Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
File:                     0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa (raw, json)
Hash identifier:          QAt2pKsKiiBoT0c8jgAc/GagXnOwT5/z34VFRLT6N+U=
Subject key identifier:   AF:8E:32:84:51:F3:5B:A9:BF:DD:7C:C3:FE:DB:8D:C3:7D:70:CA:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96512B878430EEBE667C40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.46.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:51:2b:87:84:30:ee:be:66:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=3605b388-262b-4b03-b06b-19256294d0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:f0:22:95:22:9b:6b:5e:bd:60:86:76:e0:
                    e8:59:7a:ee:ac:83:09:c1:ad:70:c8:3c:e0:fb:b5:
                    9d:53:2b:01:d2:ed:86:fa:e7:31:ea:80:8b:7c:90:
                    72:cb:73:42:fd:61:2d:69:ef:f3:5c:d7:f4:86:b2:
                    c0:c9:16:77:6d:44:80:77:d8:e6:bf:2f:e6:30:c6:
                    6f:95:b5:31:c0:8b:33:39:d9:3c:92:ec:53:b5:ec:
                    ca:d6:0a:a1:7a:5b:1f:39:0d:57:d6:29:f3:20:0d:
                    49:18:40:21:60:c0:ea:48:af:44:d4:cb:d1:ed:f6:
                    bb:d1:20:a1:74:31:c1:fc:5d:61:f4:6d:78:53:8a:
                    72:8e:97:e4:f7:6f:e5:8b:17:b1:0c:d1:b0:33:a3:
                    73:f0:12:e4:ea:70:44:56:e9:e2:36:57:49:96:9f:
                    d4:e8:0c:3b:72:b4:0c:2c:44:c3:6a:29:6e:ed:b6:
                    ec:64:8d:93:f3:3a:fc:18:24:f5:e2:80:fd:91:8e:
                    71:2c:20:da:5b:8e:8a:35:3d:50:f7:dd:0e:a5:fc:
                    80:85:e6:fb:d5:1e:32:0d:31:99:52:a9:8b:35:f4:
                    2d:1e:e8:58:63:5b:e7:22:bf:a4:bb:80:80:08:1f:
                    23:bd:53:27:2a:cf:f4:3e:a4:e0:4e:52:72:61:1e:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8E:32:84:51:F3:5B:A9:BF:DD:7C:C3:FE:DB:8D:C3:7D:70:CA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:0f:79:55:53:e6:eb:5b:f7:91:41:a8:55:da:9d:56:2d:
         21:13:e5:b1:bf:cb:64:63:51:78:60:68:51:17:28:f7:14:af:
         c4:28:f2:5f:06:e2:66:b0:f3:d4:64:d3:76:4d:4b:bb:d8:59:
         82:d2:08:7a:d8:a5:55:04:f6:6a:f0:d8:44:14:24:d7:21:90:
         79:4b:21:b0:b2:b7:23:95:97:af:57:33:04:db:9e:e7:81:eb:
         d5:ce:f8:f1:6c:29:6f:49:3c:7b:0f:39:02:7e:9c:64:db:6a:
         49:b9:2a:23:c5:4d:5d:3c:d6:97:c9:d1:d4:7f:07:38:44:aa:
         e1:6d:88:63:05:79:2b:95:6b:df:e4:0f:b0:b2:dc:7d:c7:a2:
         2e:4c:d4:3a:6d:85:fd:8a:a2:02:34:95:47:3a:2c:94:1f:a0:
         1d:eb:f1:db:46:3e:ca:0b:7b:59:20:c6:61:8b:93:41:fc:e6:
         bf:9b:6a:fb:36:9a:b2:df:98:c5:42:b5:3f:41:29:fd:94:82:
         ae:95:bb:67:f1:7e:86:69:1d:f6:83:04:21:a7:3e:52:f1:af:
         6d:08:46:b0:48:f0:ed:3b:1d:8e:ec:ff:88:08:3a:6a:7a:18:
         69:21:df:a0:79:1e:97:20:d4:06:58:97:f4:12:e6:57:7d:1f:
         41:43:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:07 2025 by rpki-client