Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
File:                     f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa (raw, json)
Hash identifier:          npPW9xsmTo8HL4JHCyOCf2St84YbBxpHALCG/yNG2ow=
Subject key identifier:   18:F3:1C:6F:55:77:27:C8:12:58:C7:EB:99:68:B4:EF:AB:77:9C:D6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16123C933040CCA9CBE1680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:23:c9:33:04:0c:ca:9c:be:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0162e771-f2ad-40eb-b204-58697508f397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:bb:90:43:a3:f7:3b:cf:4e:f6:62:15:ab:
                    bb:c4:57:a9:51:f6:91:ce:15:11:39:ed:61:73:6e:
                    2d:38:57:b5:3f:7d:50:14:96:bf:21:11:60:a6:db:
                    63:bb:a9:c6:f1:a7:4d:83:0f:5b:53:95:4f:7b:d1:
                    2f:89:01:b5:cf:cc:54:53:f9:39:88:f2:d9:d7:7c:
                    21:2d:3b:1b:22:a6:99:8d:cb:c0:4a:15:78:a9:bb:
                    0c:ff:5f:8d:e6:75:1c:99:3a:f1:07:9a:4f:54:a9:
                    2d:bc:f6:48:73:1a:e4:f7:c9:10:ec:23:ca:c4:a1:
                    e3:d3:a2:bf:26:c3:76:25:fd:2d:b4:cd:bd:5f:1f:
                    33:03:5d:b1:d0:13:7a:62:b8:ca:f9:6c:47:8c:52:
                    4e:39:97:fc:a0:d9:38:59:e5:27:4f:39:8b:d3:b1:
                    1e:bb:b0:87:24:79:a2:8f:13:4a:a1:8e:a8:aa:26:
                    59:8b:cd:51:aa:4e:06:a8:a5:18:66:22:84:68:8a:
                    e7:3d:54:64:51:35:c0:11:68:34:90:89:4f:9a:6b:
                    8a:08:b2:d0:25:33:a0:89:d6:19:3e:9f:d1:fc:e2:
                    3e:c2:ea:cb:39:1d:c4:00:4b:19:e1:a1:0d:47:2f:
                    17:07:9e:cf:d2:46:b6:52:e7:45:2f:c5:a6:0d:a9:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F3:1C:6F:55:77:27:C8:12:58:C7:EB:99:68:B4:EF:AB:77:9C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f38cddc3-1521-37eb-9b50-3f31ae1f0185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:81:b2:28:e1:4a:b9:ad:a6:97:d6:01:32:6f:2a:a1:4c:9b:
         2c:65:ce:d7:fd:8e:8f:c4:06:9d:a8:bf:e6:24:06:14:17:8a:
         26:1b:a8:7f:dd:e7:9d:3f:45:6c:76:76:25:3c:64:8a:00:fe:
         ed:31:b5:ce:8e:58:3f:b8:8c:8c:00:c1:da:03:9b:c1:3c:c1:
         65:ee:6e:4a:a4:57:a8:ec:00:f8:87:ac:68:92:f8:b6:06:49:
         fd:80:de:e7:b9:63:99:11:de:bb:15:99:ff:fd:e2:aa:24:39:
         28:7d:56:9a:cb:bd:78:75:9c:d6:9a:20:ef:33:13:fb:b2:ef:
         88:f7:b8:e4:49:79:45:bb:11:a8:40:90:59:7f:73:2c:ae:2c:
         7d:58:be:b0:c2:78:4f:85:b3:bb:84:65:4f:f6:b9:bd:ce:29:
         c3:e2:b9:76:0a:c6:bf:67:0f:47:ba:eb:7e:c6:eb:d9:6f:b8:
         ac:69:c4:ad:6a:dc:99:aa:2c:8c:a5:44:f2:5c:d5:fa:96:06:
         f1:f0:49:f4:75:94:2f:bb:9a:f7:70:93:e5:88:e9:af:df:97:
         4f:c7:30:7b:ae:fc:51:70:a3:61:24:e4:7f:bf:3d:96:c7:c5:
         a9:e1:cd:85:c7:7b:8b:bf:29:dc:97:13:0e:50:7f:ef:bc:ed:
         f4:57:2a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:42 2025 by rpki-client