Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/910c0473-41ea-3b88-9b58-62fa19c97861.roa
File:                     910c0473-41ea-3b88-9b58-62fa19c97861.roa (raw, json)
Hash identifier:          N8QDfkN5+i3enLxDusOLf6ukMq2DTHjBs2ByP7Tsj6Y=
Subject key identifier:   5E:16:64:7A:62:4F:CF:22:46:FF:66:BE:C1:DF:D2:6D:36:44:1A:F7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521D8AE351B65E27465640
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/910c0473-41ea-3b88-9b58-62fa19c97861.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.46.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1d:8a:e3:51:b6:5e:27:46:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7f38fa89-1f7a-4180-a932-ae605c45309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:44:59:dc:1a:0a:7b:01:c0:44:21:26:33:
                    7a:83:5c:45:bd:b9:45:86:ce:a1:d8:dd:db:a3:52:
                    1d:2f:5c:77:0e:8d:9b:eb:5b:f2:1a:ed:73:68:64:
                    da:97:38:20:ca:7e:0f:c1:56:d4:f9:91:76:52:74:
                    5b:be:64:b3:bd:3f:33:27:22:98:9e:2d:1b:e2:be:
                    39:55:6d:c4:37:ba:da:35:87:8a:7b:d4:e6:90:e4:
                    30:51:e4:28:8a:6f:85:98:16:5b:24:49:50:e3:28:
                    9e:b6:83:ba:0f:6a:a2:03:54:03:80:b9:38:7a:54:
                    24:02:c1:5a:62:43:20:43:f4:ed:85:36:59:56:eb:
                    41:81:7f:ea:b0:1e:f6:16:52:7d:d2:bc:d2:4d:67:
                    80:5c:88:01:ce:1e:8e:a7:db:d7:8f:e8:7a:7a:73:
                    df:e0:05:68:33:37:fd:61:00:e3:4e:9b:73:02:e2:
                    68:9e:59:5e:6e:2d:5c:0a:f8:8b:0a:41:4a:5c:70:
                    45:01:97:31:ef:da:21:8a:46:0f:a9:7f:8e:42:fb:
                    fb:3e:b8:6e:b2:09:78:e7:c5:31:a7:81:7f:dc:38:
                    2c:54:3f:65:5c:25:0b:03:f2:f2:3d:1a:c0:a9:a4:
                    0c:07:c0:68:a1:14:a4:5b:02:26:d0:88:4e:c0:c3:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:16:64:7A:62:4F:CF:22:46:FF:66:BE:C1:DF:D2:6D:36:44:1A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/910c0473-41ea-3b88-9b58-62fa19c97861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:42:77:40:e4:5f:cf:e4:7e:2f:8c:33:44:12:62:ad:6a:
         7a:af:5f:ea:c8:53:bf:2c:ac:a7:c2:43:d7:15:e8:79:7d:97:
         d2:3c:38:3d:a4:51:11:30:f6:bc:ac:4e:0a:13:d2:97:56:b0:
         04:91:cb:b1:83:8e:2e:4a:69:bc:d1:60:ff:19:66:49:2a:d9:
         54:62:83:64:82:b6:5b:c3:2e:26:96:3d:be:18:66:96:56:06:
         8e:92:3a:03:06:81:5d:7e:be:b4:20:49:8d:59:04:8a:1c:5b:
         f0:1e:fa:86:72:2f:28:17:09:39:41:15:01:ea:11:f2:bb:e3:
         eb:a6:fc:4e:1e:c9:5e:0c:81:bf:58:5e:31:ff:27:63:40:4c:
         64:93:37:04:7d:86:6b:c4:8f:b9:bd:36:9b:96:05:9b:4a:f8:
         54:f6:64:2d:03:6f:4b:31:5f:ce:32:f0:23:c1:d5:14:d5:1b:
         59:3e:83:87:2a:9b:a5:9d:aa:03:43:cb:36:97:fe:b7:f1:f9:
         49:3e:c4:8c:f8:e8:57:14:af:c7:5b:16:50:2a:8c:04:9d:b2:
         05:e4:8b:15:37:43:13:5c:0b:08:45:ef:85:df:be:72:8e:e0:
         d7:6f:b6:f2:4b:2d:83:63:a5:6f:cf:71:05:d0:6f:1c:e3:16:
         d0:13:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:12 2025 by rpki-client