Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be1a9a0-3058-3a5e-bfc2-f78ed220ac3f.roa
File:                     0be1a9a0-3058-3a5e-bfc2-f78ed220ac3f.roa (raw, json)
Hash identifier:          seRb/CZohRndjRcSZ0fuofoIlbjy1quRRNbwt1HTImk=
Subject key identifier:   AA:14:5F:0A:F5:74:65:05:D0:E6:10:15:DE:BD:2E:4F:31:7D:59:8B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962662E73BDA70BB816C28
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be1a9a0-3058-3a5e-bfc2-f78ed220ac3f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        97.69.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:26:62:e7:3b:da:70:bb:81:6c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=13593fc1-a59a-494b-80f2-c4dfd3ea000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:be:2f:03:21:1e:83:a5:c2:45:60:db:43:
                    1e:a6:04:89:5c:9b:df:08:07:2c:e7:ab:1e:ae:d1:
                    8a:d6:8b:f7:25:83:40:6c:a9:ef:24:56:25:f6:5b:
                    67:b6:05:b7:f5:c6:41:20:06:3b:81:41:79:da:b4:
                    fd:20:ba:a4:21:d0:e3:33:62:a4:ca:6b:bd:9f:4b:
                    06:2c:16:e1:9f:b0:37:ae:45:b2:86:53:7f:fd:7f:
                    57:cf:f2:56:6b:fb:24:a5:5e:e4:57:1a:2e:37:65:
                    d6:51:d8:d9:f2:3b:fa:a2:3b:1c:fd:60:71:25:b0:
                    dd:7f:8d:c7:2c:51:7f:ca:50:ce:30:40:ec:f8:24:
                    0c:22:bb:8c:85:54:21:d6:a3:37:26:c0:07:79:ca:
                    b1:67:46:fb:f1:77:f5:66:41:10:25:9b:f8:fb:34:
                    79:65:12:70:d6:30:e8:78:cb:5f:13:5b:35:b7:bb:
                    7c:53:fd:06:b5:29:79:11:b7:29:dc:cd:eb:dd:f7:
                    20:6f:83:1a:e4:89:34:09:c9:a7:ba:cf:e2:e4:af:
                    dc:bc:47:79:28:6e:19:e2:e8:b9:cc:71:50:28:d5:
                    76:c5:73:b9:29:11:b0:cf:a8:f5:f2:64:c2:22:9e:
                    25:bc:15:b2:65:e1:f5:67:ff:eb:79:77:3e:fc:2f:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:5F:0A:F5:74:65:05:D0:E6:10:15:DE:BD:2E:4F:31:7D:59:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0be1a9a0-3058-3a5e-bfc2-f78ed220ac3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:77:9a:51:44:49:ef:db:cb:8c:3d:19:34:5b:c6:9b:3e:94:
         f4:35:5a:4f:89:c1:3d:97:92:50:91:6a:f9:27:c7:7f:67:a2:
         72:e1:4c:47:e8:18:f8:5f:27:1c:dd:99:4f:40:c9:2f:72:a0:
         f6:96:3c:eb:09:7f:65:8a:14:f3:a8:b2:32:19:f2:df:7c:44:
         c2:12:76:d5:c1:c9:f6:a0:cb:df:8f:0f:19:b4:1d:3a:f6:f8:
         f5:6a:e6:97:4a:24:2b:3d:97:77:55:0e:e6:38:80:97:bd:77:
         3c:99:0c:65:ad:38:24:63:13:5b:6c:fb:38:80:37:92:19:56:
         04:98:c0:ae:02:14:6e:04:98:c2:a2:87:1c:e7:9d:aa:ba:b2:
         4f:5c:e7:be:c6:45:70:e7:71:31:2a:60:58:20:62:2e:a2:db:
         24:cd:ca:b5:c6:f9:dc:0e:b5:83:1c:1e:bc:f0:c5:bf:c3:5f:
         87:0d:bf:3e:a2:f1:33:df:85:9d:94:be:68:95:52:78:db:54:
         ba:e1:0b:d5:c3:ef:b8:07:07:fe:62:b5:7e:d6:af:fd:e5:c4:
         a2:67:7f:b1:c8:50:fd:b1:c7:95:67:8d:8e:45:55:f7:c3:9c:
         d3:d4:10:01:9e:44:2c:db:02:97:46:1c:a5:da:96:6f:94:19:
         0d:de:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:00 2025 by rpki-client