Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
File:                     e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa (raw, json)
Hash identifier:          UA6SMmfRY4uqEpEbEKdMg5fBLxuiSE3dp9yupDGTrbc=
Subject key identifier:   C7:5C:ED:4F:59:43:53:D6:F2:5E:56:E7:13:12:FF:BC:E8:32:8B:F4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5249888339E352DF2D2000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.31.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:49:88:83:39:e3:52:df:2d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=0dff2c84-9884-4b10-a39f-f7f403996b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:ce:63:9a:96:76:71:55:3d:84:58:97:9f:
                    be:a3:8f:83:a3:2f:19:26:df:c2:ac:9c:fa:dc:e4:
                    c6:c9:98:ca:ee:89:a8:38:24:fe:b2:90:71:12:75:
                    57:81:66:91:83:a6:d6:62:60:70:2f:0e:1e:09:9b:
                    d8:8e:35:3c:4a:29:e0:4d:6e:8e:b0:7a:3b:2c:f2:
                    40:7e:4e:35:38:a4:0d:7f:9f:71:49:66:ce:f9:28:
                    bc:26:3e:ab:19:f7:b4:2b:07:bc:78:62:a0:31:99:
                    8e:56:80:dc:3a:4a:49:19:09:4a:aa:b8:e2:56:1a:
                    99:32:ad:bd:60:7c:0a:07:1e:69:c2:2e:58:61:10:
                    8f:1f:54:c7:70:66:af:d0:ae:9e:46:6d:19:28:9d:
                    ad:1a:69:0e:00:f7:27:ec:1f:4c:ad:c2:9b:5a:55:
                    fd:42:e3:62:1f:5d:b6:07:29:b7:ca:88:c6:17:00:
                    1e:3a:9a:09:1a:df:2f:0f:29:80:f2:ee:b3:02:24:
                    ea:d1:8b:52:a7:11:b7:dc:ca:19:d2:47:07:02:1d:
                    25:44:ac:89:b2:24:c6:f4:21:de:81:78:76:be:d4:
                    d8:da:34:e1:b1:1f:59:24:43:45:60:61:a0:07:e8:
                    d1:78:eb:0c:3e:2d:ab:fa:86:f6:8f:b4:8f:e0:96:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5C:ED:4F:59:43:53:D6:F2:5E:56:E7:13:12:FF:BC:E8:32:8B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e79e23f0-425f-3fb5-a5b6-c5b23445a2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:dc:5f:49:fd:f2:9d:b8:cf:03:03:b3:91:54:aa:91:1f:7e:
         7e:90:5e:54:8f:e7:18:a7:4a:14:3e:b4:11:c2:f7:e1:be:5d:
         b6:2c:e4:d6:fc:6f:4a:0f:c0:3d:b1:c7:22:97:21:f9:9a:6a:
         fc:17:00:ed:67:af:c4:3e:18:4b:55:db:a3:32:ce:69:df:72:
         ad:d5:67:53:4a:88:1c:52:ef:80:2e:c0:19:2e:b9:ad:03:6b:
         9c:6f:99:c5:23:34:b8:93:fa:5f:b3:f9:a9:58:f5:c5:26:16:
         d4:d5:d3:1e:ab:43:f2:db:d5:3b:46:e5:6b:d5:08:17:f9:35:
         ca:41:74:97:c3:ff:7d:7f:c8:0b:42:23:12:0a:01:97:a6:28:
         2f:2d:dd:ae:4d:32:be:83:e6:39:dc:02:b7:b6:d0:58:f5:43:
         ab:08:e6:12:27:d6:12:0e:74:7f:c5:6f:34:b2:6a:94:47:6f:
         6e:60:06:3a:83:a6:87:d0:5f:93:b9:b1:ae:4c:ab:df:74:3f:
         b5:1d:f5:8a:f4:bc:a2:17:30:9f:4d:e6:0b:d1:a4:86:5e:a6:
         4f:9c:c2:18:65:9f:85:4b:28:e1:7d:80:55:62:1e:ea:2a:74:
         eb:0d:10:e7:49:1d:33:02:99:31:cc:e2:78:b7:a2:81:7f:ff:
         dd:e5:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:52 2025 by rpki-client