Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
File:                     c50bf71f-42f4-380a-89be-7d4e918b0444.roa (raw, json)
Hash identifier:          7hPqg9T9rWai11Cnj+oN6JAga8F6ExpFnVgK1Wby2R8=
Subject key identifier:   E4:7F:0C:C2:5F:E7:FB:AD:90:B0:CB:3F:6A:FB:CA:1E:98:B5:5E:F9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D190DCAF4C6FE10119C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        209.53.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d1:90:dc:af:4c:6f:e1:01:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=14cd80c9-d808-45db-943b-9035f44b7326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:62:8d:b1:1e:2a:85:3c:cb:9d:45:3c:a5:
                    f3:59:b0:e7:a8:da:92:12:03:7d:f6:d5:e2:6e:5b:
                    15:49:50:4c:83:70:24:14:91:87:7b:31:03:35:e8:
                    83:c3:b7:36:2b:82:c4:0e:bb:b4:4d:43:30:34:9b:
                    bc:33:6e:f1:89:ac:24:c6:1f:45:2a:07:f8:fa:a3:
                    66:cf:1a:27:3c:f4:2b:54:25:2c:8c:4d:8e:42:aa:
                    15:53:a0:74:58:cd:02:ce:bb:b5:38:21:de:45:d0:
                    8d:6a:95:88:d8:25:e7:32:16:59:10:ab:63:fb:62:
                    ca:21:c1:d8:c3:c1:92:da:a1:f9:1d:c7:ac:79:74:
                    f0:d5:60:08:8b:a4:fe:58:12:68:b8:05:20:df:36:
                    c5:95:03:1c:57:3b:81:f1:a5:58:42:3a:7b:61:96:
                    21:d5:01:39:97:6d:11:53:75:73:92:a0:39:ef:c4:
                    b7:46:21:4e:7d:37:fd:74:62:9d:f3:9f:33:9d:09:
                    40:9d:ec:b2:cc:2d:14:64:bd:2e:02:32:55:63:b3:
                    33:0d:a8:f2:0d:5d:fb:d3:4d:7c:5b:c7:a9:da:cf:
                    7a:8e:5e:d5:25:ca:02:75:d3:89:51:76:a6:48:9d:
                    86:d6:cd:be:91:8f:f3:23:f1:2a:bf:8b:2f:35:8c:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7F:0C:C2:5F:E7:FB:AD:90:B0:CB:3F:6A:FB:CA:1E:98:B5:5E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:e6:ac:0b:db:9d:0c:86:aa:f4:63:c8:50:b7:a9:98:e9:c0:
         a9:53:19:c8:b7:b6:43:a8:ad:34:29:ac:f2:17:e4:f0:3e:5a:
         a9:d8:54:ed:3c:a9:17:92:2f:80:3c:3b:f6:76:0c:0f:bc:f0:
         41:5e:3a:2c:32:54:2e:11:f5:7e:db:d9:5b:16:92:7f:e7:a8:
         eb:5a:4a:b5:70:1e:ef:04:13:d4:d2:31:b6:e4:32:51:2f:59:
         48:2a:94:91:d1:ee:99:37:c5:a6:c1:97:8a:f6:03:09:fb:9c:
         69:bf:3a:b1:63:d9:d5:14:34:26:ce:36:62:f5:c3:0d:14:99:
         11:2d:4c:a4:a4:3a:0d:e1:ab:2e:b8:6b:51:a7:48:c1:5c:f2:
         a1:91:7e:9b:5e:28:75:34:c8:81:cb:7e:e0:3f:0e:32:3e:aa:
         34:06:60:f5:77:5b:93:43:2b:66:0f:6b:1f:d2:26:e4:e7:8a:
         1f:ef:0f:27:5d:f0:41:5b:f8:2e:3c:80:20:7f:ae:6f:e8:97:
         f5:22:7a:a0:b1:af:de:84:09:6d:be:a7:a7:26:c9:92:b7:50:
         76:45:3a:fd:66:9e:04:d5:e3:91:86:97:79:ca:17:24:1e:a4:
         05:fa:b4:f8:8d:6f:50:f0:f7:74:8c:72:01:44:19:a4:41:c1:
         e0:49:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:00 2025 by rpki-client