Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2296547a-db18-3d15-b177-4e48e0def8f8.roa
File:                     2296547a-db18-3d15-b177-4e48e0def8f8.roa (raw, json)
Hash identifier:          yqmPYGrdRFmXU0oEkMAagc4ddyW9b7vLI2G4MdGrdZ0=
Subject key identifier:   6A:05:FA:8D:03:73:6E:87:E3:1D:E0:5A:6E:82:90:2E:F6:E3:4B:8A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55D0E0825430296654EA04
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2296547a-db18-3d15-b177-4e48e0def8f8.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     15247
IP address blocks:        209.52.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d0:e0:82:54:30:29:66:54:ea:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=2583dae6-8006-4b3d-8adb-c40298529f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:db:10:f0:48:58:26:13:ad:a9:5b:82:9f:
                    52:43:1c:05:2f:d6:58:4b:b9:a8:a4:7c:46:94:1a:
                    e2:aa:4b:db:cd:f1:65:e3:86:79:0c:28:4d:2c:66:
                    46:b6:e7:37:4e:e9:46:b1:9e:8f:82:b2:9f:f7:a0:
                    8a:c4:cc:c5:2e:5a:d7:32:dd:62:1f:99:bd:77:8a:
                    82:47:0c:94:ed:4c:f6:e4:91:c6:0a:8c:b6:16:f0:
                    9b:be:df:fa:29:fd:af:5d:08:97:a7:39:39:26:93:
                    57:5b:95:01:20:94:37:68:84:95:08:60:71:f8:80:
                    56:bc:b5:a5:5d:59:ec:a7:72:dc:9e:6f:90:65:df:
                    ea:22:28:6c:c0:c0:2d:a9:57:86:b2:e0:55:9e:72:
                    33:b1:37:cd:f6:ae:a0:b9:d2:9c:2a:cd:4a:f9:d5:
                    7e:5b:14:24:4f:36:e1:1b:7b:76:b5:2e:bc:68:14:
                    9b:9f:48:e7:b0:43:6d:55:de:5f:62:a8:a8:8b:15:
                    0a:46:da:8c:95:4d:e5:ef:d4:ad:bf:31:14:74:87:
                    b9:9b:00:4e:7b:06:33:65:7a:40:25:75:9e:00:a8:
                    91:00:06:5d:73:b8:43:3d:fb:47:36:ed:bf:16:f3:
                    f9:8b:c1:a9:a0:ac:5b:f5:a5:05:b6:4e:eb:8b:19:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:FA:8D:03:73:6E:87:E3:1D:E0:5A:6E:82:90:2E:F6:E3:4B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2296547a-db18-3d15-b177-4e48e0def8f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:ad:1e:e6:d9:db:b3:fc:63:34:07:ce:9f:a9:3d:18:4b:
         4c:2e:a8:7d:26:ec:1d:90:cf:91:9d:47:23:e9:f0:e0:6a:0d:
         aa:a4:0a:3e:45:ab:87:bf:a7:a9:df:24:3b:0d:b8:d6:93:65:
         d0:7e:7d:c9:c5:21:48:70:db:c6:8d:df:69:c4:e2:5a:37:5b:
         92:dc:83:86:1c:27:fe:1f:fe:f5:d4:0e:1a:af:9e:20:d3:8b:
         42:df:1e:cb:fc:bf:85:15:49:9d:a3:b5:d7:c7:61:f0:e1:b9:
         8c:23:3c:9b:c1:94:dc:ef:9b:dd:95:5c:ef:ae:6f:4c:ee:d8:
         65:17:3c:cc:f8:59:3e:5a:a2:50:f2:a3:ac:93:a9:bb:42:e2:
         e7:fe:26:36:80:98:ec:30:e4:ed:29:22:67:7c:4e:a2:6a:f0:
         c9:4c:0f:bd:fb:65:d3:fb:22:24:7d:8b:0a:38:3d:55:c0:58:
         7a:b6:4f:ba:2a:59:42:06:7c:21:4d:eb:77:a1:bc:db:e1:fe:
         7b:d3:2a:dd:47:f6:3f:4c:c1:df:9e:a6:ff:8c:65:7f:f8:34:
         11:21:2c:d5:b3:27:75:db:94:a0:c9:ed:70:b9:a9:18:c9:dc:
         03:30:64:e6:c6:18:a9:19:d3:24:59:f2:bf:c6:23:33:11:12:
         78:39:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:03 2025 by rpki-client