Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
File:                     84dfef13-acc8-32a2-b63e-97387a8dda92.roa (raw, json)
Hash identifier:          m3mULb6Zrar7p3XqXwJqMIEsKNPUsYE7hdcZV1yAino=
Subject key identifier:   9D:C2:36:51:54:2A:A7:34:4A:01:44:5E:8A:38:A0:02:61:78:83:B2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5DD1DD9A14901302F1B310A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     852
IP address blocks:        207.219.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:dd:9a:14:90:13:02:f1:b3:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d0a8f0bb-2793-4711-b2b8-0a6102069e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:fd:e0:ce:24:a4:5a:0a:2d:ea:2c:3c:ed:
                    17:41:2c:01:3b:76:1e:ba:72:9c:12:5f:71:70:0f:
                    38:86:8b:d7:82:7e:29:ad:fd:d8:5a:76:14:ed:97:
                    24:71:3a:d9:bb:37:51:47:e1:ef:d3:94:96:ef:f0:
                    cb:eb:30:55:c5:03:c7:da:81:5a:07:90:55:be:f9:
                    b2:eb:f9:ac:01:36:e9:2e:6a:e4:9a:d7:4d:0c:e3:
                    73:8c:5d:c0:43:62:d7:06:40:ae:8f:ca:a9:86:3b:
                    1e:76:66:9e:95:ed:78:64:40:75:68:7c:d2:79:8e:
                    7c:45:1b:09:13:68:9d:7e:8a:71:10:ab:68:63:11:
                    c2:42:a0:fc:29:47:ca:57:de:7e:26:cd:2d:5c:4d:
                    16:d1:01:77:a8:0a:15:0f:73:c1:d0:f8:88:3b:9b:
                    d8:cb:a1:7f:89:7e:ce:20:21:60:39:59:c0:cf:df:
                    1e:f9:3d:6a:0a:f5:21:99:59:dc:35:0d:d2:31:c2:
                    d0:d6:9d:48:40:d2:10:b6:fd:b0:d2:1f:31:bd:46:
                    03:a5:f9:db:d2:e4:d9:85:58:63:2d:7b:e5:c6:84:
                    dc:89:01:ce:4f:bd:34:61:27:52:a2:8f:b8:09:bf:
                    62:13:c3:ec:a6:0b:84:71:e1:06:78:34:25:2e:49:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:36:51:54:2A:A7:34:4A:01:44:5E:8A:38:A0:02:61:78:83:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:a8:65:ae:9d:74:be:50:e0:18:76:f6:81:1a:0b:27:94:
         66:b2:4c:d3:45:81:db:cb:69:ca:0a:2d:ec:bd:10:82:2c:d0:
         ae:11:26:87:e8:7f:50:c5:35:16:1b:69:e3:e3:c9:4d:98:37:
         6d:96:f7:91:d1:ae:d6:b7:ee:83:6d:1a:5f:7d:30:f8:c9:5b:
         c5:df:88:be:ba:f7:d2:b9:e9:18:ac:be:ba:ae:b2:ec:b1:f3:
         d3:bd:68:de:eb:66:d5:f5:e4:f0:b3:12:b0:7c:fd:28:5c:f8:
         e3:b9:05:d0:10:35:28:d9:4c:21:65:5d:04:e8:8d:bc:37:3d:
         8b:27:81:e1:72:dc:7b:46:5e:77:c5:bc:a4:cc:30:e6:42:7b:
         6e:83:86:08:ae:ba:36:13:a7:39:2a:63:11:b5:ba:9a:ae:92:
         a0:14:6e:45:49:2c:49:39:d2:bf:e1:96:87:6e:12:c6:8e:b3:
         fd:d6:08:b0:7e:ca:e3:74:5c:97:c7:85:08:c0:75:fb:33:a0:
         56:4f:c0:c2:8a:5f:3f:fd:a9:35:5c:1f:e1:7e:a9:d9:a7:cd:
         51:ea:59:67:3f:8b:84:3d:98:ee:72:54:39:54:47:db:ba:4d:
         45:4c:32:98:0a:b4:28:45:76:39:8c:b2:65:68:84:d4:a8:57:
         99:3d:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:58 2025 by rpki-client