Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6346f9a2-78e6-37e1-8b67-e6f405cd46e9.roa
File:                     6346f9a2-78e6-37e1-8b67-e6f405cd46e9.roa (raw, json)
Hash identifier:          NBt8dyq9cxL86vjYlskAOsAXBE4lTnyqt3DbnIg3OII=
Subject key identifier:   72:47:E4:59:D8:00:6A:FA:F0:06:5B:14:D9:DB:D1:38:C6:3A:68:DB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B10B899FE87A9E47CD047B780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6346f9a2-78e6-37e1-8b67-e6f405cd46e9.roa
Signing time:             Tue 02 Sep 2025 22:12:35 +0000
ROA not before:           Tue 02 Sep 2025 22:12:35 +0000
ROA not after:            Mon 01 Dec 2025 23:12:35 +0000
asID:                     852
IP address blocks:        65.7.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:b8:99:fe:87:a9:e4:7c:d0:47:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep  2 22:12:35 2025 GMT
            Not After : Dec  1 23:12:35 2025 GMT
        Subject: CN=18a364b6-389a-4685-b506-a1e535a26aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:eb:0b:81:11:e0:43:c1:e8:ad:26:45:cb:
                    42:27:b3:fd:71:f9:d1:a0:d2:f2:1a:21:a5:b4:5e:
                    02:e7:38:98:6a:fe:f0:60:6e:ca:ef:a0:21:6a:90:
                    c2:3e:bf:23:4d:a0:a8:b6:ae:1b:24:14:f7:53:01:
                    b4:e6:c6:9a:6f:38:83:b2:cb:a0:d8:5f:a3:85:03:
                    7c:4b:fb:cb:eb:39:7d:11:17:8d:17:ba:3d:04:22:
                    a8:c6:e2:15:e7:44:78:24:ce:92:9f:4d:70:b2:65:
                    2f:91:60:1a:3a:b9:37:64:24:d3:18:39:f5:83:56:
                    36:4e:3f:51:d3:3f:1a:6f:ff:b6:cf:27:02:77:ec:
                    62:30:cb:2a:06:24:e8:bc:67:3d:d2:34:3c:c4:59:
                    ee:be:19:0f:b2:ec:7b:03:16:a3:4f:65:1c:4d:10:
                    9c:2d:3c:d9:d4:20:81:63:11:51:f8:38:40:fe:df:
                    05:bb:f8:e1:48:18:32:d0:73:f1:a7:1a:88:4b:a2:
                    01:39:dc:c5:c2:54:b0:ab:46:48:61:56:19:63:b6:
                    6d:a4:6d:e3:cb:b2:90:6f:cb:3c:65:36:e3:af:b7:
                    f0:43:5b:b7:1d:50:a7:b9:70:b8:b1:f8:1c:e7:b6:
                    8b:82:1a:41:3a:37:65:e6:66:f5:4f:d1:95:dd:b4:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:E4:59:D8:00:6A:FA:F0:06:5B:14:D9:DB:D1:38:C6:3A:68:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6346f9a2-78e6-37e1-8b67-e6f405cd46e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.7.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c3:f5:3d:44:36:ea:69:33:1b:3e:44:0e:5e:c0:44:0b:be:
         00:09:00:5f:ad:9a:82:f1:51:f1:b9:26:72:f0:b2:18:ca:e4:
         51:03:8b:28:73:cf:2e:49:e0:a4:4c:81:c7:53:2f:4c:58:ac:
         2e:d3:c3:bf:7c:55:2e:2b:d1:2a:3e:dd:9d:ca:bf:bb:c7:eb:
         e9:60:c9:54:35:03:24:3c:34:c6:8c:f1:57:df:6c:bc:5f:ca:
         7f:2a:79:6b:80:c7:93:73:ef:ca:de:ef:a3:48:7d:28:26:2f:
         15:c6:18:4e:14:14:4a:dc:3e:43:b3:a9:f6:7b:01:3d:53:7c:
         d1:87:54:5f:d0:f1:3e:51:ec:31:42:66:38:8c:4a:67:46:cd:
         96:50:94:c1:63:cb:5a:a6:c1:7a:79:43:ca:04:d6:6f:a4:c0:
         a1:02:01:ff:37:c2:0f:d0:3a:f4:89:af:60:4b:4e:b0:63:3a:
         ed:57:ff:24:e7:79:cd:5d:fc:55:66:94:89:0d:7c:58:62:2f:
         bb:20:91:03:c8:f8:6c:97:22:d4:b4:8c:d2:8d:a4:80:72:f7:
         5e:1a:cc:ed:63:0a:81:e6:96:c5:34:21:0f:63:95:4f:41:76:
         24:24:b2:5b:e4:72:1b:8e:61:56:ab:47:3d:1c:aa:e1:c5:70:
         29:6b:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:26:23 2025 by rpki-client