Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
File:                     52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa (raw, json)
Hash identifier:          YMISut2TszyjM4wiz697wdT1Ip/QrZ+vNWIVhx0On2g=
Subject key identifier:   B3:EB:80:50:CB:B8:F7:A1:95:6C:AD:B9:72:52:A0:AB:79:87:05:82
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524A79B9CFFB56D48B1C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.44.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4a:79:b9:cf:fb:56:d4:8b:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=143cc928-47da-4ead-a447-275dc0855627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:fe:31:15:4f:07:e9:8d:ba:c3:8b:87:ea:
                    eb:2f:18:f2:83:1e:ed:a7:44:d6:99:36:6f:8c:a1:
                    37:37:83:0b:72:16:10:b0:f0:73:8f:58:43:f5:0d:
                    1a:c3:52:13:67:c3:ea:9a:94:7f:fb:ba:95:46:d5:
                    85:3d:ab:2d:a2:20:80:71:fa:82:79:bf:50:a9:a7:
                    1b:79:c9:aa:25:17:8a:e7:a6:74:4c:e4:45:78:23:
                    c4:d5:4d:84:ba:ba:39:e2:20:8d:9b:14:78:ff:4d:
                    ad:9b:00:f2:eb:33:4f:d9:31:7a:cb:5f:79:c1:ab:
                    62:ba:b6:43:3a:19:f6:60:ea:67:8b:ec:df:f1:54:
                    3a:14:fc:9b:93:29:b1:17:a1:3b:b2:61:77:7d:12:
                    c9:1c:25:02:48:1e:a4:e6:51:2c:c8:3a:e0:35:35:
                    01:4a:0e:37:a0:de:7f:7b:3f:2e:1c:0b:04:b8:fb:
                    6e:68:7e:b5:1f:6e:bd:67:24:29:1b:c5:d2:cf:56:
                    72:fd:18:f5:18:66:e5:7a:dd:67:18:d4:0b:7c:2c:
                    04:1f:af:64:a9:b7:c9:39:2b:57:49:c1:e1:59:af:
                    bf:c0:37:bc:a2:4f:33:8a:13:69:9a:ab:b3:0e:16:
                    aa:af:9d:40:23:eb:49:2a:c4:b4:12:7e:cc:d5:73:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:80:50:CB:B8:F7:A1:95:6C:AD:B9:72:52:A0:AB:79:87:05:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52ae398c-fb5c-39a4-baca-f8eb99e8bf99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:13:92:20:22:6a:2f:0c:14:7d:87:84:d7:2d:a7:ac:99:81:
         20:ca:db:47:15:9a:dc:01:43:bc:6c:4f:03:09:c3:20:b4:6a:
         bc:ae:ea:ed:8c:64:0f:93:7d:68:b3:e1:a5:16:51:82:9d:9c:
         51:11:fa:fe:b9:9d:72:de:26:fc:9e:c8:b2:62:b0:42:b4:88:
         1f:bf:62:df:f9:9d:77:da:5e:d3:c9:22:e4:ff:ba:6f:69:3a:
         f9:74:9e:f9:dd:8a:87:62:79:86:1c:cd:bf:0d:9f:70:d2:50:
         60:e8:a0:1f:21:92:45:32:b0:2d:36:c2:8e:b5:2c:ad:67:fd:
         3f:75:5a:4a:cf:14:9e:07:a7:43:f3:da:c9:6f:9a:a9:15:b2:
         a1:01:b0:1d:21:1e:09:24:e9:31:13:bd:eb:3a:18:97:bb:63:
         43:7e:a3:e7:c4:38:d4:21:16:fa:f9:5a:8e:b0:77:09:ed:4b:
         dc:e1:d3:5a:ad:ec:0b:06:dc:5d:47:50:99:28:8e:3b:fb:27:
         f8:2b:86:65:f5:15:d9:10:ce:89:c4:8b:cf:2d:f5:76:e3:24:
         0b:4e:49:79:c3:30:76:bd:93:40:9c:d2:01:7c:9f:88:56:74:
         9c:f1:b0:3e:ad:e7:c3:d7:7d:08:80:86:81:41:68:20:4f:36:
         ef:ba:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:58 2025 by rpki-client