0c:9d:11:c2:2b:9b:64:38:75:fe:4e:dd:db:12:80:11:
         ea:07:8a:7b:b9:ed:45:d2:a4:2d:ec:57:68:67:10:7f:38:aa:
         08:85:7b:b4:da:03:29:be:fe:78:30:0d:59:34:6f:d1:cd:96:
         49:f0:c1:71:d2:60:4c:b2:95:60:a7:4a:34:74:83:61:11:80:
         ae:40:59:96:6e:21:0e:42:58:69:91:bc:d3:07:72:53:52:f6:
         00:99:d9:c8:23:53:8a:63:07:75:0b:e9:6c:d3:a0:a9:ca:0c:
         40:92:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 13:58:25 2025 by rpki-client