Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
File:                     7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json)
Hash identifier:          aDOlIHplqJe234IjJD9oaEX0I0AVnDnHsjnmg1nkDb8=
Subject key identifier:   0E:69:6D:46:22:7F:FE:DF:8C:52:5D:91:0A:12:96:84:49:A3:60:62
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D0D424BA870AC85989717F5A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     25668
IP address blocks:        209.53.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:4b:a8:70:ac:85:98:97:17:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=33b0a9e7-4f5c-488c-a358-4fee83dd8bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:f7:ea:e5:9b:ef:a7:c5:2d:a6:16:27:d2:
                    7c:2b:8e:9e:be:3a:b2:5f:c1:97:7b:2f:78:67:08:
                    d7:b1:d5:86:0f:c0:eb:94:ba:39:04:5b:03:74:af:
                    18:03:19:da:d2:14:26:61:84:77:22:df:7e:fa:8c:
                    f8:10:e1:18:67:a0:92:12:85:66:83:ec:06:a0:65:
                    c4:b4:19:e3:27:05:d7:25:db:fc:50:83:e7:de:dc:
                    57:00:c6:82:77:13:54:04:39:31:1a:e8:53:47:49:
                    8b:96:5f:ff:f2:88:6b:ed:29:5a:29:c0:f9:80:93:
                    42:d1:bd:23:e9:ec:84:25:78:b2:66:80:64:55:3d:
                    d8:3a:a6:ac:c1:22:aa:5b:56:54:d5:78:d0:04:e8:
                    40:07:a3:2e:98:c0:b2:2f:79:f6:4b:42:d9:f2:43:
                    8c:06:e3:b1:92:1e:82:4a:ad:c1:f7:a6:5e:78:cf:
                    27:46:9d:15:51:8b:f3:ab:9d:b2:aa:81:54:48:b4:
                    62:0b:31:1d:a8:d4:9d:da:6a:71:c4:ef:48:70:ab:
                    37:e1:3f:fb:12:4f:14:89:5b:14:d8:2b:7e:49:24:
                    bd:64:1f:ca:8a:1e:a0:93:cc:8b:ab:97:5a:44:7e:
                    6e:b3:16:44:a0:1d:03:61:0d:8b:bd:7e:11:32:d7:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:6D:46:22:7F:FE:DF:8C:52:5D:91:0A:12:96:84:49:A3:60:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fe:6c:7c:0c:d2:4a:1f:b5:c7:44:e0:76:38:6b:fe:3e:f3:
         46:53:3e:23:91:2f:a5:fc:35:47:80:e4:63:80:96:c4:4c:4d:
         4b:04:a2:84:88:36:cf:69:f3:c3:89:94:f2:37:85:eb:94:3f:
         d9:62:fe:b5:52:3a:5f:1d:2d:fd:e9:12:cb:b6:8f:62:53:17:
         e9:3b:80:d2:ba:3a:93:b4:f0:2a:d3:9f:3f:f5:65:4b:ee:6b:
         d9:5e:1d:1c:79:22:2a:ac:fb:1b:18:dc:a9:ca:7d:53:1d:ba:
         ba:89:92:c0:65:8c:98:07:59:09:d5:d2:a7:4e:84:d0:c9:a1:
         50:b6:1f:9f:de:e0:40:fe:00:62:68:4e:a1:c6:40:33:d2:5f:
         0d:e1:51:2a:89:62:53:d6:a1:b7:a8:2a:91:ba:de:cc:da:2b:
         01:ee:b8:07:1a:f4:5b:01:b5:0a:c5:70:39:b4:2c:86:80:cf:
         6e:d9:52:db:71:30:a7:69:da:c0:d1:11:1a:b1:47:20:a3:78:
         d3:84:09:73:c9:fd:49:c9:8c:e7:4d:5f:44:06:78:1d:c5:a8:
         16:a3:95:ef:da:d9:da:99:39:6f:d6:53:b3:8c:a9:47:f5:11:
         5d:82:03:35:d1:5b:6f:41:16:b0:58:8e:bf:d8:a6:26:f6:a3:
         a9:65:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:10 2026 by rpki-client