Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/795fb19d-c9d1-3ebd-93df-a62385c7cc93.roa
File:                     795fb19d-c9d1-3ebd-93df-a62385c7cc93.roa (raw, json)
Hash identifier:          JWNCX1ctS6VnOya2u0qyeJEA30fTNswjsMdBhdzlfuQ=
Subject key identifier:   C4:EB:60:12:00:84:16:E5:F4:40:AB:64:79:1A:63:BE:4C:F9:C5:62
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A7372AB8D5E456BDCD3880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/795fb19d-c9d1-3ebd-93df-a62385c7cc93.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     7861
IP address blocks:        209.29.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:37:2a:b8:d5:e4:56:bd:cd:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=92255de0-5b5f-4929-915a-3b40190f2b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:30:4b:31:0d:fd:2f:1f:cb:10:e0:25:5c:
                    3c:da:93:12:67:aa:69:6c:b6:25:f6:81:f2:75:21:
                    7b:2b:98:52:a7:2f:12:2a:08:6e:92:9c:cb:cd:80:
                    ef:f0:a2:2d:1a:f9:b9:ed:d3:77:cb:d8:46:0c:a8:
                    5d:21:50:62:eb:88:f7:3c:ee:62:fb:1c:b7:21:9e:
                    5a:e2:56:04:4b:3f:e8:35:2a:a5:b1:bc:39:73:61:
                    10:c2:19:9c:6d:ed:9d:68:47:ca:2f:87:e4:31:71:
                    2b:9a:e5:b1:f0:58:81:06:63:49:fe:b5:fa:ca:b6:
                    3b:bb:5f:03:c0:01:67:d4:a9:4c:20:23:72:5f:98:
                    44:30:e8:da:de:92:5c:64:c7:97:93:09:83:5d:38:
                    af:ad:07:bd:07:39:9c:dd:c6:5c:9f:a5:b4:bb:02:
                    32:63:2f:21:25:a2:16:80:d3:c5:6e:ca:dd:da:be:
                    3a:fb:c4:5f:cd:70:85:ab:62:ef:d2:25:02:19:08:
                    3b:a1:d3:c9:c9:d4:c2:a8:e5:5c:63:07:43:77:76:
                    73:e4:5e:dc:22:66:15:18:9a:c4:53:3c:50:35:49:
                    67:57:02:bd:23:e3:fb:0b:9d:5d:5b:1a:e0:0d:0a:
                    65:a8:8e:34:97:a1:0a:03:e4:a0:45:57:ef:9d:12:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EB:60:12:00:84:16:E5:F4:40:AB:64:79:1A:63:BE:4C:F9:C5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/795fb19d-c9d1-3ebd-93df-a62385c7cc93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:93:cd:6f:12:eb:94:f6:ef:99:f4:c2:aa:93:b8:ee:20:45:
         8c:f3:a3:cb:f4:bf:24:e8:c6:36:8e:b5:f1:e8:a9:a1:6d:c4:
         82:f2:84:9d:72:dc:c2:65:6a:f5:41:9e:ca:cd:a0:47:d7:c3:
         1b:91:fe:b7:33:76:3a:8a:82:fa:97:db:3f:b1:da:d7:71:8c:
         a9:aa:94:f4:67:96:b7:45:fa:e1:2f:14:00:57:ca:6d:41:d9:
         b2:bc:5d:aa:1f:50:12:88:a5:8c:9e:9a:81:67:1a:75:ea:c2:
         aa:ce:ad:da:b9:15:8b:51:ab:59:c3:51:3e:af:39:24:7a:72:
         c0:4a:fa:7c:81:b2:c5:ba:89:2a:e0:8d:da:14:02:82:67:65:
         34:a2:25:fa:d0:f4:45:a6:85:12:05:b8:cb:9c:9a:a2:e7:da:
         f6:d4:37:de:d9:67:64:65:e3:18:83:80:b1:e4:08:c6:70:33:
         26:80:a8:78:4a:0e:a9:e6:f6:b3:43:c9:4b:b0:9c:83:de:64:
         a0:08:4a:4f:45:90:65:3d:32:55:28:65:84:a7:14:83:3e:b2:
         97:cc:7e:c8:77:eb:84:db:e5:d4:59:0d:47:56:6e:43:a2:9b:
         c4:0e:0f:d2:02:d9:61:78:7c:f7:42:9f:9c:89:73:67:13:17:
         d6:e3:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:37 2025 by rpki-client