Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
File:                     a01efa5b-614e-3d99-9b01-12a6e3f87492.roa (raw, json)
Hash identifier:          SZ2L3tnBadgvACBaFdOcKJnObnFcvSVDI04oRSRvZDQ=
Subject key identifier:   C6:4C:12:3E:F4:1B:FD:93:96:85:AC:7F:32:65:53:04:72:33:4E:AB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B35F47B72760CBD5D7300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        173.181.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:35:f4:7b:72:76:0c:bd:5d:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7080aaf9-05b5-4aef-a39a-1b09ee87d175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:99:55:e0:c7:95:1b:6b:2a:ff:78:65:15:
                    84:bf:a2:e7:f2:df:e3:bd:b1:cb:c8:5b:2e:eb:20:
                    0f:a1:36:c5:1b:74:9b:13:27:df:f9:75:13:89:cb:
                    48:a8:bf:15:d2:c4:29:0b:e1:b9:f8:47:8d:7b:30:
                    6b:a9:54:a0:31:76:ac:a7:ef:64:d9:06:30:2d:a7:
                    b4:7d:22:92:7e:84:09:b2:be:1a:9b:f4:93:0b:5c:
                    e8:37:f1:a6:c8:a1:ee:fa:8e:d3:52:b7:19:a1:d6:
                    9d:78:7d:c4:3e:9e:e0:ff:99:77:ec:2a:41:9d:c3:
                    06:ee:f9:f5:cc:87:2f:dc:48:6b:ef:e1:c4:a4:e9:
                    a4:2b:e4:5d:6c:bc:00:c5:d1:a8:76:83:33:c2:f4:
                    db:37:4b:db:ad:a2:48:c7:d4:57:71:c5:f0:3f:da:
                    d5:f8:ad:95:20:9c:1b:e9:e6:6f:94:8c:a0:20:bb:
                    97:30:ba:77:dd:d5:1f:41:f2:eb:e4:36:30:2b:5a:
                    40:95:b6:2a:3b:dc:1c:3f:da:d8:1d:69:35:dc:44:
                    b9:2c:aa:67:41:a9:fc:29:38:e2:b8:e3:88:3d:fd:
                    f9:0e:ce:0f:3e:52:04:62:d6:43:e9:22:f1:b8:10:
                    d8:df:b7:dc:37:29:5e:c1:54:75:f0:88:35:74:0d:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4C:12:3E:F4:1B:FD:93:96:85:AC:7F:32:65:53:04:72:33:4E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:01:be:c3:d5:97:72:a5:0e:2e:e3:cc:50:cb:8b:38:d3:9b:
         94:3c:f7:6d:5f:eb:a6:9b:4e:de:86:f1:ca:3c:1b:37:e5:c9:
         97:4e:70:35:aa:69:10:2b:b7:c3:b1:0f:60:06:32:14:db:f0:
         ef:ea:c3:8a:dc:8c:cd:81:6c:2a:51:62:83:ad:24:c1:f2:01:
         87:b7:e3:81:f6:8c:99:b0:59:47:53:4e:2b:91:c4:a1:d3:10:
         e6:9b:30:f7:1d:97:52:8a:0b:6a:0d:46:7f:9f:f9:8c:a8:52:
         16:31:5d:82:6e:b6:01:9c:f1:37:49:b7:5f:f6:dd:bd:10:01:
         00:52:0d:6d:57:69:e6:85:d2:d4:2e:df:0c:f4:40:3a:ed:dd:
         6d:97:76:d2:54:4b:84:7a:77:ed:84:df:59:dc:f6:96:2d:7d:
         f3:e7:48:05:30:62:3b:e0:35:92:5b:25:27:fa:37:00:c3:b1:
         3f:d7:78:91:28:ec:22:15:5f:ce:02:6b:79:39:80:f7:f7:b8:
         7e:97:65:6d:b7:0c:bf:07:62:48:08:e2:c1:74:92:23:0e:ab:
         33:9e:41:82:d3:b0:d5:b2:2d:a3:77:40:bb:87:50:17:58:b3:
         d2:9a:6b:81:09:c2:e2:f7:31:05:cf:e2:94:86:a3:6f:22:23:
         d1:ed:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:08 2025 by rpki-client