Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7e00965-b7f8-34db-bde4-829948b6e2cb.roa
File:                     f7e00965-b7f8-34db-bde4-829948b6e2cb.roa (raw, json)
Hash identifier:          1TZl1mMV/0+RC44UpRozDD9y8S0fsvKCD+yrB4nWtaE=
Subject key identifier:   4F:9F:FA:AA:B7:15:72:DE:9B:BC:FC:D5:13:C0:C5:C4:BD:79:C6:25
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E842A3953514C025E6010EB00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7e00965-b7f8-34db-bde4-829948b6e2cb.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     852
IP address blocks:        173.181.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:39:53:51:4c:02:5e:60:10:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=e2fa8789-4477-45d6-8132-bfcd9e6c51ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3f:6b:70:22:23:37:e5:cc:5d:09:d8:97:ed:
                    3f:e5:8b:6d:53:bc:c1:20:d8:69:7d:88:00:82:9a:
                    ca:09:4c:5d:6e:63:e3:e6:fb:64:8e:a8:00:74:5d:
                    f2:94:59:9e:7b:1f:37:7e:9a:ce:29:69:61:cc:77:
                    72:1b:7f:f1:8d:e7:f4:45:b8:c6:25:85:47:03:8a:
                    57:41:a3:54:09:d3:ee:62:67:37:53:88:5c:18:6c:
                    d4:d2:72:69:5d:e8:62:98:bb:00:97:f4:27:aa:cd:
                    d7:b0:7d:7b:6d:eb:d2:78:9a:8b:29:fb:7b:23:aa:
                    b7:fc:a9:a8:7c:6e:a2:a9:1e:4a:0c:21:ff:a0:77:
                    ec:20:2a:15:e2:58:78:df:95:fe:cc:27:31:fb:8b:
                    9a:e0:54:4f:17:c9:9d:35:d6:45:8c:c9:1f:8b:61:
                    57:79:4e:8f:f5:df:aa:47:c2:d5:41:ab:28:15:48:
                    83:82:8b:ff:3b:89:cf:90:00:21:e7:5d:dd:c7:0a:
                    fa:f9:14:51:84:75:c5:70:cd:04:49:a2:88:0a:60:
                    8d:4e:37:71:2c:07:7c:db:d1:3c:15:93:5d:4b:b4:
                    94:c9:20:90:66:3b:85:63:61:25:4a:40:d3:3b:06:
                    df:88:ef:3e:33:b4:a8:a9:5c:df:0d:68:78:3a:a8:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:FA:AA:B7:15:72:DE:9B:BC:FC:D5:13:C0:C5:C4:BD:79:C6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7e00965-b7f8-34db-bde4-829948b6e2cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:5b:f2:93:af:17:49:69:08:ac:8f:95:c5:a1:20:76:f5:
         cb:6c:b5:c3:45:fe:85:4c:dd:73:da:18:76:87:b4:85:2c:cc:
         34:7b:d4:c4:81:17:bb:5c:94:85:21:1f:11:cc:e4:eb:ec:b9:
         59:67:e3:14:5d:33:d0:a6:4d:eb:e8:d3:af:a7:b0:24:0b:97:
         f6:83:94:b0:d5:dc:70:9b:13:24:e0:37:1b:22:3a:a8:f7:fa:
         d0:c7:1f:90:99:68:2a:32:13:4b:49:fc:8d:e6:8c:dd:fb:c6:
         1e:98:44:fb:ab:90:f1:07:3b:67:60:d8:ca:ab:a7:a3:45:fe:
         c3:4a:00:10:d6:43:16:15:77:79:6b:90:cf:22:8a:d3:63:b6:
         62:91:1a:da:94:93:aa:06:03:70:33:4c:37:00:92:9a:e7:cf:
         d5:cc:07:c4:9b:fa:70:1f:3f:ad:e9:18:f9:17:76:a5:c2:ae:
         7a:d5:41:9b:74:8f:76:8e:1c:10:13:ea:06:44:d7:a6:48:f3:
         a0:81:26:8e:5e:c1:0b:9f:b9:b2:2a:1d:48:d8:1e:27:2f:fc:
         86:5d:4a:c0:ff:de:f3:75:5f:96:ad:7f:96:d7:30:b8:8e:9a:
         ec:bb:30:ed:d4:61:a9:80:16:75:e4:2d:29:8a:d9:5d:21:fe:
         69:3e:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:13:08 2026 by rpki-client