Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa
File:                     86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa (raw, json)
Hash identifier:          UaxH5HsU8n0HeD3/Y8kDGx00KztC1EIVTZelO/XZ2t0=
Subject key identifier:   09:98:32:75:74:94:FC:0E:20:1E:D3:51:B6:C9:4C:36:2F:0E:1C:CC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55D04EB9DAF752FC083580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     15247
IP address blocks:        209.53.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d0:4e:b9:da:f7:52:fc:08:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=5fda3166-f99e-4fb2-a803-b453d180610f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:71:43:4f:23:4c:6d:84:9b:26:22:e6:8c:8a:
                    1e:70:e3:c4:28:86:1e:ee:43:0b:a3:87:9a:1e:22:
                    e5:ee:90:ef:dc:ec:bc:41:1e:cc:ae:53:e3:23:36:
                    4e:97:27:fc:28:3a:52:57:c8:95:4e:43:4a:b1:25:
                    a9:24:dc:bd:2d:27:14:73:15:30:26:24:fc:b9:37:
                    d9:f4:46:57:2f:77:ff:e6:18:fa:22:70:71:ca:8e:
                    5a:11:50:38:cf:70:c3:23:63:a7:3a:77:24:31:47:
                    aa:2d:b8:6b:81:6e:17:37:d2:b0:18:ef:d5:08:12:
                    dc:43:7a:63:cd:0d:dd:e8:64:71:83:aa:92:9d:d3:
                    36:1e:68:67:ce:a4:e3:88:dc:26:7e:86:2a:45:d0:
                    11:34:f7:95:65:7f:ac:c6:bb:52:ef:d8:70:22:5b:
                    e3:aa:b0:6d:64:f4:1d:55:e0:73:83:be:b2:a7:d3:
                    d6:d6:94:9e:6f:cc:b0:fc:a0:93:08:b1:21:2d:2d:
                    1d:d8:ad:f3:b7:ea:f1:5b:60:3f:54:fa:ad:4a:5d:
                    d6:ef:fc:17:19:94:ea:56:96:ee:b4:30:cb:2a:f9:
                    9a:e7:ff:c9:31:0c:88:1a:de:90:1c:5e:69:08:a0:
                    d0:77:62:75:d8:f7:f1:2e:f7:21:02:9a:ed:c9:99:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:32:75:74:94:FC:0E:20:1E:D3:51:B6:C9:4C:36:2F:0E:1C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:d5:1c:31:89:b9:df:08:c1:b1:04:d4:c3:b6:6e:2d:bf:5d:
         3c:19:fb:ec:eb:4b:7c:38:b0:8b:a7:f3:0f:26:15:8c:63:57:
         62:9f:c3:4a:74:1d:68:e8:e7:41:af:50:57:e7:04:be:51:e5:
         6b:19:db:c4:48:06:11:12:76:b4:4a:52:31:07:9c:2d:e0:72:
         35:f7:41:bc:48:93:6b:d6:58:d1:6d:6c:cf:4b:46:51:8e:25:
         a6:7c:f0:c7:4f:3c:60:16:65:24:5e:8c:34:1f:0b:dd:21:30:
         f0:7a:82:a2:a0:37:46:c6:b3:62:a5:53:ef:1a:13:6e:57:8b:
         50:f7:07:1e:a3:2d:d2:d0:d3:03:79:1a:6d:1e:ca:0b:a7:f2:
         93:fe:2b:03:62:71:07:3e:5d:bc:76:1e:52:83:ae:81:d7:61:
         5d:64:f5:2f:ed:a9:c0:52:cb:96:49:c3:13:18:d6:2f:ff:43:
         84:a8:04:ed:27:d4:4b:d0:15:51:8d:64:30:40:70:64:e9:b0:
         cb:90:50:25:f0:9e:1c:ea:28:69:8b:ef:be:5a:ab:46:7d:3e:
         8c:e5:41:0a:c7:01:15:10:16:0c:b7:09:5d:59:a7:0a:7c:36:
         27:df:9a:4b:e3:e1:dd:f0:79:83:18:2d:6f:b8:b7:3d:e1:78:
         0e:be:47:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:29:59 2025 by rpki-client