Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
File:                     a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa (raw, json)
Hash identifier:          z5tks0k4UF9R94gYTzukYDuyaB9+L2NPSkb/arjZRD4=
Subject key identifier:   54:39:5F:87:7D:67:50:78:1E:E2:87:C8:8F:E7:45:4E:44:56:54:CF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973BD06BFE371CEFB37C100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        207.34.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:bd:06:bf:e3:71:ce:fb:37:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=840b453e-c48e-408f-a246-b5b806627296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:1a:03:41:c8:2d:27:48:e2:91:02:02:7f:
                    15:fa:5b:e5:b9:a3:e0:02:07:76:38:bd:5c:91:71:
                    58:7f:ee:f2:cf:10:bf:00:c0:74:c8:8d:2b:45:16:
                    f8:83:a4:2b:23:5a:b0:29:23:36:32:1f:1e:c0:cf:
                    49:c7:f5:03:9c:69:6b:65:77:b7:f9:de:b8:b4:97:
                    f7:15:40:98:38:e8:42:fb:47:05:8f:d7:fc:5d:0d:
                    3e:cb:17:19:9e:03:02:0c:24:72:db:43:65:f3:63:
                    41:b1:e4:95:4b:0d:c0:5c:e5:f9:ef:d0:ff:f3:92:
                    83:bf:2f:79:b8:54:6b:82:c3:e1:e7:0f:c4:64:df:
                    13:a3:c9:d9:b1:e1:0d:d2:8a:b1:ff:84:40:81:4a:
                    5e:b4:d6:1c:6d:0e:0c:a8:0b:b2:9a:c0:ab:79:7a:
                    27:22:4a:cf:cc:c6:27:0d:59:6f:65:22:63:24:77:
                    52:3f:f8:a8:0d:20:35:a4:8e:10:f9:e7:f3:4a:1e:
                    a3:73:f7:55:78:07:2b:4a:d6:a2:db:2d:53:65:9a:
                    fe:6e:c1:34:91:ee:09:21:c1:56:ba:21:70:bc:a1:
                    81:8e:bb:9a:3a:c4:c1:4f:b2:81:41:f6:da:12:f9:
                    60:fa:03:85:34:47:b4:14:43:de:55:ab:b9:1a:04:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:39:5F:87:7D:67:50:78:1E:E2:87:C8:8F:E7:45:4E:44:56:54:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a546b0b4-341e-32c7-ac09-a2d41ee017a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:4a:b6:cf:47:0b:87:93:40:da:87:fc:7d:74:1c:98:43:
         63:12:81:9b:1f:a4:35:b9:ea:e3:ac:72:07:d4:0a:24:8b:85:
         55:31:6d:2e:3f:83:f2:c7:d1:4f:5f:5c:00:0e:b6:19:dd:aa:
         a3:0f:2f:00:c5:37:38:70:62:fc:63:73:9a:f9:e5:98:bd:25:
         69:db:54:de:c5:ac:ec:31:ec:6e:7f:ed:9f:77:64:2c:ca:c2:
         37:88:28:b8:47:d9:ed:9d:20:1a:ec:76:aa:53:15:ba:d7:74:
         0d:9d:40:b6:fa:80:4f:f2:aa:d7:0d:ec:21:e2:c6:10:66:62:
         18:01:ad:75:66:a3:32:0c:4d:24:2d:72:55:94:98:24:c6:34:
         ab:e4:20:63:38:52:5e:ae:3f:eb:e1:66:9b:93:39:98:a9:28:
         7a:7c:72:96:4c:36:61:65:7a:2a:29:bc:96:e1:46:79:1a:df:
         63:de:2a:63:6c:60:fa:25:70:57:2d:d3:74:fc:c1:65:6b:2b:
         75:4b:01:d3:db:7f:6b:f5:45:e4:7c:b2:bc:5f:b2:dc:9d:4b:
         60:00:90:be:82:5b:87:73:5b:20:bb:59:f8:21:16:ca:4e:10:
         b6:73:3b:90:82:40:54:84:7a:88:12:08:7e:7b:22:32:2d:8f:
         d7:4c:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:15:40 2026 by rpki-client