Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa
File:                     97804e67-b515-3bb5-98a2-f8a309ebc23e.roa (raw, json)
Hash identifier:          2pbmhucDq3NEzWSPe2e8aU7S4QXHbKh0bsX0Y8bdswU=
Subject key identifier:   2F:44:89:53:91:53:21:03:27:A5:29:B3:D1:EF:7B:65:2C:A7:98:20
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55CFF05DC05A0ED86475C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        209.52.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cf:f0:5d:c0:5a:0e:d8:64:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9814bc62-74a8-4851-a858-3f48965afa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:7d:ae:20:a3:d1:df:6b:79:11:22:3e:05:
                    eb:e3:22:26:61:e1:6d:4b:c1:87:96:2c:e1:bb:f0:
                    1a:e5:f1:a4:89:aa:31:a3:8c:12:09:de:a8:8c:3d:
                    eb:29:0c:f9:04:be:2f:02:3a:33:d5:d8:3b:c4:1c:
                    1f:6d:a2:91:95:9c:ff:aa:28:13:e0:8f:b4:d2:0b:
                    15:1f:32:6d:34:21:c3:f6:59:58:e2:b6:a7:89:87:
                    eb:68:0e:0c:f6:45:72:91:1f:1c:2b:a9:20:0e:13:
                    b0:34:49:61:a5:68:d8:62:1b:71:73:bb:00:a4:cf:
                    58:eb:01:87:13:8a:c4:f6:bc:4f:0f:cd:ae:4f:eb:
                    22:2f:06:ce:a0:e9:12:91:2b:17:2e:4c:0f:c6:8f:
                    73:f0:25:cf:2f:ec:23:bd:22:55:00:a7:88:31:aa:
                    96:35:9d:d4:b6:7c:cd:da:e7:9c:0c:a8:b4:f1:93:
                    e5:ca:30:05:8d:cb:27:5e:26:4f:a3:5e:63:c9:5f:
                    44:c0:87:d6:d6:df:83:60:5a:07:8a:14:15:ed:52:
                    bd:87:17:5e:8e:45:8b:e8:a5:7f:c1:7a:84:d0:08:
                    1e:22:9f:5f:71:12:e3:c1:d7:4e:f5:d5:13:a2:88:
                    ca:ab:a6:96:5c:80:df:74:f0:19:d3:af:ce:b3:d3:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:44:89:53:91:53:21:03:27:A5:29:B3:D1:EF:7B:65:2C:A7:98:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:26:d5:11:7c:0b:90:56:99:bd:0f:1e:27:23:49:ed:d9:
         b1:cf:72:ed:1d:3d:52:da:a5:aa:5d:c7:82:ba:cf:c6:68:6b:
         d6:f8:81:6b:57:23:5a:0b:40:7e:bb:aa:ad:66:70:51:9c:0d:
         08:21:b0:06:c6:e0:d5:3f:d7:cd:d6:06:34:b6:e0:01:d5:34:
         ed:e4:51:6d:67:16:ba:47:af:a6:e2:59:f6:e7:2a:be:46:3c:
         78:26:50:46:9f:73:41:72:0a:e2:94:33:d0:87:c7:41:c8:14:
         b3:0a:4c:15:a0:8d:40:84:7d:aa:62:c8:4d:0c:17:bf:ac:24:
         9c:bc:d7:55:0f:1a:25:1e:98:52:8f:f2:43:6c:b8:3c:7c:b2:
         22:96:ad:b1:39:57:48:a4:ab:20:ef:6d:41:af:af:f1:a0:fb:
         77:4e:73:a6:19:0c:5c:9e:40:29:c6:59:7c:99:08:06:18:d9:
         d3:a9:c7:77:da:00:90:55:cf:87:47:f3:9f:21:35:18:90:32:
         bd:12:fa:20:fc:b0:a9:02:b7:94:b5:39:75:27:a1:c2:b2:29:
         2b:83:6f:6e:42:e2:87:c3:55:f3:ae:bf:b7:50:9e:35:e4:9a:
         f3:78:d6:24:10:5e:09:0c:b1:19:85:0e:ec:a3:85:dd:5c:4a:
         b5:7a:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:44 2025 by rpki-client