Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa
File:                     f7917142-ccc9-32c4-9c51-a2a941f0984a.roa (raw, json)
Hash identifier:          ISo5ptAaLhAh6oVqiOiWYmXhqZ+Td00Oa/rt1IMZKTg=
Subject key identifier:   C9:7C:7E:01:CC:9D:C1:85:AC:98:56:DD:31:D8:49:B0:2F:97:EE:EF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5141BA234957247FE4B721C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     398211
IP address blocks:        207.34.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ba:23:49:57:24:7f:e4:b7:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=ec0e0bc3-c5e8-47af-9adc-5d0ab8fd154b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:4d:37:c5:17:c9:87:29:e2:e3:ce:65:21:
                    9d:c2:df:c4:2a:b6:dc:4f:50:7a:c4:fc:eb:8b:1e:
                    3b:5b:42:8c:57:1c:b5:47:11:02:c9:43:2d:06:75:
                    f7:52:b5:33:a9:ed:5e:28:03:3a:cb:ae:5b:66:6f:
                    f0:fa:d6:be:88:e8:75:ac:a6:18:b3:77:71:d9:f1:
                    02:aa:5b:fd:2c:28:02:1d:cf:1a:75:59:09:6c:bf:
                    41:74:3a:e7:91:80:88:b2:2e:5e:2c:b0:34:6d:e7:
                    b7:b9:4b:40:9c:ba:df:61:d1:50:7f:d5:07:05:b3:
                    e6:6e:a5:a3:b7:04:94:38:4a:09:2d:80:42:25:60:
                    f2:75:e6:f6:60:04:ec:d5:fa:71:90:2a:02:df:0a:
                    ce:50:32:e2:9f:de:5b:52:d6:d3:e2:1e:00:c5:d2:
                    71:c3:a2:d6:d8:88:38:dd:ec:6c:22:6a:88:7e:48:
                    6c:2b:90:66:b0:3d:68:81:3b:3b:d4:1e:5c:0c:6c:
                    55:13:bf:19:95:49:87:87:c9:8c:e7:19:51:c9:75:
                    3a:58:c3:1d:2f:68:cc:5f:b3:7a:1f:2e:99:aa:e8:
                    28:b5:85:1c:1b:c1:97:5c:59:3a:30:8d:48:5e:74:
                    fe:ff:6e:52:9e:91:f6:33:be:7f:33:a4:07:79:bb:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:7E:01:CC:9D:C1:85:AC:98:56:DD:31:D8:49:B0:2F:97:EE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7917142-ccc9-32c4-9c51-a2a941f0984a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:d0:85:6f:fc:54:a9:86:bc:ac:a6:41:37:9b:db:92:43:f6:
         ae:97:d8:eb:a1:7f:5a:50:27:c2:67:06:ee:87:b5:6f:cf:1a:
         cd:10:83:d5:31:7d:ae:bf:94:de:4f:d9:7c:35:f0:40:02:77:
         a7:75:9d:a4:67:fe:d8:27:33:41:f8:db:6f:7b:07:58:28:3a:
         9f:1b:16:e7:fd:91:f1:35:5b:2a:7e:52:ca:50:d8:4d:f5:7d:
         9b:7f:49:22:79:84:4e:4a:3b:b6:a0:66:60:69:db:5f:91:8b:
         75:65:2f:75:71:7f:4f:30:f7:af:a9:1e:4b:d8:53:d8:00:9c:
         62:6c:b9:ad:68:a4:0f:33:76:6a:45:e6:08:eb:87:49:0f:3d:
         d4:71:82:30:73:24:0c:31:7f:28:a8:78:29:e5:2b:a9:a2:d2:
         ab:dd:2a:55:71:df:6a:8a:e1:a2:4d:cf:d1:fc:47:5c:00:4c:
         f5:95:b2:dc:44:9b:36:42:b7:3b:be:55:e8:2c:e8:bb:01:77:
         3d:24:e2:a7:52:2b:c4:f1:b7:34:3e:aa:03:b7:97:cf:e3:6f:
         80:21:29:a3:d7:a7:6a:33:ce:ea:b5:03:1c:5a:23:5e:55:10:
         41:b6:2f:0a:38:f4:03:b1:ec:07:14:3b:34:dc:bf:62:02:60:
         fb:a0:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:59 2025 by rpki-client