Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa
File:                     e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa (raw, json)
Hash identifier:          7+qOFV3JZZM2jcAIu2DQ2ZL9LJPbbpLAeg05xVZiivg=
Subject key identifier:   CD:5E:04:2B:5E:08:57:A2:5E:EF:FE:6D:04:7C:93:64:88:87:26:BC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3CDD2FE3C02E3F1FB340
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     40934
IP address blocks:        209.121.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3c:dd:2f:e3:c0:2e:3f:1f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=295f612d-0ae9-495a-9d3a-c7cff81838eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:9c:78:ef:5b:a7:96:4e:50:48:fa:34:5f:
                    a3:0e:bf:a4:e9:55:cd:22:b7:94:01:1f:68:27:df:
                    e9:17:7b:7f:35:40:52:64:9e:8a:85:b9:1d:2a:54:
                    27:6e:94:ef:a1:db:57:9a:ff:b3:a7:19:3e:5d:3d:
                    95:b7:37:6f:61:1b:29:68:a0:de:ac:7f:80:6b:45:
                    22:3e:a4:d5:33:6a:5f:aa:1e:67:54:0f:3c:4a:f3:
                    29:ea:be:cb:d5:cc:0a:93:7c:24:57:06:c4:d2:f8:
                    77:cc:df:03:af:ee:06:09:79:ce:44:96:54:2f:ca:
                    7a:1b:93:96:86:79:6e:38:ff:d9:93:4f:ea:de:99:
                    0b:7d:96:c9:a8:15:4f:cc:e5:66:cd:da:d5:43:9d:
                    a8:a8:8b:5a:b5:d8:03:3c:de:5d:d2:7a:ca:69:06:
                    73:a2:ef:a0:d8:14:6e:de:56:9d:18:01:e4:af:52:
                    89:6e:a0:40:50:84:3e:a0:47:ed:ce:8f:fe:10:77:
                    e9:10:24:bf:85:8f:e0:57:11:a1:69:5c:ef:63:c8:
                    62:48:da:10:10:ad:f3:a8:34:5f:fc:5b:21:c5:ab:
                    cb:6f:68:ad:d9:bc:21:bb:4d:17:bb:17:0d:af:57:
                    e1:43:cc:19:d6:52:67:be:69:cc:a8:3c:e5:0d:80:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5E:04:2B:5E:08:57:A2:5E:EF:FE:6D:04:7C:93:64:88:87:26:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.121.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:00:a2:4a:8b:63:f0:a7:cd:03:c2:03:50:89:ad:8b:53:
         ea:c5:18:56:a1:18:ac:c7:b8:d2:1f:06:85:95:72:d9:0c:87:
         03:f6:0f:d3:fd:7b:5c:98:e7:c0:87:cf:ac:ab:6f:91:09:ef:
         f7:8c:61:11:a5:be:43:d1:96:70:f3:40:9d:fe:55:38:b2:c1:
         f5:d8:0d:67:64:90:77:7a:21:26:cf:81:cc:b3:f0:f0:f7:15:
         3b:65:a9:37:9c:8a:b5:b6:fc:64:f0:13:05:76:9d:36:c1:4d:
         71:9b:34:13:4e:1e:1d:e8:b4:ad:99:e5:a9:4e:5f:60:99:0a:
         43:e2:8d:20:f6:c9:31:9a:c6:84:37:a7:85:39:a5:17:59:68:
         c3:74:6c:4d:11:6d:2b:93:d3:2b:c3:e1:ae:bd:93:f8:f8:5e:
         e8:f2:f3:5c:77:0f:0e:00:e2:e5:5e:dd:8b:d9:3b:68:b4:09:
         a7:1d:68:8b:fb:7e:49:ca:72:8f:ef:64:2b:4c:9b:f7:0b:29:
         db:5d:93:bc:50:a1:bc:a8:4a:80:38:20:87:ba:f9:95:c9:2b:
         41:e5:b4:3b:57:82:b2:05:af:c0:3c:ab:ba:da:26:45:13:af:
         16:f1:6b:b0:d6:64:00:c5:b3:21:6f:42:b7:69:1e:af:58:aa:
         09:25:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:23 2025 by rpki-client