Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa
File:                     dce79b13-419a-36f1-9103-105e2a77b3d8.roa (raw, json)
Hash identifier:          PysqzGBUgscj3KKVmcDdN+hgWmO6rSAqKZYT1j3raAQ=
Subject key identifier:   7C:38:AF:26:2E:58:15:17:8B:C8:7D:D9:4D:32:4A:EB:21:6E:95:FF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F258B6FB07BC38D2A9D4
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        209.29.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f2:58:b6:fb:07:bc:38:d2:a9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=ae9b19b1-39a4-4682-ab69-ee5c0dd77cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:5c:3a:52:e8:25:42:10:65:6c:f9:91:3a:
                    6d:c6:55:4e:1f:15:36:4b:09:00:bd:c2:1d:05:ba:
                    67:46:f2:e5:ec:8d:78:23:91:c0:66:50:26:aa:bf:
                    70:98:2e:17:97:51:9b:5b:a4:e2:2e:c9:38:60:5b:
                    b2:c9:da:94:05:28:e4:fa:c5:e6:18:c7:fd:f4:44:
                    67:c1:42:b6:9b:ae:a3:67:05:09:0c:32:17:a3:01:
                    7c:e7:f7:ed:65:55:77:23:4b:8d:78:b0:d9:45:ba:
                    fb:c4:d2:b7:96:11:60:11:14:8f:6e:d0:af:a5:5f:
                    ef:4a:3d:ec:71:db:0d:25:f4:84:2b:ba:1c:51:24:
                    e8:d8:cf:98:ec:83:86:69:2d:36:ed:6f:3d:b8:e4:
                    f0:43:90:c9:60:87:e0:14:ab:7c:b6:ca:0a:bf:72:
                    ef:af:79:fc:15:59:53:b4:14:0a:9c:ce:5c:b1:60:
                    a7:a4:88:87:5b:24:bb:1d:3d:dc:ba:98:e4:5b:36:
                    2a:3b:94:d3:06:06:26:d2:d8:7c:bd:fb:2a:b8:e1:
                    9a:ca:25:7c:f9:f8:d1:44:9b:11:ab:d8:92:56:18:
                    e5:61:63:92:c4:8c:55:32:57:7b:57:8f:61:e1:23:
                    5f:29:74:14:f2:70:a1:b7:e4:7b:a2:c2:20:e8:b1:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:38:AF:26:2E:58:15:17:8B:C8:7D:D9:4D:32:4A:EB:21:6E:95:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dce79b13-419a-36f1-9103-105e2a77b3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:0a:87:ef:05:6d:43:39:4c:55:fc:f3:4a:c1:b6:13:84:
         68:31:5f:7b:0c:9c:80:d7:4b:fe:0f:0e:72:37:da:8d:93:9d:
         80:07:a1:8c:e4:a5:03:ed:e6:dd:4a:95:7a:c9:90:8e:27:9c:
         4c:bb:bf:77:c7:94:98:8e:08:d8:32:78:08:ac:91:9c:44:c6:
         a6:73:75:03:8b:44:c5:35:4d:94:cc:3e:2e:91:d0:1c:4e:8f:
         f6:e7:72:7f:76:31:a5:73:a3:fc:45:7e:24:39:75:87:c5:8c:
         a3:20:da:52:b9:c0:05:02:28:05:f1:03:2c:fd:7a:af:3f:d6:
         b6:a1:34:10:63:f3:c0:f7:e7:b8:7d:58:7e:22:13:a3:d0:e8:
         b5:a7:05:9a:f4:ae:c7:a3:96:08:6c:86:80:68:23:47:3f:07:
         dc:9f:2f:d0:47:ce:5f:e9:36:49:da:c8:d7:b2:89:79:37:db:
         5f:86:82:37:c2:b1:c2:2d:08:04:5a:bd:90:65:90:57:d4:94:
         bc:39:d7:8e:8b:41:fb:52:50:68:d0:1d:5d:37:c3:47:42:3e:
         77:93:93:e7:41:fd:be:1e:73:5d:f9:19:69:56:9a:ee:b3:cb:
         4d:7a:82:1f:70:22:58:44:32:67:38:87:86:8d:ef:9b:e6:0e:
         9b:2b:98:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:28:45 2025 by rpki-client