Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff95974d-62de-3896-a0f1-ae760affaab1.roa
File:                     ff95974d-62de-3896-a0f1-ae760affaab1.roa (raw, json)
Hash identifier:          iz4WYxWwuxZaLiYNHXhlx1k/GfAEEhtef1taWBiaQFY=
Subject key identifier:   13:EB:09:68:43:6C:BA:EB:83:7A:F1:7C:3B:F5:C1:02:E1:6C:9A:78
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B4D11CB49B4B69744CAB862C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff95974d-62de-3896-a0f1-ae760affaab1.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        207.194.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cb:49:b4:b6:97:44:ca:b8:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=ca015d6e-2fc5-42c7-b9d9-22d0baf81df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:16:f9:dd:fa:72:90:9a:e4:73:b7:21:0b:e9:
                    ba:dd:eb:a5:d3:1c:49:82:d5:36:48:f8:5f:7a:9f:
                    18:82:77:69:c9:e1:13:f0:05:2c:9e:a1:34:dc:f4:
                    18:f4:b2:39:a0:6b:4a:91:94:61:10:43:4b:90:17:
                    1c:b1:01:c6:6c:af:75:ec:db:08:79:ef:44:cf:a0:
                    5b:fb:4f:e7:1b:9b:c1:34:9c:cb:ca:8e:47:5a:88:
                    18:3c:92:15:0c:a5:e0:4d:00:32:e0:fb:b6:51:06:
                    ce:cb:63:e0:02:20:b3:bd:a2:23:7a:f9:ec:7a:3e:
                    55:30:2b:30:61:aa:4c:a1:ae:31:0a:86:4a:dc:82:
                    36:e5:6c:dd:4a:4d:cd:84:39:9f:4f:3b:0d:68:18:
                    b5:86:9d:ad:06:27:4f:3d:82:a5:ec:4f:3f:11:55:
                    2e:23:8f:cd:3f:9d:2c:fa:cd:40:40:46:48:90:f9:
                    c3:3b:fd:3e:8b:97:f8:9c:69:35:48:0e:bf:20:0e:
                    a5:b4:e8:6d:5a:3b:66:3f:94:43:50:26:5d:b3:27:
                    38:71:79:e0:1f:60:71:42:97:27:ab:c1:ab:93:ff:
                    8b:ff:3e:d4:a2:f2:ab:b5:4c:ed:ae:d9:f4:0e:1b:
                    21:ac:f5:c8:9b:ac:d0:d5:87:57:29:06:cd:02:1b:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:09:68:43:6C:BA:EB:83:7A:F1:7C:3B:F5:C1:02:E1:6C:9A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff95974d-62de-3896-a0f1-ae760affaab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:0c:67:f7:fa:3e:c6:4d:1e:9f:4a:14:a7:dd:13:c9:1e:
         e1:37:7d:87:50:55:89:88:14:70:3e:0d:13:b2:d1:8d:a8:a9:
         b2:08:99:2e:93:3d:de:bd:56:08:bf:25:ad:2a:25:db:35:01:
         ec:13:61:a8:3e:73:02:f3:7d:55:00:17:de:71:60:ec:a8:50:
         01:81:a5:86:8c:88:3e:53:b0:71:47:d0:d9:c7:ed:5f:5c:d3:
         10:32:3c:db:61:29:19:24:d0:41:89:dd:22:37:fd:b1:28:84:
         62:29:09:d4:26:a5:d2:81:05:97:8e:ad:5d:cf:b0:b2:b7:a1:
         be:73:2c:d1:b4:06:7c:25:a1:e2:5a:42:82:79:49:c4:f8:5f:
         06:63:ea:3f:6a:be:11:42:be:ae:0d:68:19:6c:93:93:10:3e:
         8a:ff:0d:06:9c:e5:0c:ef:c5:71:90:ae:f6:b0:be:db:a5:d2:
         aa:b2:74:1c:81:ea:a6:54:6b:e8:72:68:54:04:b8:23:43:c7:
         9b:d2:ef:84:d1:61:33:52:97:d6:69:10:c2:d3:67:49:4c:be:
         b8:7c:f8:e0:1e:15:2c:b1:2a:83:98:a6:a7:a9:3f:cb:75:c2:
         b7:c7:58:0b:61:ca:f9:8d:03:c4:54:03:d8:39:40:d0:3a:1a:
         9c:25:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:00 2025 by rpki-client