Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
File:                     825b10e9-fa31-33b9-a80e-e58c85226acf.roa (raw, json)
Hash identifier:          iVNHy2zUICwejmU7MDCtmAbZTs5sqe1pGBvXASQb98E=
Subject key identifier:   BA:2D:15:65:2A:AD:00:24:01:3A:54:1D:56:3E:FF:6E:6E:9D:B3:D5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FF4E86D5E6DC61C16F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        209.29.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ff:4e:86:d5:e6:dc:61:c1:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a5484466-46ca-46b5-a3a4-3b0d0c257859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:13:06:30:79:2a:ec:ff:af:c7:76:f5:cc:14:
                    a4:26:16:90:bf:06:7d:21:06:8b:49:84:ad:1f:5c:
                    15:89:cc:48:41:77:d7:4a:1b:e4:5a:36:01:db:31:
                    43:c1:44:eb:75:43:33:53:ed:5f:ee:3a:68:9e:09:
                    c7:34:57:0a:09:75:d7:bb:04:f2:a3:e0:e4:21:fc:
                    a2:f7:08:52:df:b4:89:d5:46:31:71:00:50:b7:7a:
                    5c:87:aa:cf:3b:59:8c:5e:79:d8:46:06:ee:c1:27:
                    a3:1e:a8:f6:4a:70:a4:c6:6c:03:76:26:73:14:af:
                    30:52:a9:e1:1f:bd:a3:2b:5f:90:f6:51:50:a6:c8:
                    e8:7c:0d:e9:e2:9b:11:8c:12:de:b7:ee:c0:f1:32:
                    95:1c:0d:91:f3:c5:d1:f2:73:3c:f0:3b:c2:16:4c:
                    fe:a6:74:58:41:fb:84:de:48:0e:2a:c6:ce:42:a1:
                    40:ff:42:7b:95:3e:5a:5a:92:7d:2d:f5:3d:ae:fb:
                    dd:b5:74:81:d7:92:f5:be:35:2f:23:3b:57:03:b9:
                    1c:5f:5f:4a:2e:18:2b:f4:50:3c:6f:c9:85:a7:f1:
                    7d:3e:99:af:56:34:d2:8e:f0:47:5c:9a:41:a9:0a:
                    5a:d8:90:73:a2:41:7f:6d:5c:08:87:e1:fe:15:55:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2D:15:65:2A:AD:00:24:01:3A:54:1D:56:3E:FF:6E:6E:9D:B3:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:af:ef:31:08:23:3d:c4:4d:d9:04:a9:8e:73:9b:74:b7:
         99:f4:2f:52:18:3b:03:ed:fe:83:b1:5a:ab:ef:b0:ed:50:c7:
         8e:21:b4:06:39:25:89:88:c4:49:52:c3:ca:14:8c:d5:65:14:
         81:44:7e:65:82:54:88:dc:1e:53:a9:35:16:df:76:23:e7:d6:
         f9:b4:a6:b8:0e:53:31:8e:3b:fc:7b:72:68:6a:15:d8:aa:65:
         9b:92:fe:30:f1:55:88:d2:a9:56:7d:c8:c5:3d:87:aa:dd:ea:
         3d:2f:5f:f3:a5:4c:c7:95:2d:9c:3c:21:16:0b:f4:b6:b2:fc:
         4a:71:47:c3:44:6a:80:02:c5:b4:29:1e:45:d1:1b:6c:24:74:
         02:bd:2e:1d:c0:80:76:2f:8d:d3:85:d4:80:19:ac:04:38:90:
         06:81:72:17:68:36:8c:10:9a:06:75:e7:1c:51:de:54:61:ec:
         98:b6:ae:a0:08:bd:54:f7:f9:ae:b7:29:1d:36:01:e2:1e:56:
         6a:bf:dd:df:a5:80:ed:54:cd:70:89:44:56:14:3b:e6:c6:21:
         4d:3e:3b:7d:4a:2b:18:1b:43:d5:ba:c2:8a:81:28:c0:7a:4a:
         dd:38:30:3d:a3:45:1d:0b:02:7b:b8:a1:57:d5:8d:bd:88:c8:
         b3:66:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:12:59 2026 by rpki-client