Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
File:                     8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa (raw, json)
Hash identifier:          +BxC+VO4Sz3j8IDHGqXFxltuix/GYMu7a8nq5yvmqIk=
Subject key identifier:   C3:F7:4D:E4:96:83:32:F2:3C:92:3B:B6:36:0F:50:D9:91:6D:0E:66
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D32654EB1BF3E5CAF2E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        205.250.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d3:26:54:eb:1b:f3:e5:ca:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=cfff5904-2e8c-4792-a3cc-5b726e2d4a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:64:6e:29:65:17:2a:0b:87:0f:b3:6b:42:
                    16:72:6f:8f:c8:9c:c3:ef:90:3d:db:57:ca:6f:81:
                    8e:07:01:6d:bc:aa:70:0b:75:f2:42:b4:56:9e:61:
                    8d:ed:82:bc:e5:8a:6d:4e:26:74:76:98:8e:ae:dd:
                    75:36:95:66:84:05:c5:05:7f:34:4f:65:26:23:4b:
                    ca:9c:2c:a4:40:00:e0:7e:31:1c:75:89:41:e8:83:
                    85:75:b8:8f:b2:fc:9a:66:e3:aa:e0:1f:f6:a6:cd:
                    18:5e:fc:67:88:76:c1:a6:e1:52:a3:74:de:d4:6b:
                    4d:3f:e7:a4:76:97:bd:6b:03:21:f6:e7:d2:de:d7:
                    c4:16:97:31:b6:34:9a:96:d1:91:b1:e7:ee:23:92:
                    46:59:01:a6:b6:8f:66:af:81:a3:97:00:6e:92:75:
                    b3:19:ca:2b:ff:3b:99:87:13:99:04:9f:3a:8c:0c:
                    71:17:9a:a9:51:36:3c:5c:8d:32:99:8a:ea:47:90:
                    ed:8d:b9:22:ca:a3:ac:78:bb:1e:38:19:f5:35:e3:
                    72:db:04:32:fb:bd:b7:73:b2:35:c6:eb:45:56:16:
                    8e:26:1d:2b:f0:0b:ed:3d:03:72:e0:15:99:76:01:
                    6c:ec:78:e0:a8:32:47:b1:f9:67:75:17:c4:1a:0b:
                    4d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:4D:E4:96:83:32:F2:3C:92:3B:B6:36:0F:50:D9:91:6D:0E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.250.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:5d:a9:cb:85:78:3c:66:61:7a:65:82:1b:d5:bd:4e:f7:b2:
         9d:21:3b:4c:da:18:66:7d:c9:1f:08:61:ad:00:fc:46:10:ad:
         16:1b:37:27:39:94:89:44:97:c1:6f:89:e9:c5:10:ac:de:4b:
         ed:01:d8:4e:fb:18:92:fe:38:b9:2c:78:a8:2d:ad:50:b0:95:
         6d:0e:35:06:ff:0a:f0:5f:51:0c:5c:30:83:40:dc:e5:4f:48:
         e5:7f:26:ed:9d:6e:b8:14:49:91:7b:48:6c:8b:e4:d2:87:8b:
         33:ea:84:58:27:0f:b5:6f:72:76:d1:bb:52:03:c1:ff:34:19:
         be:10:86:76:12:66:f1:b9:f0:36:ba:24:56:8c:5b:8f:64:3e:
         ef:43:02:34:06:e8:93:fa:e0:f5:2b:b4:c2:b9:02:20:fa:4e:
         33:89:55:27:ce:81:23:40:06:d2:30:3a:e9:8e:57:83:a3:c6:
         dd:d1:29:c9:ea:3a:cc:59:55:f0:e2:61:80:34:25:ce:5d:6b:
         a9:e3:df:09:cf:fb:b2:74:8e:fb:8e:be:2b:53:57:ce:34:cc:
         cc:48:37:23:10:10:5b:bf:c3:d1:17:43:1a:49:7e:0a:42:56:
         67:b9:6a:e2:c9:cf:31:ed:25:fd:d5:f5:75:22:de:74:83:24:
         6a:c2:18:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:08 2025 by rpki-client