Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
File:                     e70d00de-ba3b-3298-a862-b8e63df24836.roa (raw, json)
Hash identifier:          y/riPlqnIAxQy2aKf/X48vy+nnUwrBdYuPvYA59s9Uw=
Subject key identifier:   DC:44:ED:5F:32:49:9A:24:58:EB:1F:6E:EC:B4:ED:CD:5C:3E:93:D7
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584AC7111E40396E4E93360DA8B8
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     12009
IP address blocks:        65.38.48.0/20 maxlen: 20
                          72.35.192.0/20 maxlen: 20
                          216.228.192.0/20 maxlen: 20
                          2607:f248::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1e:40:39:6e:4e:93:36:0d:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=045fd436-6303-4799-bc8c-e83742ad4ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:aa:96:9f:ee:1e:92:00:2e:f3:60:17:de:
                    b3:0e:76:2f:b5:05:c8:90:cd:cd:e6:a3:ab:e3:3c:
                    fb:76:a2:b1:9a:56:89:a6:38:3b:39:29:ee:6d:b6:
                    4e:db:93:db:6d:af:e5:8d:d2:54:1f:95:68:ac:31:
                    5a:1b:1e:18:d5:8d:69:e8:5a:6b:ff:5a:c3:a5:73:
                    b8:8d:ac:8f:9b:bf:af:39:df:bb:c6:93:fd:48:cf:
                    55:ae:22:a5:2d:c9:92:e8:73:9e:74:4f:ac:93:5c:
                    33:44:b8:3c:15:ad:8b:b2:0a:26:f2:32:27:87:9e:
                    0d:8f:84:ba:39:61:7e:f7:6e:5a:e7:f6:64:51:38:
                    1b:59:08:61:d8:57:8e:f1:2e:53:a0:03:b3:1c:d7:
                    9e:f8:a3:d9:be:8b:d6:9a:2f:b4:18:58:19:e5:dd:
                    37:1f:0c:1f:09:c5:9b:6e:92:f4:78:33:c4:3a:0f:
                    23:37:83:e4:13:0d:66:13:a7:e3:c9:0d:ef:70:f9:
                    b0:58:88:d8:f9:4c:1c:a8:56:3f:84:92:7a:eb:cb:
                    6e:e5:54:fb:ae:08:b2:0f:4a:29:ac:51:10:bc:df:
                    01:f9:4b:e3:d5:e8:19:3f:4e:0f:73:d6:9a:12:55:
                    ff:2b:51:27:ae:2b:1c:0c:fc:81:8d:fa:c2:f2:45:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:ED:5F:32:49:9A:24:58:EB:1F:6E:EC:B4:ED:CD:5C:3E:93:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.48.0/20
                  72.35.192.0/20
                  216.228.192.0/20
                IPv6:
                  2607:f248::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:a1:01:1e:b7:38:bd:a9:8b:1e:1f:3b:de:5a:b8:76:e3:
         c5:5a:48:46:d0:a7:2a:85:c0:64:03:e6:a2:47:b5:aa:28:f2:
         a6:a3:16:ae:3a:89:48:c0:7a:08:6a:94:f4:47:3a:bd:d2:fd:
         7e:e4:77:cc:90:61:5f:92:2d:94:79:fc:92:14:55:21:33:9e:
         74:07:c0:53:90:0a:b8:04:91:9e:8c:b4:ad:83:2d:b6:29:a3:
         93:92:b3:ab:e3:2a:f9:6b:d5:75:df:5b:74:8b:ea:97:0b:08:
         7f:de:45:2b:5b:59:50:1b:3f:c4:7f:93:22:5b:a4:82:43:b2:
         07:f8:20:37:44:18:8a:99:0d:42:25:28:92:05:cc:e4:e7:25:
         6e:fe:a1:2b:2d:6a:e2:82:73:b2:9a:4e:98:19:5f:3b:90:79:
         e2:df:a1:a4:44:e7:1e:77:e6:91:af:67:f0:28:01:a6:c9:6a:
         09:78:1f:8c:5f:2c:5e:36:8d:33:0e:3c:12:fa:df:cf:03:fa:
         6c:bb:25:b2:55:df:96:e2:78:b7:d2:bd:8c:44:64:59:46:20:
         ee:53:13:a5:b8:b9:fe:f6:ee:47:23:76:0f:f7:c3:87:ff:57:
         f6:b5:53:0e:4c:b1:45:51:82:31:73:85:54:fc:41:af:68:bd:
         8a:f6:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:19 2025 by rpki-client