Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa
File:                     9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa (raw, json)
Hash identifier:          HoNHUFn1eaVQFWFnW12MiDK1k5IgzMmw7lP9PnY4c0U=
Subject key identifier:   DB:2B:C2:10:E4:87:EC:E8:91:5A:5E:82:6A:F6:11:0D:F4:F4:14:94
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5141B7D8C23013BE277D9C00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     14663
IP address blocks:        72.25.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:b7:d8:c2:30:13:be:27:7d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=ab9109fe-f43f-48d7-a0aa-bb1577260a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:96:66:bb:f2:38:13:65:87:61:a9:94:b2:
                    4b:05:8b:6e:82:1b:0a:31:6d:62:c0:9b:4c:98:d6:
                    44:48:8f:9d:36:9a:d0:f8:22:e2:da:f5:2c:53:0d:
                    eb:3e:bd:29:d1:e5:69:3e:2d:6b:aa:18:6b:08:7f:
                    2d:48:f4:a9:3a:75:c5:06:bb:2d:f8:39:0c:99:d3:
                    35:82:82:33:34:59:2f:c5:6f:05:e8:aa:95:e9:f3:
                    ff:ab:65:75:1a:05:82:48:79:0b:ca:dd:3b:11:b0:
                    11:ca:98:3a:8d:b6:04:af:41:10:25:f3:36:b1:e3:
                    c6:d8:00:16:b6:a7:f2:32:c3:a7:3d:01:35:ea:8b:
                    71:54:10:d8:a6:d1:73:cb:4a:9a:a8:f5:62:e1:94:
                    1e:75:80:12:b9:ba:6b:fb:10:d9:07:0d:40:6c:96:
                    b1:13:6f:06:b9:aa:10:16:08:cd:ba:02:5f:97:30:
                    b4:2e:1f:d8:59:5b:86:06:f0:5d:2a:97:c7:90:1e:
                    ba:9a:02:d9:d6:1a:70:a2:50:03:88:16:50:57:d5:
                    77:8a:9b:ce:67:e0:6a:55:33:b1:86:7c:fe:a8:d7:
                    c8:fb:d0:7d:be:88:f6:d7:e7:a7:dd:3e:46:24:cc:
                    ca:08:8a:2a:53:6a:99:22:5b:41:57:42:b9:1e:da:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:C2:10:E4:87:EC:E8:91:5A:5E:82:6A:F6:11:0D:F4:F4:14:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cb55698-6b11-3a9b-92a7-4b3c895aadaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:03:b6:83:a0:3a:9c:62:15:17:7b:d7:6c:bc:73:47:c4:4e:
         f7:42:16:e8:76:33:a3:6c:25:b1:75:c8:ec:6d:7d:d5:3e:6f:
         d9:07:6f:ac:44:2e:c3:2f:17:97:ed:a5:88:f0:03:04:df:70:
         81:7d:61:53:58:c3:1c:09:64:3c:85:ca:c7:4f:0b:f9:91:0c:
         57:17:f0:95:0d:78:d1:d4:bf:cb:a0:40:94:a5:d4:a6:c4:6c:
         b4:4f:06:8f:bc:11:48:00:ea:0d:8a:91:52:c5:04:48:d2:35:
         69:d1:8f:02:68:0f:6e:a8:e1:dc:9a:e1:7b:02:05:66:41:11:
         5a:39:bb:73:87:99:aa:d8:43:9c:50:de:f0:fd:ec:21:6e:1d:
         f9:6f:fa:b6:92:30:08:e6:b0:f0:98:65:fd:cc:05:0a:27:b4:
         11:a0:04:2c:33:7b:c2:f8:69:f9:d8:b4:e7:86:17:13:3a:7c:
         af:ed:56:26:4a:90:a4:19:09:4c:a4:78:90:35:09:6b:a5:d9:
         61:7a:0c:0a:b9:9e:fb:75:c8:28:00:69:8b:d1:f2:ed:0f:cc:
         09:f2:8b:81:9c:26:5d:21:5a:b3:c9:e2:bf:fe:c3:a1:08:c1:
         71:0f:7c:26:6d:7e:4d:e2:51:9a:12:06:5a:ba:07:ef:d3:f0:
         49:8c:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:08:59 2025 by rpki-client