Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa
File:                     59c6ff65-9683-39c8-948a-8e776c619f8f.roa (raw, json)
Hash identifier:          D9zzmqdAchKuYTzFenpMBz7esi8z0/uEMppExYu2ABg=
Subject key identifier:   44:2B:3A:8E:DE:1C:DD:30:7E:24:DC:F3:A2:50:AF:64:4B:C9:89:A2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5247142F8DFF0084546780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.31.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:47:14:2f:8d:ff:00:84:54:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7aef3218-8e92-4763-b7d3-536364ed8db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:9b:f3:b3:59:d2:68:32:4e:d8:75:0d:06:
                    a1:5b:6f:f9:40:a2:f9:42:9a:2b:e6:ce:29:84:1c:
                    a8:de:46:db:4d:07:e0:f3:da:be:95:a6:0e:a2:70:
                    af:8f:37:47:ff:15:b1:c8:94:60:6d:12:dc:ae:5b:
                    97:5b:f5:ca:23:1e:bb:89:3e:50:f0:0f:89:96:01:
                    b6:32:15:8b:68:2d:bf:a6:87:4c:0f:ad:52:8b:8e:
                    fc:d7:c8:01:dc:94:76:ad:91:ab:50:cf:b0:fe:c4:
                    c7:a7:61:e9:45:0f:8b:7f:08:43:5a:01:4d:4b:af:
                    00:84:06:6b:59:f7:83:c0:da:18:cf:40:be:35:e4:
                    49:1a:e8:17:99:7e:26:64:00:9d:fc:70:fb:4c:a0:
                    b4:01:64:9c:d9:9f:5c:f7:7e:8f:36:48:e1:3e:dc:
                    ba:10:eb:2b:e3:48:27:ea:21:6e:26:0f:59:a0:50:
                    93:9f:7f:a3:44:cc:7c:68:2e:49:89:3b:20:24:90:
                    8e:e9:3b:dc:91:1c:ad:15:1c:d3:49:11:a9:ce:a3:
                    4c:1b:96:1e:fe:6c:19:67:25:a2:cb:4e:e9:5d:c7:
                    e3:8d:cf:bb:a9:b3:58:93:2b:d9:b4:91:49:3f:7c:
                    ba:ac:49:bd:f8:cb:17:ec:71:82:8c:8c:23:96:98:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2B:3A:8E:DE:1C:DD:30:7E:24:DC:F3:A2:50:AF:64:4B:C9:89:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59c6ff65-9683-39c8-948a-8e776c619f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:20:1a:04:ac:c3:8a:e8:44:aa:5e:f8:66:77:41:54:7c:
         22:30:35:f3:a4:04:8a:c6:26:31:52:c0:bb:be:5c:00:cf:0c:
         aa:94:55:ec:16:fa:1a:be:69:4a:dd:2f:73:68:13:3d:d3:3e:
         0b:95:18:e9:e9:9c:b8:53:e9:23:df:35:75:17:f0:7b:32:89:
         2b:4c:e8:fa:13:88:85:82:84:8d:6d:9b:8e:3f:5d:ba:e7:a1:
         05:22:fa:05:56:e3:bf:01:dc:5c:48:9b:b2:7d:4b:df:d1:95:
         7e:e1:9f:a5:cc:77:3c:99:09:09:72:13:79:2c:79:6e:04:8b:
         69:1c:2f:77:e2:40:55:79:b7:44:b8:72:dc:c6:12:0f:cb:5e:
         4d:b3:16:00:6a:8c:59:5c:db:07:04:4f:c4:91:32:5d:ca:78:
         64:47:b5:46:dd:fb:6a:22:1b:7c:94:e5:45:da:74:a4:a8:9d:
         97:b2:ea:56:06:ae:cc:76:0c:d9:bf:88:91:89:ff:77:53:0a:
         8c:a6:9b:11:82:d6:40:99:30:82:5d:d4:cd:0f:4f:89:f0:2d:
         24:2f:10:5d:4b:af:5c:d5:9f:a9:ff:00:78:0b:95:ed:a1:ca:
         8e:4b:a1:8d:b6:5c:dd:a3:af:76:8b:aa:d6:32:2f:5b:92:f3:
         c6:7c:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:25 2025 by rpki-client