Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fedaab-98cc-36fa-ac3d-b277274f7e1c.roa
File:                     f9fedaab-98cc-36fa-ac3d-b277274f7e1c.roa (raw, json)
Hash identifier:          3uJPqycYp72LW1G/VjWlJXGsatMZeuEvYDi7ArGfIEY=
Subject key identifier:   4D:85:41:3F:F3:AF:FC:A6:31:49:82:EC:9D:23:49:55:F6:22:79:85
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF6409C1B1327B282A1B47780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fedaab-98cc-36fa-ac3d-b277274f7e1c.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        209.53.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:9c:1b:13:27:b2:82:a1:b4:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=be3338a7-1835-4a73-984a-57a1d2b97d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:98:29:f4:e3:e1:9e:ee:99:f7:10:fa:7d:
                    49:ff:8b:a2:9e:52:73:b5:aa:11:4a:2c:94:01:48:
                    db:5c:97:9e:ce:1a:29:52:0a:55:f4:6d:02:cc:0c:
                    e6:6e:b1:59:ca:e4:75:a1:2e:68:25:b7:57:16:07:
                    79:3b:3a:01:96:3e:72:10:bc:ca:81:29:47:f3:ed:
                    cd:f5:d8:09:ab:0e:58:75:70:46:10:0f:02:db:91:
                    d2:92:d9:fd:b6:d5:72:67:0c:65:e3:22:40:3e:de:
                    ea:58:44:13:51:2e:f2:fd:08:88:86:6f:c0:30:b8:
                    06:71:cd:c1:2e:80:4f:0a:08:e9:b4:0f:1a:31:ed:
                    58:30:61:06:d9:68:22:7e:e8:59:47:25:b1:64:f6:
                    f9:0d:87:2a:e4:43:17:3a:49:c9:3a:4a:14:32:fe:
                    69:53:4b:85:7c:8e:34:c3:ce:0b:e6:9e:d6:99:93:
                    6f:40:c4:fa:de:91:25:4f:b8:ab:78:d2:72:ec:24:
                    27:47:51:9d:d3:f5:ff:62:76:52:d6:c8:9c:d0:94:
                    d3:a8:40:12:92:20:bc:52:66:42:0f:e7:8c:8b:6a:
                    c9:ae:bb:6c:ed:5b:16:58:47:81:5f:03:a2:53:79:
                    b7:42:78:67:ab:86:c9:f5:bf:74:df:af:87:bc:13:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:85:41:3F:F3:AF:FC:A6:31:49:82:EC:9D:23:49:55:F6:22:79:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fedaab-98cc-36fa-ac3d-b277274f7e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:8c:0b:47:86:b0:3c:f2:68:a6:f5:c1:bd:49:b1:3c:b2:b8:
         71:95:fa:3f:8f:11:10:d9:22:ba:d0:4d:bc:6d:b1:ce:95:53:
         e7:0c:91:fd:36:59:76:69:b2:58:a3:09:ce:b2:c3:3c:b1:c0:
         d8:1e:9c:29:5e:60:32:d9:c3:3b:89:05:01:67:66:15:c0:61:
         e3:03:15:5b:e5:6d:f8:5b:fa:dd:59:44:60:ea:9d:c2:d9:39:
         42:d1:75:e4:ae:fe:b0:4e:b9:25:c9:0d:29:57:6f:97:5a:71:
         66:d6:48:33:bc:cf:9b:31:4b:44:56:01:01:2e:f8:86:0c:5b:
         9e:61:fa:75:9c:78:6e:cb:3e:69:79:bb:fb:67:e3:dc:21:c3:
         cc:8c:9b:7c:8e:b3:83:0f:1d:20:ef:c0:9f:06:9e:87:96:ed:
         d3:e8:d0:7c:2d:8f:17:8d:e6:8b:fe:4c:99:e9:59:0f:25:34:
         21:da:9e:ce:d0:cd:c0:f3:1d:6c:1b:cf:e8:e3:b8:bf:79:a2:
         4d:26:44:6e:d3:1a:56:50:ab:76:e0:2b:72:03:4f:b4:36:45:
         37:c6:69:5c:d9:22:5d:26:98:d2:cc:b1:85:0e:13:27:b3:d3:
         65:25:15:26:84:25:b8:d3:32:a7:ee:96:e5:b7:66:74:4d:fd:
         ce:ff:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:50:59 2026 by rpki-client