Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa
File:                     08f751a2-65fd-3c32-9495-9dd3d556bf70.roa (raw, json)
Hash identifier:          1QMs+WdZH0A1pAAYoHJ9GMMcQabV/IBU81GaEz3nlZc=
Subject key identifier:   68:83:AC:DF:A0:0E:3A:01:2B:28:73:48:73:C1:98:CC:72:27:98:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524E39CC03BB335B7A2DC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        97.71.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4e:39:cc:03:bb:33:5b:7a:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f7d408d5-7fa5-458c-9eaa-021a0ba5d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:db:e0:55:32:eb:ac:3f:b4:af:66:f8:49:
                    9a:4f:c9:cb:c4:97:24:14:bd:be:a0:68:fe:bf:c5:
                    5b:22:f9:4d:5f:14:9c:8a:e4:7f:e5:5f:8a:e7:40:
                    49:59:42:c0:40:ba:c9:51:73:83:f5:b9:ff:5c:0e:
                    8a:77:82:ce:7a:2d:3e:2a:f1:b0:92:f0:0a:03:c0:
                    d3:fd:48:6a:a9:62:85:ae:c0:7b:31:3c:27:49:e3:
                    11:20:2c:ff:47:a4:e5:4d:f0:d6:2e:da:6a:06:b0:
                    76:6e:f9:92:71:b9:e2:38:27:de:7a:15:17:40:28:
                    5c:31:e7:47:1e:e6:30:80:7f:34:d5:c7:be:22:e5:
                    2c:14:94:ac:99:a0:dd:ce:83:ac:19:0b:f9:ac:38:
                    cf:0e:39:42:73:04:d3:9b:58:ce:e6:6c:b3:11:8e:
                    e0:b5:c6:6c:e3:cc:e0:f8:47:a0:27:21:c4:c8:41:
                    0c:e4:0f:87:c4:bd:52:50:8c:e3:8a:52:76:b3:fd:
                    85:c7:24:1b:06:41:79:73:5c:4c:ef:20:9a:7c:44:
                    42:bf:39:b0:59:62:b1:28:dc:6f:5d:be:cc:ec:96:
                    3e:1f:2c:2b:7f:89:de:84:34:52:e6:8a:fa:59:ac:
                    54:ec:35:49:58:eb:ed:4a:f3:00:43:24:3b:92:a8:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:AC:DF:A0:0E:3A:01:2B:28:73:48:73:C1:98:CC:72:27:98:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/08f751a2-65fd-3c32-9495-9dd3d556bf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:89:22:71:10:bc:30:a0:42:32:8a:4e:c5:bd:cc:c5:4c:bc:
         cc:20:7b:5c:9f:87:50:e2:50:d6:ed:07:1e:3e:cf:45:2e:63:
         67:fc:0e:fc:ff:ba:6e:da:d8:c5:54:25:d9:1e:d2:e3:b8:ca:
         72:8d:ec:5e:30:11:1e:ff:73:9c:d8:dc:7d:17:61:14:4d:b6:
         2f:11:d9:af:bb:bf:aa:94:ea:b1:1d:cd:5e:8b:3f:0b:9e:90:
         7a:18:11:10:8d:ce:28:5e:54:22:79:8c:e3:2a:be:8d:d0:36:
         71:a3:04:fb:d3:42:fd:d3:26:e4:53:23:b1:f8:3e:2b:ad:88:
         d1:5a:c9:c5:05:37:3d:13:41:83:41:01:dd:ae:11:4a:e0:f4:
         0f:c9:f7:1d:f9:fb:03:ac:a9:92:44:f0:97:43:53:3a:a4:ac:
         a7:6e:c2:e2:d7:d7:a4:d7:49:72:d3:e1:a3:fc:9f:99:52:a1:
         8d:3d:8a:22:da:75:33:62:9c:d8:40:8a:62:ff:6d:3b:ab:65:
         2a:38:41:da:ac:b6:27:b2:2d:8a:1a:f0:19:e8:53:d4:87:7c:
         e8:b3:12:7b:c2:a9:80:62:ee:71:dd:50:82:9a:54:0f:b2:a7:
         bc:b7:52:46:93:12:68:ed:7f:bd:b1:5a:cb:33:59:06:bc:6d:
         7d:8f:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:11 2025 by rpki-client