Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa
File:                     c69098ee-403b-34a9-897d-5af36804bdac.roa (raw, json)
Hash identifier:          4OhXf06o2hzpYAMQxcTP1AEXg/DUV8zS45vWVBQsD2U=
Subject key identifier:   A4:20:91:45:8E:4D:86:C3:B5:17:3D:4C:A1:39:F4:D1:6A:4A:65:7D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524E14EBB319AF9FA53960
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.31.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4e:14:eb:b3:19:af:9f:a5:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=beba9f8f-0e4d-4949-8400-8820442837b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:fb:d2:28:42:39:2d:0e:45:6c:2e:0c:fd:
                    bd:7e:eb:ba:52:eb:3b:e1:a0:08:50:45:39:0a:92:
                    e3:30:89:e5:e1:b4:f3:49:a1:9a:76:0f:6c:30:3b:
                    73:c3:21:93:bc:3a:df:9a:5d:39:ea:75:52:59:22:
                    5c:fd:44:ee:d2:e1:0b:8a:99:ae:93:c6:97:ed:ec:
                    68:a1:29:5e:71:ec:f4:01:a7:cc:0e:11:e6:2b:42:
                    c4:2f:77:99:30:d0:1c:24:9c:97:2c:2c:f4:db:fb:
                    e9:94:d1:cf:67:2f:21:61:ad:a5:52:18:f1:ae:4e:
                    66:89:8a:04:ec:61:d1:56:a3:aa:1e:35:4e:6e:65:
                    85:08:9a:42:b5:6f:dd:b0:79:7c:a1:fc:67:de:42:
                    04:52:84:3a:ba:8e:71:18:07:69:47:95:8b:04:b5:
                    a8:30:45:d0:37:f5:6d:62:85:57:f0:76:d6:83:0b:
                    d3:ae:c7:3f:72:5c:06:7f:a7:30:80:a3:8f:4f:40:
                    66:f3:2e:58:d2:1e:ec:10:db:85:7c:c2:4f:52:6e:
                    fe:c9:8a:f9:8b:87:62:bd:2e:d7:fe:c9:ce:8b:27:
                    e2:8a:01:0d:82:cb:33:dd:a2:02:77:71:aa:bb:96:
                    fc:71:9a:db:36:7c:a8:a9:1c:6e:6e:b3:a5:bd:31:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:91:45:8E:4D:86:C3:B5:17:3D:4C:A1:39:F4:D1:6A:4A:65:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c69098ee-403b-34a9-897d-5af36804bdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:03:2f:1c:de:c1:be:44:57:24:0c:25:31:00:b8:21:c4:
         22:e2:d8:20:e7:4d:96:d4:e4:c2:76:59:7a:5f:4e:41:75:1f:
         6c:f8:31:b5:6e:95:ed:64:7d:d5:18:36:57:2f:70:5a:30:50:
         46:f3:38:01:00:87:19:df:42:71:81:d8:7a:92:ce:7a:33:3f:
         8b:f2:ee:9a:39:76:36:79:9a:fa:71:da:17:9b:7d:af:5b:68:
         78:ea:22:fc:dc:f7:15:f4:da:bf:01:eb:c8:3d:93:4c:2a:79:
         b0:6d:f9:a0:57:e3:fb:f4:49:16:65:5c:17:5c:1e:80:06:7a:
         04:cb:e4:7d:a3:6e:a3:f8:14:81:71:8c:f6:0b:51:2e:85:1e:
         d0:02:d9:63:5f:99:f4:39:f6:e8:52:74:16:94:d3:15:dc:ec:
         35:fb:de:71:3b:99:99:02:34:f8:ab:72:5b:5a:ce:0b:13:6e:
         1b:6b:0d:d1:17:cf:43:47:b8:8f:fa:b3:8f:c9:e7:52:8e:51:
         28:69:77:92:a5:7e:7c:09:4b:02:b4:75:c0:4b:32:f4:37:14:
         df:c5:ba:49:48:00:37:12:61:20:94:56:61:50:17:24:25:e9:
         78:2c:72:a6:2b:29:62:46:46:b0:5b:34:5d:6f:58:2d:8d:44:
         77:f2:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:53 2025 by rpki-client