Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa
File:                     3ea01a12-51e0-3054-9e81-937b97f56eb0.roa (raw, json)
Hash identifier:          oIAb4ruLzVg8vCJwX8QMzZcJ8A0pvjmaADNiWwes+qw=
Subject key identifier:   7D:63:5B:AB:66:D5:3C:8B:FA:7C:24:AC:45:F1:E3:F5:62:BF:F5:22
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D28CF80963B43E4E1D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        209.52.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d2:8c:f8:09:63:b4:3e:4e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=e7d5e062-2ba9-4e03-bc6a-f0ff8489d9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:b5:de:6f:2d:2d:38:2d:23:d4:0f:cb:02:
                    2b:9e:b5:38:54:3c:4c:00:83:8f:fe:f3:a8:e5:69:
                    1b:bf:00:20:9b:12:68:a2:ba:95:3a:c3:3e:cc:56:
                    51:11:ae:45:4a:13:93:90:3c:b4:dc:83:24:f8:33:
                    7a:26:ac:85:00:d0:9b:85:98:5b:fe:fa:37:48:43:
                    7b:9a:fa:71:4f:e9:73:4a:8a:3e:42:6f:6a:ea:e9:
                    42:fa:16:9a:3b:e1:45:9c:e9:a8:ad:9e:f4:36:94:
                    74:d6:71:c7:83:9b:fe:54:c2:a5:d4:d8:65:18:23:
                    79:f3:b9:db:82:5d:30:1a:0d:1f:dc:56:3d:e6:b0:
                    93:5f:4c:14:c5:f3:93:a8:b2:c7:b6:20:24:0e:2a:
                    4b:1c:60:9e:ac:6a:65:08:79:8a:5c:6d:53:1a:69:
                    b8:50:55:f3:48:dd:67:c2:1a:c5:2d:89:ff:f5:93:
                    37:e4:14:ce:05:b0:e2:cf:93:b7:80:a1:42:0d:af:
                    7b:ea:6f:06:ff:52:28:0c:a2:73:8f:25:51:1f:62:
                    6f:72:dc:29:80:fd:0f:9e:3f:08:76:52:77:33:49:
                    65:a5:76:40:2b:be:4d:ca:0f:18:4d:8c:70:bd:fa:
                    64:ae:8e:5e:b2:97:e5:9e:37:f5:2f:12:10:18:47:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:5B:AB:66:D5:3C:8B:FA:7C:24:AC:45:F1:E3:F5:62:BF:F5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:cf:a9:ce:6f:86:5a:1a:d3:e8:e2:66:da:28:9a:27:ea:
         7f:73:65:e4:cd:48:12:6b:44:09:97:60:13:47:ce:7c:8b:99:
         8d:e5:74:b5:4e:f9:d5:10:5b:05:d4:e1:ef:06:ff:e7:28:39:
         7f:2a:d8:06:a2:0d:6b:c5:d8:b6:05:98:66:a4:c8:2d:36:d4:
         6e:5c:27:c0:99:62:ee:0f:e0:0f:b6:3b:13:17:aa:ff:51:52:
         b0:62:95:15:66:9c:50:d9:fa:d3:9d:1e:2e:9f:87:11:fb:3f:
         1c:c6:53:36:27:fd:a4:c2:61:77:4f:d9:01:be:32:65:05:9a:
         06:e1:07:7e:f0:fb:98:c0:76:c5:11:65:29:da:49:02:7f:85:
         c6:47:70:83:20:2c:63:3d:e6:c2:7a:61:7a:b1:86:47:0e:eb:
         81:05:48:8f:23:4a:c3:77:53:9f:ba:2f:79:00:b7:22:b0:2a:
         6a:53:cd:a7:9b:de:06:18:d9:4c:42:3a:ff:d3:50:6d:e0:5a:
         3a:14:55:ea:a9:91:c8:96:e4:8e:ce:09:1c:ae:46:be:f2:81:
         1a:4b:fd:dd:aa:27:e7:2f:1c:1a:b7:5a:ae:74:12:19:39:78:
         5a:ab:9d:09:1c:62:a2:69:41:7a:d8:c5:24:94:fd:ff:ad:9d:
         1f:ca:23:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:26:11 2025 by rpki-client