Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
File:                     2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa (raw, json)
Hash identifier:          mJ5TqRl7WysBoo1sFdJwI+00kDyEMduc72gByDHg05M=
Subject key identifier:   EE:C3:2C:1E:22:D3:D2:DD:DA:28:48:28:DE:E0:D7:59:49:E6:1B:C6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962691932F1C727D713D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        97.71.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:26:91:93:2f:1c:72:7d:71:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=70138a95-3c26-46ee-a62a-010b993fe1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:b4:3a:17:27:07:2e:a5:5e:21:ac:05:b2:
                    9b:dc:07:e5:4b:83:e9:cc:c7:da:26:88:b6:c6:ad:
                    4c:50:a7:8a:96:e2:bb:b5:d1:59:5a:dc:0f:fa:ea:
                    78:ef:9b:4e:9b:1c:a0:e3:2b:ce:41:67:6a:0f:3f:
                    81:7e:be:a7:28:be:a5:6d:66:83:be:26:49:8c:38:
                    cc:8f:1a:03:bb:56:3b:94:61:e1:d1:4c:b5:16:e6:
                    22:d7:fc:bd:69:b5:76:96:ec:bf:b5:4a:76:fe:98:
                    54:a7:0b:66:c8:27:66:32:34:c2:e7:92:34:5a:e6:
                    85:0d:5b:31:c2:e7:e7:70:3c:9a:6e:7a:9e:e7:ab:
                    74:5e:c0:59:76:04:84:5d:8e:27:23:43:d2:f9:2c:
                    8e:a9:16:f7:aa:98:37:b0:de:0b:ae:e7:b2:f3:16:
                    68:e5:87:26:fa:03:7d:73:66:c8:f5:c5:d6:c7:92:
                    6b:3d:05:03:c1:8d:b1:a9:ab:9e:f7:a0:4f:c6:e1:
                    44:3b:05:8c:3c:be:f5:14:26:23:e2:53:2c:8a:66:
                    a8:13:41:34:c9:f9:a6:42:c6:f1:c2:e2:b4:07:c5:
                    ca:84:e2:a7:1f:b9:12:a7:fc:8c:a1:dc:1b:5e:03:
                    1a:76:07:06:77:d4:c6:5f:46:50:60:fa:b4:1e:ee:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:2C:1E:22:D3:D2:DD:DA:28:48:28:DE:E0:D7:59:49:E6:1B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2ba4061b-657f-31da-b9ab-bb1c1c802b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:5f:7c:af:fe:87:cb:a2:a7:a6:23:2c:90:54:39:74:fc:
         9d:83:e9:31:20:b6:3c:9d:79:98:91:fd:ad:8d:85:bc:04:8d:
         11:31:4a:8e:12:ef:3d:86:bf:45:68:e1:6e:8e:b1:fa:ca:79:
         06:08:d2:96:59:22:19:1c:07:59:e4:9d:1b:61:04:19:e6:a9:
         12:31:35:42:b0:68:91:e2:90:db:57:7e:70:92:4d:90:60:8d:
         ee:d1:de:98:a5:9a:53:d7:6a:24:f8:ed:96:bf:86:18:6e:33:
         08:2c:ee:b2:8b:1a:a4:ec:6b:ab:ee:07:19:a6:86:ba:c4:8e:
         fd:95:12:71:c6:98:d3:28:52:72:64:41:5e:6b:c7:17:f7:e8:
         4d:e4:e2:07:e1:c3:ae:03:00:2f:41:70:e4:87:b9:6c:cf:4c:
         46:1a:da:76:96:e4:17:d2:04:f6:a0:4f:c2:08:44:73:6d:0c:
         88:74:04:20:8d:4c:92:2b:8c:e5:b9:e1:fa:ec:c2:e7:1e:56:
         5b:43:64:a3:ca:26:4f:ca:af:06:e4:e0:42:18:28:93:c5:32:
         b2:fc:0f:96:06:3e:1b:76:3b:20:e7:3d:25:76:17:f6:15:bd:
         f5:df:07:4a:50:26:53:ec:bd:92:32:4f:fd:59:e4:ff:2a:55:
         70:fd:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:26 2025 by rpki-client