Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa
File:                     71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa (raw, json)
Hash identifier:          GqkCzBj3JPLTjFkafZdlPNfibuAuwAILO9o36516Ygk=
Subject key identifier:   FA:A6:C6:9C:81:04:32:B3:B2:10:8C:C1:7F:36:3A:F5:63:72:CF:DF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D75780697315088BDE80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        207.102.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d7:57:80:69:73:15:08:8b:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=94dc2245-2de2-4f38-b993-e556a9c866a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:9b:8a:6b:5e:ef:de:71:87:85:86:d8:1a:
                    d9:99:c4:3b:af:11:a2:a7:de:20:87:00:b6:35:7f:
                    d0:3a:a7:2b:8a:93:9b:e8:1e:c4:47:15:e8:0b:54:
                    e6:e0:81:4f:f1:4d:c9:1f:75:da:10:ed:c4:87:26:
                    de:58:2e:21:68:c1:36:59:e7:d6:95:15:9e:85:04:
                    ce:d9:56:16:4f:f9:64:a7:cf:e2:9b:75:14:c6:13:
                    89:c6:ab:15:04:29:f7:bf:d9:9f:01:c5:4a:90:b1:
                    2a:a4:6b:51:55:b9:40:40:d2:ce:06:c8:47:8f:0a:
                    44:cf:53:b2:91:0c:9c:84:43:36:0f:73:16:be:ce:
                    6c:85:41:75:69:2b:5e:ad:12:65:52:d1:03:2e:0e:
                    72:33:0f:f2:e5:b9:d1:f2:75:39:7f:2d:b0:62:d4:
                    fc:af:04:7c:33:2f:14:37:25:b5:ef:e0:c5:8d:1b:
                    7b:ef:5f:9d:82:85:61:8d:d1:bb:97:fc:e4:69:d7:
                    ac:60:1a:66:86:59:1a:62:a2:3a:db:e2:cf:65:cd:
                    81:d0:d1:7a:52:7a:05:08:46:63:99:e3:e8:99:bb:
                    8e:1e:76:1e:e8:6d:70:ce:57:db:17:ae:df:26:52:
                    a0:f1:c1:3a:4a:0e:77:ad:0f:a1:80:84:34:71:83:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:C6:9C:81:04:32:B3:B2:10:8C:C1:7F:36:3A:F5:63:72:CF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:09:d5:13:c2:d5:f0:88:67:c4:1b:24:07:4e:c9:e1:83:
         e4:1c:4b:df:f7:56:5a:3a:05:31:6e:ea:c4:2c:8f:79:06:4b:
         94:d0:a9:f7:93:7b:b1:61:bf:e6:b3:27:4b:64:d7:ae:b1:67:
         1e:cb:aa:3f:f3:28:ee:12:79:e9:67:5e:d7:f8:a4:d8:00:32:
         ba:8d:5f:4f:95:35:ea:bd:57:61:5f:74:5a:f4:c8:42:94:ce:
         c0:f6:af:d8:67:f4:16:6b:31:1e:90:b8:0c:6d:48:90:12:8e:
         fb:79:27:a5:5c:dc:27:7d:e5:11:63:38:91:c1:a7:37:60:e3:
         8f:b6:46:c9:31:8e:07:34:0c:ed:4b:b4:b4:b4:79:4b:4d:20:
         63:7a:31:80:52:82:f8:21:a1:14:c0:71:5e:e7:78:49:34:ad:
         3f:ec:0e:87:a3:f0:6c:87:c6:9a:dd:e8:e3:53:d0:14:a9:a2:
         3e:32:2c:34:a1:a3:50:91:fb:4f:18:98:19:83:d1:f4:6f:24:
         9b:38:f8:74:5d:7c:59:4f:7a:39:23:bf:10:f1:78:dd:1e:de:
         c4:3e:58:70:08:b1:e2:bb:3e:50:35:95:d3:dd:fd:fd:91:a7:
         3c:09:ca:1a:1d:0a:87:b5:dd:1d:bc:12:6f:aa:a8:51:c1:8e:
         62:6c:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:36:53 2025 by rpki-client