Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa
File:                     1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa (raw, json)
Hash identifier:          RLTP01/mTpj2wINtsFkXGS8RktG3CdD6rEqsN3D0jgU=
Subject key identifier:   9A:4B:F6:7C:25:2D:31:0E:5C:DD:DE:E6:9C:21:7C:EB:5E:AD:9A:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5247B3930528B675DD2DC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.46.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:47:b3:93:05:28:b6:75:dd:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=20676c2a-3b10-4160-b840-dfc01421b892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:d0:d8:64:70:79:3a:d8:45:81:5b:c6:7e:
                    e8:e9:58:da:e6:1c:40:8b:48:b9:6f:5e:b7:75:50:
                    3b:91:5a:9b:7c:12:35:7f:6f:11:cc:64:be:ab:9b:
                    81:bf:a8:ca:44:27:90:99:63:bd:1c:81:96:b8:17:
                    e1:6b:1a:9f:92:f0:f9:03:4a:17:bc:9d:8e:87:e0:
                    e7:df:c0:a1:cf:3c:89:8f:4e:18:10:6e:4e:ce:b3:
                    24:56:1a:85:eb:14:0c:38:48:88:5f:dd:67:3f:02:
                    d6:2b:24:3d:f0:93:65:48:d3:0b:62:c2:0a:51:a8:
                    fd:2c:67:64:74:f7:29:ea:47:14:77:f5:98:99:ab:
                    94:ca:30:72:8a:7f:5e:94:c1:a7:d0:d4:34:84:cc:
                    86:eb:09:6e:eb:2a:4c:3b:30:2f:0c:da:72:3c:19:
                    17:18:d5:88:52:aa:ce:8f:0d:c4:2d:58:7e:a5:60:
                    d6:81:27:07:18:53:90:3a:3e:2f:cb:ff:a2:e3:32:
                    64:68:e2:d3:9d:ae:a1:a7:42:04:57:66:61:52:ca:
                    7e:63:3d:7e:1e:8c:d2:90:1a:23:a2:1a:1f:ee:6a:
                    aa:d1:89:ac:f6:58:f8:71:6f:22:41:a7:73:0c:97:
                    52:85:ed:a7:dd:a6:91:ea:23:87:be:c8:20:68:a9:
                    21:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4B:F6:7C:25:2D:31:0E:5C:DD:DE:E6:9C:21:7C:EB:5E:AD:9A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:23:29:88:18:cc:6a:b4:90:53:8a:bb:53:70:01:c7:ba:
         d0:86:7f:7a:68:23:45:d0:ea:c8:02:1d:15:0c:be:03:8c:bc:
         81:a5:0e:8d:b1:e2:e6:fd:7a:ab:3c:ec:9f:ba:9d:26:f1:f9:
         49:ca:82:37:65:b4:a1:29:c1:90:a7:5d:aa:24:8c:82:c4:2e:
         29:fd:67:b4:9e:e4:ac:c0:ab:ce:49:f8:fd:f8:fd:61:31:0d:
         4c:8a:25:6b:00:c5:d7:a6:86:11:41:c8:1c:c5:a4:15:42:e1:
         21:4c:85:1b:42:c2:e5:5b:60:ae:8d:c0:b3:03:60:93:c8:e9:
         77:09:99:96:39:d8:3e:33:4e:db:c2:0c:62:e7:33:9a:8f:da:
         dd:60:94:36:fb:19:b1:40:24:d0:ec:9b:08:fb:c3:ea:fe:0d:
         df:c1:c5:72:c1:f7:f3:66:db:74:9c:eb:27:91:02:5c:d7:0d:
         0e:ff:13:c0:78:1c:96:c7:0a:6c:ec:5b:3b:cf:96:64:c8:99:
         98:91:7a:c5:3b:54:6c:ac:b6:18:e5:a5:02:ff:9e:e3:36:73:
         de:cc:84:bc:d7:36:e7:4d:fb:9f:f3:77:bc:b0:c0:c9:63:98:
         b7:81:71:2a:bc:31:3c:29:23:3e:2c:14:86:be:ca:0b:0a:5b:
         14:e4:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:01 2025 by rpki-client