Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
File:                     c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json)
Hash identifier:          uK2WSchymZmw4lxiVTrXZRpLv21KK+OJeNnlJjzF2pI=
Subject key identifier:   E5:82:B4:5B:E8:E1:CC:57:AD:3B:6E:B6:81:75:4A:6F:5D:00:11:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524AAA8A24526E0015A000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.31.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4a:aa:8a:24:52:6e:00:15:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=692d76cb-b15f-459d-89ee-de9a0d2a8744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:29:1f:4b:3a:54:76:4a:4a:35:0f:15:0d:
                    35:d6:ea:47:c8:86:ee:66:86:1d:6a:f9:7c:16:58:
                    07:18:66:95:58:4c:d1:07:27:30:2f:0a:1e:7e:f0:
                    06:59:d2:dd:ab:22:10:1b:ba:d5:cc:03:2c:ea:7c:
                    44:66:9f:7f:62:ac:5b:89:2a:ba:f0:4d:d5:14:e7:
                    18:1f:2b:09:75:ec:21:2c:97:69:f5:bb:17:40:dd:
                    ea:22:d3:21:f8:ce:97:ba:c1:6c:95:13:6d:69:c5:
                    fc:e7:cd:c9:cc:0f:5a:de:32:2a:7b:b9:dd:94:fa:
                    32:92:9d:0d:9c:f5:b3:7f:86:fd:5c:b8:b1:36:80:
                    46:ca:6a:b3:dc:6a:5d:37:89:67:74:19:fc:89:ec:
                    85:4d:3b:31:d1:79:4b:10:9c:d7:89:83:2d:1c:e1:
                    7f:06:c6:70:5e:34:f7:ec:60:03:d3:33:c8:6b:72:
                    b8:07:6b:97:6f:7b:7a:89:81:9b:17:8a:77:de:77:
                    60:03:68:3b:66:98:ca:e3:81:52:64:29:3a:d1:2e:
                    5f:77:75:d0:15:c7:3b:17:36:0e:6c:43:ee:fc:ce:
                    d8:ca:d8:61:60:d0:7e:ea:2f:da:eb:67:99:91:d2:
                    2a:24:5f:ef:db:3e:37:8b:0e:bf:5c:91:15:d4:82:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:B4:5B:E8:E1:CC:57:AD:3B:6E:B6:81:75:4A:6F:5D:00:11:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:17:08:71:b6:f8:47:b1:f3:f3:ab:19:6e:60:79:52:53:
         6a:ae:5f:fc:e9:17:ea:ca:87:f8:e5:4b:9b:3a:e5:5e:93:b5:
         80:d2:db:15:a1:c0:6c:6e:c4:90:71:16:09:ba:38:ac:5a:4e:
         71:73:ae:25:98:1e:06:1c:15:ca:64:9c:73:3f:b5:02:0a:a9:
         4f:7f:30:78:f7:67:44:80:be:07:ea:04:12:2b:3b:a0:46:c3:
         8e:41:b4:6d:6b:85:d6:30:20:cd:bc:f0:d7:f0:ae:30:37:af:
         e7:5f:a5:c1:d9:17:f1:5f:22:f8:1d:18:ee:80:62:e5:57:9b:
         a9:46:bc:15:37:d8:49:60:93:7a:08:61:66:5b:36:72:34:50:
         b1:da:37:8e:fd:5f:a6:16:ba:11:f8:b5:e6:61:0e:9d:28:1c:
         72:d2:08:5c:41:ae:9f:66:6c:fb:0f:0e:6d:64:f5:fb:0f:41:
         da:75:3f:1d:2f:ce:97:7b:59:dd:ed:e0:87:08:f5:bd:8f:33:
         6a:7e:8d:3b:db:dc:79:bd:74:29:81:14:0d:d2:dd:d4:2a:4c:
         63:b6:35:b5:ff:56:91:15:ca:15:ba:75:6c:44:67:c0:b3:3b:
         18:7c:63:85:47:fb:c3:3e:dd:aa:56:a2:23:ab:00:04:62:36:
         07:16:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:36 2025 by rpki-client