Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa
File:                     e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa (raw, json)
Hash identifier:          LYTDALj3YezJ0/lIeelKHIIzR+2d6A/iYuQ56xtfpIA=
Subject key identifier:   C8:79:A4:C3:09:3F:BB:77:2D:A0:63:95:69:30:54:4F:14:37:CF:0B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3985DFC60E5D7028D480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        209.52.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:39:85:df:c6:0e:5d:70:28:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=3e09674b-1482-48bd-9680-f3431b5621c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:e1:53:b8:bd:ab:8d:ef:68:5b:83:5f:2b:
                    db:c6:b1:3d:65:ad:ce:67:13:ae:3e:c8:20:49:01:
                    de:d3:26:ad:a2:0d:3d:83:56:24:bc:0a:e1:96:26:
                    ff:08:df:e7:ed:50:28:3b:b3:68:82:ea:2c:6b:ef:
                    c1:b8:88:76:bc:65:2f:67:93:81:7d:7f:34:05:71:
                    c0:80:cd:5c:a5:43:f0:91:94:29:b9:66:3d:8f:cf:
                    27:e0:b7:f3:7c:a0:7b:b0:8e:f1:7d:1f:8d:06:15:
                    81:c7:53:70:0f:81:90:0f:18:20:c3:22:e4:8e:6b:
                    77:dd:47:a0:ae:92:63:ce:b6:10:d2:10:55:bf:d1:
                    2d:15:da:e3:f3:5f:3b:1b:f4:20:77:60:76:cb:ee:
                    a8:20:20:da:4d:47:a6:1a:9b:87:56:4c:8f:01:88:
                    ed:c4:b9:41:63:43:4f:fb:4b:e5:78:ce:ac:09:76:
                    3a:7b:01:b2:e9:d9:72:93:ef:a3:7e:b5:1e:f8:38:
                    03:d8:6d:ca:41:e7:2c:2e:54:c8:c2:c7:ac:40:1c:
                    c7:11:50:f7:81:a2:c1:2d:db:3a:28:aa:a4:97:28:
                    fd:27:da:95:36:bc:64:ab:1d:88:e6:ef:d3:78:7f:
                    97:50:0f:8b:9d:22:99:de:6b:9f:aa:fe:6c:7e:28:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:79:A4:C3:09:3F:BB:77:2D:A0:63:95:69:30:54:4F:14:37:CF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0cc4af5-f6e7-34e2-b340-f72c79b412b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:e2:27:db:09:9b:b9:ca:54:3a:4c:0a:fe:c4:e1:89:7e:3e:
         d5:52:80:cb:ef:29:a9:be:f2:3f:95:a1:e0:68:5c:f6:31:a5:
         f2:a0:87:5f:e4:f5:95:a0:23:94:31:bf:bb:56:96:9c:09:38:
         bf:78:fa:f9:93:ec:cc:68:df:e4:bb:8c:cb:47:d2:b6:a7:3f:
         3b:09:f8:27:49:bb:43:f4:ce:7e:43:63:8e:15:ee:fa:ca:45:
         d1:07:e9:0b:8f:73:81:b3:22:9e:a3:91:72:60:83:ca:81:ae:
         60:47:9c:fe:38:16:2e:29:d2:7f:d3:2f:99:ec:2a:4d:14:48:
         dc:d0:bf:35:33:f5:2c:6f:0b:ca:5e:06:8b:3c:14:f1:cd:e7:
         bc:55:ad:8d:68:10:b2:30:a3:4b:26:c4:33:94:83:64:e0:a8:
         d7:60:7b:10:db:59:22:58:cd:67:f3:1b:22:29:67:55:64:4f:
         02:35:df:8b:db:66:c4:a5:10:49:9c:49:e2:dd:45:20:06:91:
         d8:04:b6:26:2f:1e:3c:61:dc:f2:c7:26:4d:41:16:01:1d:e5:
         eb:f8:ad:72:a5:0c:31:43:20:1a:97:20:09:1f:3c:cf:f7:b9:
         50:77:e7:04:31:bd:bf:56:c1:ff:bf:cc:0a:4f:75:3c:40:c4:
         bd:31:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:09 2025 by rpki-client