Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
File:                     2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa (raw, json)
Hash identifier:          98NMUuRuZIXwxQcrDcDP5AJBQWMVa13PxotKAk+NcDQ=
Subject key identifier:   C4:BD:EF:97:DC:51:D7:6F:14:97:12:36:67:1A:29:83:8C:7D:DA:97
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521B71ACAE8233072AA240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        97.71.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1b:71:ac:ae:82:33:07:2a:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=6be04e5d-c6c5-424c-998f-6fd0c94a0801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:a9:db:bf:7d:93:2a:0a:00:12:d3:4e:8b:
                    83:fc:70:d4:e2:1e:0c:76:3e:25:46:69:fd:b0:58:
                    ac:36:66:7c:45:e4:c7:64:78:df:a3:47:e4:49:c5:
                    d4:a5:2a:1a:6c:d5:39:c3:38:82:4b:ca:7f:03:dc:
                    d0:61:ed:af:7e:61:47:35:d8:62:b2:ca:8b:95:31:
                    dd:c7:a6:de:72:13:79:43:aa:94:ea:b1:fd:f0:e5:
                    65:7d:8e:9b:e6:f0:7f:37:56:6b:57:16:7b:f1:04:
                    2d:20:0a:77:09:4e:be:60:ee:50:4c:dd:50:ea:58:
                    c9:b7:d1:9f:89:07:7d:f8:7e:40:33:b0:d6:2b:3b:
                    3f:39:a4:a8:d9:39:fa:53:14:dc:de:9b:b4:e0:c5:
                    3b:3d:d4:80:e3:0a:54:46:0d:43:35:2b:69:32:10:
                    7f:59:17:6e:b3:58:f6:83:d5:06:89:ba:f0:59:56:
                    8d:49:ba:49:a6:51:84:25:9e:d5:26:28:e5:be:5c:
                    7a:cf:70:bf:1d:77:0e:4b:96:23:48:03:93:95:dd:
                    2f:95:c8:d9:86:2e:18:75:d4:58:ae:e0:75:94:f9:
                    84:18:13:2b:db:4a:a9:17:d6:07:64:85:d8:c3:2a:
                    da:78:48:65:45:5e:88:f2:c5:e0:af:97:d6:f5:99:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BD:EF:97:DC:51:D7:6F:14:97:12:36:67:1A:29:83:8C:7D:DA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:e9:e6:7b:4d:d8:58:e4:ff:76:37:56:10:45:f9:43:75:
         33:2a:8d:3a:d7:2d:c7:e9:1c:c7:27:6c:b7:8c:fe:dc:a0:cd:
         45:ef:0e:2f:d8:3a:1b:d0:47:43:47:2b:f7:e0:06:f7:f0:9b:
         a2:e6:da:22:d2:e8:b1:15:df:30:ed:8e:de:a8:c2:4b:58:4b:
         58:ef:76:3a:81:92:4e:16:b9:e6:fc:cb:c5:ec:54:86:0a:77:
         72:62:d4:4c:b2:a2:27:8b:86:a9:75:02:68:6f:01:b7:28:44:
         a8:57:5b:0e:f9:57:14:0b:39:b8:1c:d6:6c:e3:b7:0f:39:12:
         91:ae:73:b7:5d:96:e0:51:60:4c:38:1f:ad:14:84:a1:9c:0d:
         45:62:f3:d9:37:4e:37:0c:74:e9:a8:5b:a4:fe:e2:de:9a:26:
         e2:ce:40:99:bf:ec:11:f8:f8:42:90:4d:c9:1c:41:ec:9d:02:
         cb:71:61:e9:28:f4:24:1d:ee:0c:63:ee:0c:2e:4f:40:99:7d:
         80:ce:71:23:eb:51:7c:94:eb:29:ae:ba:90:44:31:50:11:f4:
         18:97:3b:83:77:3a:3a:87:15:e1:5e:68:72:d6:8b:5f:88:f7:
         30:59:ed:50:84:f0:2c:c6:58:6a:54:7c:56:8f:07:59:b3:7b:
         fd:c8:cf:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhtxrK6CMwcqokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
NmJlMDRlNWQtYzZjNS00MjRjLTk5OGYtNmZkMGM5NGEwODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqip2799kyoKABLTTouD/HDU4h4Mdj4lRmn9
sFisNmZ8ReTHZHjfo0fkScXUpSoabNU5wziCS8p/A9zQYe2vfmFHNdhissqLlTHd
x6bechN5Q6qU6rH98OVlfY6b5vB/N1ZrVxZ78QQtIAp3CU6+YO5QTN1Q6ljJt9Gf
iQd9+H5AM7DWKzs/OaSo2Tn6UxTc3pu04MU7PdSA4wpURg1DNStpMhB/WRdus1j2
g9UGibrwWVaNSbpJplGEJZ7VJijlvlx6z3C/HXcOS5YjSAOTld0vlcjZhi4YddRY
ruB1lPmEGBMr20qpF9YHZIXYwyraeEhlRV6I8sXgr5fW9ZlFuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMS975fcUddvFJcSNmcaKYOMfdqXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMmJhNDA2MWItNjU3Zi0z
MWRhLWI5YWItYmIxYzFjODAyYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYUdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0r6eZ7TdhY5P92N1YQRflDdTMqjTrXLcfpHMcnbLeM/tygzUXvDi/Y
OhvQR0NHK/fgBvfwm6Lm2iLS6LEV3zDtjt6owktYS1jvdjqBkk4Wueb8y8XsVIYK
d3Ji1EyyoieLhql1AmhvAbcoRKhXWw75VxQLObgc1mzjtw85EpGuc7ddluBRYEw4
H60UhKGcDUVi89k3TjcMdOmoW6T+4t6aJuLOQJm/7BH4+EKQTckcQeydAstxYeko
9CQd7gxj7gwuT0CZfYDOcSPrUXyU6ymuupBEMVAR9BiXO4N3OjqHFeFeaHLWi1+I
9zBZ7VCE8CzGWGpUfFaPB1mze/3Iz1s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:02 2025 by rpki-client