Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
File:                     7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json)
Hash identifier:          sXVIxOTRlueQ+g1sLTr45CQOOQ9CTUG0koje2RXhIqA=
Subject key identifier:   3D:45:AD:44:3A:91:94:72:31:F0:B8:4D:FD:AB:08:32:68:13:98:EE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11C21E69A1FCB1196E7AC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     25668
IP address blocks:        209.53.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:c2:1e:69:a1:fc:b1:19:6e:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=832c02f8-9554-449c-9b67-ffe878b078ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:c3:9c:2f:a2:54:ee:d9:74:b1:76:b3:16:
                    43:bd:2d:6a:36:34:a1:e1:e8:89:72:8a:bf:c6:82:
                    89:2d:10:d0:89:11:59:03:bd:5e:e6:7a:e8:03:da:
                    b6:56:87:5e:ae:3d:53:d3:bc:19:c4:0d:a7:4c:11:
                    6e:be:ba:a8:eb:d7:0f:fe:ec:d8:55:f1:1f:da:56:
                    d2:e0:44:b9:8a:81:97:d2:db:ee:cc:66:c8:9f:67:
                    56:b4:de:04:90:18:76:5e:d2:87:3a:16:30:59:ac:
                    de:00:4c:fe:9e:3e:e2:16:77:46:e7:25:7c:ce:fa:
                    75:67:fd:aa:e7:8e:b5:54:c9:14:fe:4e:a8:7c:9f:
                    e9:6a:69:83:2c:6d:85:eb:ff:46:d9:cd:5d:0f:ad:
                    2a:03:20:b5:b9:af:cf:c6:7f:b5:06:cc:0f:49:34:
                    87:2e:1c:ed:32:99:89:a7:83:de:9f:64:ba:e4:78:
                    74:9e:9a:ec:31:f4:84:68:de:cf:80:6f:7a:58:36:
                    4a:b4:75:5b:4f:dc:5b:5f:00:c6:a0:36:5f:6f:68:
                    e6:e2:75:aa:92:2f:fd:fd:b7:24:79:8f:87:2a:df:
                    51:7b:8e:36:1c:69:a3:b0:71:fa:55:22:9b:61:ec:
                    1c:8c:fe:e4:70:5f:1d:73:24:fb:3f:08:ae:14:09:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:AD:44:3A:91:94:72:31:F0:B8:4D:FD:AB:08:32:68:13:98:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:da:f4:1c:24:f5:14:dc:e2:84:40:94:e6:b7:af:3f:b3:
         ab:74:d9:31:35:14:3f:b5:49:ed:f8:20:53:4b:21:dc:a6:e4:
         2b:c1:46:c2:30:85:b3:62:b3:ae:49:e7:da:47:0f:64:67:78:
         e7:9a:65:c3:8f:ca:e5:13:35:cb:d4:76:8f:77:9c:32:a3:92:
         8d:76:bc:57:15:b3:e9:30:78:53:b4:ed:49:d3:85:b1:cb:60:
         bc:b1:78:a1:57:14:30:34:e2:b1:d0:c3:0f:88:e1:46:e0:87:
         c3:a5:f3:ce:14:61:a6:97:87:96:30:fd:bc:92:fd:e0:34:79:
         d5:16:3f:3c:9d:33:5f:ad:79:5b:6b:66:68:18:1a:e3:b4:1d:
         58:6d:f8:a5:03:bb:49:a3:db:99:57:80:e7:00:3a:ec:f4:0e:
         c9:86:73:c7:9e:f8:21:6f:cf:49:b9:f4:7a:ef:2d:cb:fd:83:
         5c:a8:00:81:05:80:65:85:de:7a:d6:5d:80:52:1f:cd:28:78:
         62:f5:56:22:ce:c8:38:72:02:f4:11:79:65:d9:16:d8:ea:3a:
         4e:47:6c:09:0b:e7:b8:3c:da:56:43:b6:79:d9:cb:19:33:41:
         64:94:f9:09:b8:d0:8a:21:12:49:51:bd:72:78:0f:4b:52:d2:
         63:90:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:22:03 2025 by rpki-client