Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d49fb7d-0648-3d1f-b84b-582c8e75827f.roa
File:                     7d49fb7d-0648-3d1f-b84b-582c8e75827f.roa (raw, json)
Hash identifier:          6EGsqCJBoH6oOHBLS8D2Ygqx1cqtX/Q/oRRrPswZLG4=
Subject key identifier:   21:1F:6C:C6:E1:47:1F:6F:CC:A0:F2:FB:DD:2C:ED:32:D1:86:31:58
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11CA4245E965EBEF9C5700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d49fb7d-0648-3d1f-b84b-582c8e75827f.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     21723
IP address blocks:        208.38.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:ca:42:45:e9:65:eb:ef:9c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=303f36b9-f4c0-4ff2-b328-c3345fd01a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:6c:76:9c:72:87:a7:51:c6:4b:68:c4:93:
                    d5:74:76:51:ba:00:e7:22:07:c6:f3:c3:17:ab:6d:
                    0c:66:fd:40:27:fd:a9:fa:31:0a:71:c3:75:4e:c5:
                    ce:b4:6f:e3:d2:fa:cd:82:62:42:3c:99:30:aa:58:
                    47:05:c1:51:a2:a8:d2:52:4d:a5:fc:73:9c:68:75:
                    6c:ae:8d:b5:1f:a5:c3:db:dd:62:ea:92:7f:9e:01:
                    83:b8:79:26:f8:ce:31:4a:cf:a6:e6:79:9b:1e:60:
                    67:89:8d:1c:20:89:fc:4d:d6:ef:5e:2e:e2:5f:b3:
                    22:a4:ab:c7:7b:ae:2a:fe:e4:d6:ae:5e:07:74:d2:
                    12:82:18:4a:04:54:40:48:5b:cb:32:e4:7a:fb:c7:
                    a8:02:59:4c:2f:cd:57:5a:84:e8:dd:66:bc:91:f1:
                    6e:3a:25:00:49:11:1d:f7:7d:fc:3d:f5:0d:a6:c5:
                    44:2c:b3:37:2c:27:c9:78:85:af:25:7a:d1:7d:a5:
                    d9:f7:63:e7:75:d4:80:72:48:85:32:83:86:40:1a:
                    57:59:22:19:09:ce:29:71:68:ce:ff:0f:dc:bf:56:
                    b7:07:d1:cc:23:10:33:3d:86:dc:f1:32:41:be:67:
                    a4:70:d4:4a:2c:1e:fe:75:39:d5:22:ac:fa:32:22:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:6C:C6:E1:47:1F:6F:CC:A0:F2:FB:DD:2C:ED:32:D1:86:31:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d49fb7d-0648-3d1f-b84b-582c8e75827f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:df:41:94:c9:3c:21:24:0c:11:56:2f:12:d6:5a:9e:5a:
         59:7b:b4:87:74:32:48:9b:d0:41:3a:8e:ec:b1:5e:18:92:fd:
         73:dd:36:57:26:c0:7a:21:94:a9:5d:5f:69:4e:95:f8:8c:a9:
         a4:05:3a:2b:c9:df:b5:e7:ff:bf:dc:e0:e5:2f:14:a6:63:a2:
         14:09:48:66:7d:ce:e4:de:ed:60:69:a3:15:f4:a2:3f:2b:b2:
         88:f0:eb:2b:9d:5a:0f:cb:d4:bb:89:1e:47:6a:9b:8c:60:78:
         38:63:6a:fe:02:e2:51:c5:54:5e:af:cb:c6:bf:2f:40:c7:9f:
         aa:b9:1e:08:9f:4a:11:d5:88:b5:de:e5:9d:fc:31:2e:4e:10:
         e1:d2:b6:5b:ac:14:72:2f:32:65:c5:20:4c:5c:8f:3c:fd:ea:
         76:f1:b6:51:1e:48:48:40:2c:a5:9e:31:d6:b0:0d:27:b8:26:
         ac:5e:25:0a:e2:94:b1:51:8a:59:a4:5f:03:b6:f5:96:cb:26:
         ae:1f:49:21:97:83:1f:25:79:f2:63:28:9e:1d:d3:4a:f9:fc:
         93:91:88:a3:a3:de:21:a7:58:53:14:d6:ce:15:91:47:b7:2d:
         47:b6:9d:50:95:79:62:76:e5:80:4b:91:73:0a:1a:2b:d1:d1:
         d7:74:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:00 2025 by rpki-client