Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa
File:                     1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa (raw, json)
Hash identifier:          6ZF6c9DsLUSBEHAEb9YLjJZ3HiZ0EMf/h2t7mWRmjJs=
Subject key identifier:   B2:85:49:40:00:4E:05:5E:31:B8:94:84:30:BB:82:9D:84:25:B1:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D0DCA6E4D39CDA04D740
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        199.84.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d0:dc:a6:e4:d3:9c:da:04:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=f76029a1-a6cb-4ba6-a678-5fbf732b4290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:53:73:b9:d0:40:c4:c8:4e:0d:cb:f9:5f:
                    78:6b:fc:9d:eb:5c:95:53:5f:d2:31:19:bc:bb:d0:
                    3a:eb:49:2e:21:d5:d8:d6:67:ca:f5:8b:d1:fd:85:
                    77:43:e9:0c:28:38:06:95:6c:e8:35:eb:87:93:ce:
                    15:9f:d5:29:21:bb:eb:f3:7b:3b:e7:a8:6c:b2:2a:
                    28:2e:ba:c1:19:a4:65:5e:25:24:47:72:7c:33:01:
                    7d:7c:88:22:8d:0c:fb:5b:37:6f:b0:60:ae:a9:a4:
                    b3:71:04:d8:3e:49:59:c5:55:36:45:31:1d:47:4f:
                    60:64:0d:e8:16:48:0c:25:02:0f:3f:1d:8a:26:0c:
                    37:46:02:f2:f1:bd:bb:9e:2c:ff:3d:ee:8a:4a:bc:
                    15:96:94:b0:5e:e8:e8:0e:1d:98:c8:d8:3d:d1:3d:
                    bc:24:a0:f5:db:55:73:84:cf:d9:22:39:57:27:15:
                    e7:19:04:34:2c:18:5f:1a:ee:39:ff:8a:3f:e0:89:
                    1e:dc:5e:9c:9d:c5:64:09:07:c5:31:6c:2f:6a:96:
                    ee:1a:fa:02:76:68:3c:23:88:a7:24:6a:e2:bb:a7:
                    2c:44:ad:fd:65:63:6d:38:aa:c1:c3:cb:b1:9f:fd:
                    68:08:89:fb:14:8b:09:75:a4:59:b2:2e:36:e6:f2:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:49:40:00:4E:05:5E:31:B8:94:84:30:BB:82:9D:84:25:B1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:09:94:21:5c:5d:be:f9:6a:0f:51:93:d9:43:32:1c:06:
         9b:a2:29:d9:ca:bf:b4:29:da:13:94:db:b4:79:f3:92:20:b8:
         4c:e1:f4:31:1e:f6:02:6e:61:b7:ba:27:2c:2d:8d:f5:47:9a:
         80:6c:39:40:be:df:a8:77:b1:d1:30:c4:f5:61:66:81:4b:a2:
         67:78:65:f8:de:52:a5:d3:6e:92:34:76:d2:eb:46:91:db:cb:
         64:25:3c:8b:76:bc:51:a9:43:4f:3c:1d:97:44:ee:bf:4b:c1:
         b8:f0:be:e8:f6:8d:5f:56:f9:96:2d:61:5a:5a:37:9c:3c:b4:
         e4:c8:18:df:2d:bd:da:63:ac:75:a2:6b:0d:19:e0:9e:32:bf:
         6f:0e:aa:ee:1f:6b:59:e1:77:22:b3:af:27:8d:73:60:57:4c:
         bb:b4:46:33:80:ea:ce:f1:5b:65:7f:7f:f4:89:24:75:0e:bc:
         00:4b:ab:05:86:ec:e1:7c:12:b7:65:e9:c2:b4:ee:f3:7c:c3:
         cf:8c:53:84:89:f2:a3:55:29:24:0e:45:d6:35:41:ed:f2:9e:
         4e:ff:0b:49:c8:76:de:ff:0f:bf:9f:9c:7b:fa:9f:10:33:e7:
         03:0c:5e:1f:3b:44:a9:aa:b9:ed:8b:89:fb:39:6d:3c:73:03:
         2a:dd:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:57 2025 by rpki-client