Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa
File:                     0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa (raw, json)
Hash identifier:          2Qm7rDJ0eCj7IUIA7ZQTNEkGyj1MG+Iv7Ob00FWdURQ=
Subject key identifier:   9A:8C:63:84:08:9F:C9:EF:E8:B9:FB:B0:E8:EC:57:EF:71:55:36:5D
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F4328584D9A2019F24061FD3A52323400
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     11904
IP address blocks:        209.25.240.0/20 maxlen: 20
                          209.25.240.0/21 maxlen: 21
                          209.25.240.0/22 maxlen: 22
                          209.25.244.0/22 maxlen: 22
                          209.25.248.0/21 maxlen: 21
                          209.25.248.0/22 maxlen: 22
                          209.25.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:19:f2:40:61:fd:3a:52:32:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=65370c7a-d6d6-4401-abb1-6352bb102540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:53:6a:8c:4d:54:79:7d:8e:57:47:a8:85:
                    62:c4:2c:bf:5a:3e:a6:97:13:ab:cc:0d:ba:ce:a4:
                    98:1d:2e:9f:92:47:d4:17:c2:82:13:04:39:e3:00:
                    a7:b3:57:27:78:b0:87:56:3d:41:2c:50:94:53:2f:
                    9c:1a:6a:e5:c4:72:fb:2a:1c:45:2d:9d:af:5c:db:
                    5e:b8:61:f7:eb:8d:4c:ec:1d:e7:94:dc:a0:df:c5:
                    8a:76:0a:7f:70:bc:42:20:1b:5f:b0:f8:aa:46:28:
                    58:54:30:83:5b:ae:45:ce:8e:8b:56:7d:be:fc:07:
                    42:79:41:93:45:b3:e8:05:da:5c:c7:17:37:0d:fc:
                    76:d0:6e:78:79:3d:ca:db:9f:4f:72:8e:bf:86:12:
                    d6:36:c0:a2:28:73:15:ee:03:c9:e7:d3:cc:ff:52:
                    38:3f:b2:8e:f8:cb:ca:da:dd:c0:51:91:f6:55:21:
                    39:63:66:6e:21:93:a1:88:f7:ba:22:7e:ea:ab:a3:
                    ed:3b:b6:2a:8a:21:1f:ed:fa:fa:98:79:1c:ad:39:
                    b4:cb:f1:aa:6c:d8:41:23:5f:04:ed:75:1e:33:a2:
                    69:0d:d3:11:46:74:19:f0:86:d3:11:73:73:8b:4e:
                    7f:50:46:1e:f8:80:d4:20:88:af:95:82:e9:17:13:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:63:84:08:9F:C9:EF:E8:B9:FB:B0:E8:EC:57:EF:71:55:36:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:9e:cf:c5:f1:cf:07:37:db:0c:30:5b:01:23:d5:0a:9f:
         a4:d5:51:ed:a9:44:89:dc:62:bf:71:23:d7:46:48:a9:6f:72:
         c4:e0:c9:d7:f3:4c:9b:88:31:b8:52:7c:ca:e6:48:b0:82:77:
         21:af:12:ba:84:7b:bd:bd:93:8a:a8:da:6f:8d:f3:bd:f9:36:
         62:cd:9a:18:61:62:69:6f:1a:42:7a:b1:30:2f:b1:94:64:17:
         48:02:6b:d6:47:4b:9f:7b:29:00:42:ce:64:09:e3:56:da:96:
         c9:3b:84:c4:74:1f:d6:4a:2a:6a:46:dc:54:04:86:64:e3:d0:
         66:56:0c:d2:b0:d0:64:54:1d:39:2f:a2:1a:ad:e0:60:2f:c8:
         5a:e6:29:c6:33:7f:a6:b6:80:c4:26:8b:36:d8:4c:0c:1a:96:
         88:be:49:4d:7a:26:76:4e:41:db:2d:fd:d6:de:ef:5d:7b:8f:
         81:e7:0f:0a:8e:9c:66:3b:a2:0c:54:43:ed:cc:84:c5:20:be:
         61:c5:1e:f1:f1:a3:09:1f:f2:f5:fd:5d:29:14:58:cb:98:fd:
         5b:62:77:9c:47:2d:cc:72:3b:a6:c5:44:fd:49:fc:3d:b6:86:
         a9:5b:d5:f2:5e:28:be:76:a6:ef:22:40:f0:be:1a:cf:cd:57:
         29:65:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:27:41 2026 by rpki-client