Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa
File:                     0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa (raw, json)
Hash identifier:          5Q9FivuB8ZA1Spb9QVxMS2Jbji7fm6r/fWOjcLCPz9Q=
Subject key identifier:   02:EB:45:63:35:5F:DB:7A:84:B8:19:3C:A1:B7:14:F0:2F:B0:A1:CF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973BDDD696D17E4C134A5D0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15247
IP address blocks:        207.34.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:bd:dd:69:6d:17:e4:c1:34:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a7ea5a02-ad5a-448c-9e8e-137112d4b578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:8c:fc:f3:70:4e:a5:d3:08:a1:17:9c:9c:
                    a1:b0:2f:4f:2f:43:a5:f7:4f:5d:69:f1:bf:68:ad:
                    37:a1:6f:75:d0:5c:a0:38:cc:9a:e2:4a:0f:1f:da:
                    4c:73:b0:40:d1:39:f9:f9:07:4d:83:bf:19:b2:50:
                    18:0c:21:99:71:3b:c5:7b:27:ba:b4:e0:1e:6c:a0:
                    15:8e:ce:ee:f3:a0:6f:11:f8:6e:96:3f:dd:b9:46:
                    db:d0:16:4e:88:a3:9f:bd:7e:0d:38:e2:f1:ab:6b:
                    e0:44:9d:a9:24:b7:e5:55:f6:88:31:c6:d1:03:83:
                    38:dd:ff:50:6a:4f:d1:20:3f:f8:da:1d:3b:39:51:
                    03:e7:97:84:f2:6c:0d:0e:8f:48:f4:f5:80:87:40:
                    14:38:5e:a6:cb:16:85:e2:df:bd:66:45:6a:68:8e:
                    e1:a4:f1:63:34:a1:7d:43:cb:85:73:74:54:2f:78:
                    2c:e3:52:e8:20:6f:22:13:a1:f9:53:e3:b4:c2:07:
                    86:4f:16:0b:4e:5c:6d:e0:ad:b4:1c:25:8c:f1:67:
                    2e:04:65:65:45:0e:b3:fc:9d:7f:88:92:3d:b3:e5:
                    ea:58:74:dd:59:9f:d2:4f:0c:5a:27:37:2f:da:20:
                    8e:62:5b:f1:b4:ec:6d:ae:09:9d:c2:95:b9:af:e1:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:45:63:35:5F:DB:7A:84:B8:19:3C:A1:B7:14:F0:2F:B0:A1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0b33ef16-bde7-36e8-a403-9bfe4a282c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:82:5d:1f:ae:71:54:4a:33:a7:e4:15:8c:1f:09:2d:f1:09:
         79:31:57:a7:21:c5:ff:ec:5b:70:7e:39:c4:86:ab:b7:03:2d:
         0d:af:1a:d9:1b:e2:27:6e:c4:e3:f0:29:94:5d:b1:3a:00:47:
         7a:19:ba:0d:21:2d:b9:a2:e8:49:ca:d2:59:ae:a2:27:bf:97:
         63:e9:8a:d0:5a:33:ac:1f:b3:34:99:56:6c:01:5c:81:f4:94:
         55:ed:98:11:f0:a4:57:8b:31:6c:0a:86:e3:ec:c9:fe:f7:5e:
         fc:00:d8:99:63:9b:8c:c3:21:7c:bc:b7:7d:31:ad:c3:e6:fb:
         d8:77:36:bc:82:64:e4:cf:9e:09:e4:3f:da:13:7c:fe:1b:29:
         a5:ec:31:fb:fd:ec:f1:ae:32:22:0e:e2:84:df:fc:3d:1c:91:
         9c:96:96:21:19:a8:f7:ff:cc:5a:67:c5:9d:c8:c4:73:5d:8f:
         71:fe:fd:78:f9:c6:35:1a:bf:d3:e7:46:85:59:b6:bf:fc:7c:
         53:bc:85:8f:24:d3:fe:2d:98:d7:eb:74:83:8c:6d:19:b3:b9:
         22:23:00:17:6c:0e:bd:54:93:85:cc:7c:98:b9:00:94:2e:d8:
         bc:68:2c:2f:98:8e:db:55:70:ca:95:16:16:6e:da:5f:25:b2:
         ef:49:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:52:50 2026 by rpki-client