Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa
File:                     720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa (raw, json)
Hash identifier:          mhBUBfjZBZ6Qb4OH7xvoVG+zk9MeJuxxYomRXghkSG4=
Subject key identifier:   97:23:32:E7:CD:87:05:54:1D:B8:F5:55:5F:8B:EB:F9:47:2F:4F:79
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11C3D61473F7AAA3CE0380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        208.181.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:c3:d6:14:73:f7:aa:a3:ce:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=0505b06b-5c1e-4f41-ae7a-168f48b35f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:da:3d:ec:0d:8a:f2:76:79:cb:f4:74:64:
                    c0:7b:40:70:ac:cd:af:70:9e:74:bf:6d:f6:1d:63:
                    32:dd:0b:eb:57:6d:c9:99:d2:f7:e7:26:d3:e9:a1:
                    ef:f4:35:8a:5b:0b:1c:63:a3:6a:24:2c:2c:fc:74:
                    1e:d4:c0:ef:a1:2c:f7:96:f7:6f:95:35:29:36:9c:
                    33:b7:20:dd:f5:c6:2c:e7:cf:d8:5f:11:c0:f0:4a:
                    bb:32:ad:93:cd:b8:df:fd:94:28:21:f6:14:d9:38:
                    7c:99:5a:61:82:ca:d7:6c:85:5e:ee:77:ad:e5:d3:
                    bb:c4:c1:9b:53:14:bd:a1:c9:7f:f8:a5:44:a3:7d:
                    ef:10:55:38:25:7f:7f:66:6d:5b:02:54:d9:c3:84:
                    57:85:f2:30:d6:f5:4b:ef:0a:6d:bc:25:c3:ac:31:
                    a3:15:0c:93:6a:52:1d:eb:ad:26:a0:4b:1d:0a:64:
                    75:10:d6:95:79:ed:b3:84:c7:7b:64:7b:45:f7:5c:
                    cf:df:8b:e5:02:02:5a:50:5a:e0:33:38:b9:6f:9a:
                    2d:8e:63:00:af:3d:ab:76:41:63:c3:36:a6:89:e2:
                    5d:79:79:e7:f1:c0:95:1a:7a:01:4d:22:31:44:f4:
                    8d:d8:7e:18:a9:c9:d6:54:ff:a5:75:51:65:95:4e:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:32:E7:CD:87:05:54:1D:B8:F5:55:5F:8B:EB:F9:47:2F:4F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/720e376b-6ca9-3955-a3c9-7c5e4ff81edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:b6:bc:ad:97:01:d2:08:bc:c3:8c:a4:b6:25:66:70:41:
         fe:05:a0:2d:49:ff:0a:c0:cd:23:58:e6:a7:1e:8e:fe:57:5b:
         fc:9e:91:dd:3b:d7:35:c9:25:b5:c2:7d:f6:50:47:23:04:be:
         78:54:5d:76:7b:4f:65:a1:4b:8b:0a:ca:a1:74:08:aa:76:a8:
         84:ed:2f:1e:88:2b:a3:83:88:8f:58:1b:40:82:3a:45:81:a6:
         db:05:4d:46:9c:46:a9:10:55:42:29:c7:f1:12:59:20:ee:2c:
         ee:db:75:0e:37:2e:07:da:7b:eb:dc:43:39:48:79:00:d3:d9:
         ba:95:c0:50:6d:bf:98:55:02:d1:cc:71:e3:42:3c:8f:98:01:
         f9:dc:90:e3:9c:9f:72:df:fc:25:b6:b4:cf:e4:c3:ff:44:b2:
         1a:1b:45:99:da:c0:47:f8:b7:93:62:06:22:67:da:dc:96:0c:
         e7:ba:7f:84:30:b0:ac:a0:c9:9d:3e:ee:26:33:3b:d3:e0:33:
         c6:9a:a5:90:7e:ad:27:2d:d4:0d:0a:48:37:ef:03:c1:2d:02:
         c3:4c:11:99:d2:05:eb:4b:77:f3:08:94:64:05:01:5b:42:b3:
         57:73:15:92:e7:ab:22:88:0a:7d:0f:14:7b:ee:29:12:88:a1:
         08:4d:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:29 2025 by rpki-client