Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa
File:                     d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa (raw, json)
Hash identifier:          59C+sX83RqIBwfotq57MSh0coC3nfX0MiovM54aYurY=
Subject key identifier:   6D:55:DF:9A:94:5D:34:E4:55:8B:FF:B2:AF:56:EC:9A:09:B0:B8:79
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F19F535F05A7B4F10140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        209.121.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f1:9f:53:5f:05:a7:b4:f1:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=f3368cae-83d1-4526-8275-79d4881ef130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:88:54:10:bb:5c:eb:ed:74:d4:38:61:73:
                    50:cc:2c:53:85:1c:ab:49:8a:46:74:98:c0:78:df:
                    de:e3:e7:bf:f1:b0:e8:20:88:66:9e:b0:30:83:3f:
                    67:2e:a8:d0:5d:5f:68:f7:0f:9f:8b:82:81:51:34:
                    46:f2:20:61:82:87:1a:d4:f2:52:3c:34:f1:1a:62:
                    c3:a7:bc:85:e2:4c:88:e0:1b:8b:36:38:4f:15:c0:
                    13:36:14:b5:a7:f9:a8:ef:6d:6c:f4:e8:3d:1d:c6:
                    05:92:5c:48:87:55:f8:f1:60:04:2f:a2:25:e6:b3:
                    3b:b7:1a:0d:ad:e4:8b:d8:74:21:fb:d6:b1:07:02:
                    b6:42:0b:3f:7b:c6:6a:66:aa:c1:6d:a4:61:72:55:
                    ef:52:98:41:3c:a8:fc:e0:b9:b1:d3:cb:7d:6c:eb:
                    a1:45:2d:82:31:7d:32:a7:1d:c0:f3:62:ec:66:96:
                    9e:bd:7b:07:d4:36:2a:91:d6:87:97:2e:6e:e1:60:
                    1f:f2:19:9a:5d:13:2c:df:75:bb:5a:7e:ec:13:a8:
                    f9:87:12:42:4f:39:62:1c:29:83:88:1d:33:a9:fe:
                    3c:90:8b:2a:d5:6c:db:bd:f0:0e:57:d8:08:73:af:
                    1b:56:dc:51:d3:81:43:bb:86:f6:60:d4:70:59:81:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:55:DF:9A:94:5D:34:E4:55:8B:FF:B2:AF:56:EC:9A:09:B0:B8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a06c2b-aa8d-3ebb-b1f4-27213c2b612d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:1f:b1:84:56:da:8a:ea:15:fa:cd:68:c5:15:b9:ff:32:
         3e:44:d6:8e:67:62:29:a1:b5:25:c1:2c:1d:cb:df:3f:f6:04:
         b7:53:88:78:55:42:1e:bc:17:d1:14:d7:81:1f:47:ed:d2:ce:
         43:65:be:c7:05:03:b8:84:2d:87:ef:08:a3:29:02:b9:69:12:
         1f:ef:bb:3f:cb:3a:7d:d1:b5:d2:9e:1b:32:5f:d8:01:de:a5:
         aa:39:de:f0:b2:e4:40:47:c9:b2:1a:f6:f4:8f:f2:9f:eb:5a:
         50:8d:9d:6e:d0:4a:a1:a4:58:18:5c:27:45:6e:77:d7:64:9d:
         81:b1:3a:6f:f5:e3:b2:33:2d:12:e9:e7:e9:25:97:49:4d:00:
         41:3b:fd:c0:fa:4e:31:75:a5:78:e1:86:56:28:83:d9:1b:1a:
         41:04:25:01:b1:67:b8:46:78:76:ee:7b:6b:68:c6:cc:f0:05:
         92:dd:5c:03:64:8f:0d:16:22:f6:8b:f5:05:f3:05:3f:55:fd:
         ba:fd:90:c3:8d:e8:e0:7c:6c:83:dd:95:c9:6f:07:b6:ef:22:
         eb:20:79:f3:82:ee:99:fd:98:34:2e:b9:0d:c0:54:72:07:26:
         0e:f9:41:b7:b5:ea:3f:4d:7b:10:eb:68:59:3a:35:73:e0:d6:
         a7:a0:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:47 2025 by rpki-client