Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c51504c-6b25-3334-a5ea-987b76897cd2.roa
File:                     3c51504c-6b25-3334-a5ea-987b76897cd2.roa (raw, json)
Hash identifier:          /lJl3nL8ilyQCEI3a+f8hf3/Sak7tgY3GJaM8ESmuJI=
Subject key identifier:   8F:9C:99:6F:15:40:B7:30:EF:E4:25:F2:5D:0E:B1:81:40:98:DF:F8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524D229FDD764F35BB0800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c51504c-6b25-3334-a5ea-987b76897cd2.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.46.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4d:22:9f:dd:76:4f:35:bb:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=776e94de-e1ac-4586-95f8-4cb4c865eb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:39:0b:6c:7f:c2:9e:be:0e:57:7f:65:c3:
                    9c:91:ce:ec:10:d5:fb:e5:74:36:03:4c:70:df:bd:
                    3c:33:93:ed:1e:ed:80:f7:bc:a1:e7:b8:59:3f:ae:
                    c6:e4:74:7e:05:a9:53:ef:3c:ed:5f:b6:73:00:8f:
                    9f:43:db:93:33:95:16:3d:b0:0c:90:4d:f9:6f:b5:
                    6b:a3:63:52:ec:78:a2:18:aa:c3:bd:e7:3a:95:74:
                    26:02:3c:6a:8b:73:5c:e7:f1:5c:59:46:c0:9b:8f:
                    28:1b:65:d0:26:54:bf:72:74:45:3b:fe:09:1a:4b:
                    ae:54:df:a3:c6:29:2b:29:c5:4a:27:34:dc:ed:05:
                    49:79:ed:e8:dc:71:4c:82:e4:33:1f:9c:35:2a:1b:
                    05:e5:f9:39:bd:08:86:0b:41:2a:f4:6a:62:5a:da:
                    86:a2:72:f5:d0:9d:b0:0a:e8:b0:fb:80:bc:ee:95:
                    cf:61:a2:36:83:69:2d:45:1e:7b:b2:7b:17:7c:b3:
                    ad:3b:1f:51:cb:bb:38:7b:14:6f:d1:f9:f7:17:3b:
                    cf:7a:b8:9d:5d:b0:67:5f:5f:9b:64:55:95:ae:08:
                    9f:15:52:30:d0:32:c2:7c:62:6b:8f:12:5d:9c:a9:
                    89:b2:86:6a:85:18:30:40:c0:60:28:cd:b3:55:39:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9C:99:6F:15:40:B7:30:EF:E4:25:F2:5D:0E:B1:81:40:98:DF:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c51504c-6b25-3334-a5ea-987b76897cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:4b:e0:f4:32:b9:92:1e:b2:3a:7a:95:15:70:a5:5a:99:
         5a:3e:fa:30:a4:6d:24:fe:eb:ad:be:6e:19:3e:57:52:a2:83:
         8c:11:43:8b:33:77:4a:36:72:9b:de:2b:2f:2d:49:e1:39:96:
         db:ac:6a:74:83:a4:72:37:2a:6f:3b:2d:fe:24:da:ba:25:b1:
         d2:34:f8:b9:f6:3e:71:0c:82:e1:bb:5e:c2:e6:cf:d0:65:a6:
         eb:a9:c5:f4:7e:10:fd:0b:33:5c:47:40:8f:03:ad:f3:a5:ab:
         d1:ec:45:06:f2:eb:af:65:41:3b:fd:d8:a9:03:63:77:76:d8:
         52:f6:95:42:10:8d:22:d7:72:5b:1e:7d:0c:7c:ec:a6:63:08:
         3c:8f:f0:d5:83:b1:00:10:f7:6f:79:2b:23:84:29:a9:89:30:
         34:43:10:2c:c1:19:37:13:4f:9d:f2:f2:8c:5c:a4:3e:26:88:
         e5:57:e2:4b:64:05:01:15:40:83:cd:d0:70:f0:22:ba:af:cc:
         0b:b9:b7:32:86:c5:15:8a:0e:df:26:23:be:c7:64:f8:99:3c:
         2e:5a:10:b3:aa:8d:72:59:1f:4b:54:50:0b:5e:50:ae:70:a6:
         bd:de:80:69:05:6f:4e:cb:46:86:b7:60:09:55:de:c8:c9:f7:
         7c:d4:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:02 2025 by rpki-client