Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
File:                     a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa (raw, json)
Hash identifier:          rSSQiVbwtn/fvZcGbGEWyB8hNa91ujd5YAUgTmcH0x4=
Subject key identifier:   A0:FF:B8:03:C3:1C:08:4F:1A:79:76:65:18:A0:51:2D:CD:41:6B:67
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521CC3655555B05B553440
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.46.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1c:c3:65:55:55:b0:5b:55:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7bab4fc2-b37c-458b-8ca2-b928378318af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:ed:b5:be:2d:80:6f:fb:3a:a3:d9:0b:3f:
                    98:74:19:5e:bb:46:5d:56:f8:9a:37:3a:4c:dc:c5:
                    11:72:a9:35:15:65:80:69:88:bf:d1:67:03:1c:b2:
                    d6:0f:e8:e8:e1:8f:49:fd:4f:8a:d3:33:22:0e:c4:
                    93:da:54:59:22:ae:c5:11:a2:a3:09:e2:34:4d:6a:
                    60:d8:a4:c7:a7:f3:fc:49:07:8e:24:f7:90:c3:25:
                    99:62:eb:a3:43:6d:39:0e:29:5a:94:32:7e:51:72:
                    5f:1c:80:55:6a:53:dd:da:7d:26:4d:49:54:da:f8:
                    73:1c:4f:02:89:3e:fe:47:2a:5d:7b:84:45:12:de:
                    d0:a1:7a:cf:09:28:16:0d:03:f4:18:52:99:a6:41:
                    fc:6b:58:be:1c:9a:e7:30:7e:89:71:4b:19:d3:35:
                    65:65:b0:b2:7d:a0:3d:70:7e:2c:bb:fd:e8:72:a9:
                    b5:97:f4:2e:7d:00:94:ab:a6:93:b0:6d:de:81:c5:
                    75:49:5b:36:ac:d4:48:9e:98:a7:09:68:a0:ea:be:
                    c9:78:71:4c:12:c1:e2:3f:9f:6f:d6:34:ed:34:22:
                    b6:9a:32:f7:16:07:93:51:4f:70:9c:13:76:6a:c2:
                    40:91:fa:d6:39:a0:c4:3f:19:51:b6:a2:5b:95:8a:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FF:B8:03:C3:1C:08:4F:1A:79:76:65:18:A0:51:2D:CD:41:6B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:70:03:3f:6a:42:4b:9b:5e:72:7b:13:02:39:e7:ff:ef:
         1c:d0:79:b8:ef:7c:f6:6e:c3:88:ef:c7:27:34:87:d5:79:3a:
         bb:91:90:8f:83:46:eb:4a:49:ae:c3:94:29:d4:3d:ca:7e:9b:
         83:1e:a9:6e:77:53:70:18:43:d4:46:6d:9a:b8:bc:a8:69:55:
         95:c1:cd:f3:8b:b1:ee:06:4b:a7:a9:0f:d8:b6:68:b6:1d:c7:
         57:7c:68:30:de:02:d3:9e:ae:88:91:3d:a5:7f:c1:0d:98:2a:
         99:44:91:1b:81:94:2f:52:9c:20:b0:bc:d5:bc:39:65:f1:18:
         4d:8e:95:f0:c2:29:33:3c:e2:dd:f0:85:02:06:61:67:34:34:
         bb:da:28:24:a3:a5:50:ea:78:60:60:84:19:8d:62:42:e0:c1:
         d2:a8:92:7c:48:10:4c:e9:38:37:0d:a3:1a:83:3c:55:2b:dc:
         15:7f:6e:0c:ca:2b:ae:bb:b1:94:0c:ad:0c:79:43:a3:2a:d9:
         35:b8:b5:3c:1d:63:18:76:1b:3a:68:bf:59:f9:cc:46:7d:21:
         07:be:8f:9e:2e:3e:db:da:e9:f2:38:7a:54:64:52:cf:86:f9:
         fc:97:34:3c:ea:ce:ea:ad:c8:8a:70:c5:5e:5d:87:8d:16:2e:
         fb:97:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:27 2025 by rpki-client