Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57db0136-c393-313a-8a9a-9bc15d774058.roa
File:                     57db0136-c393-313a-8a9a-9bc15d774058.roa (raw, json)
Hash identifier:          x9vNnyuAiI8WabfGqGh7PnVqotNDqVw7u52vp/ONIBs=
Subject key identifier:   15:ED:A1:82:04:13:4E:76:49:C2:10:8D:ED:D0:EE:74:35:F9:4A:9F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9651776F798D3B99A03C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57db0136-c393-313a-8a9a-9bc15d774058.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.47.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:51:77:6f:79:8d:3b:99:a0:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=bd30984f-6f92-4279-ae82-ff64472023dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:83:85:d7:91:ed:3f:ea:45:3d:7f:95:72:
                    b2:27:b2:97:d6:fc:43:d3:1a:e8:db:7a:cb:6c:ea:
                    f6:56:07:55:33:fe:5a:73:79:c0:f4:71:e6:26:c1:
                    6b:22:14:6e:ee:0d:a6:da:bc:3c:0a:13:a7:a8:93:
                    57:32:0e:0f:b6:e8:5f:22:7b:5b:8e:0d:56:6d:c2:
                    95:52:c8:f7:5e:42:d1:cf:86:47:d9:f6:30:07:52:
                    65:15:3e:48:04:e4:16:b5:97:93:d4:30:56:5a:46:
                    bd:59:a7:41:ea:b0:8a:90:f8:10:ad:28:b5:a9:66:
                    db:d6:32:b4:89:60:7e:1d:65:ae:1e:10:0b:ab:3c:
                    3a:16:cd:fb:62:10:7e:41:10:64:06:53:e0:b6:3b:
                    34:b4:47:ef:a4:b7:1f:81:33:58:9d:51:eb:cc:5f:
                    25:ae:bf:de:a1:a0:48:51:7f:fe:36:3c:c3:6d:a5:
                    31:81:ac:8a:23:d5:22:63:77:bd:bc:85:f7:73:49:
                    42:c9:28:2b:4d:4d:f2:c9:cb:2a:16:56:8f:c0:0f:
                    80:f0:7f:5b:69:e2:d2:03:83:38:97:1e:40:ca:f7:
                    31:d2:5b:6a:5d:68:ea:e3:82:bb:44:d0:76:ee:2d:
                    c7:6f:82:4e:9f:98:24:7a:e3:a4:65:bc:a8:d0:55:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:ED:A1:82:04:13:4E:76:49:C2:10:8D:ED:D0:EE:74:35:F9:4A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57db0136-c393-313a-8a9a-9bc15d774058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.47.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:67:b7:aa:bb:ca:b6:79:1a:af:9b:12:08:70:0a:af:60:
         9b:f2:a6:5e:db:a4:b6:c4:05:ca:9d:e2:52:65:ff:82:33:3f:
         f8:33:b8:e3:0c:5e:68:48:98:d3:36:95:06:42:37:3c:49:64:
         e7:ad:2f:e7:93:23:68:61:d6:48:e2:f7:8f:ea:9c:c3:e5:ac:
         33:62:e0:55:16:8a:29:6d:af:2d:9f:7a:a0:6d:bc:f9:12:18:
         ef:d0:4b:ac:d5:74:c6:d7:01:f9:4d:20:59:7e:e9:ce:65:60:
         c8:fd:ee:03:30:34:5d:8a:0f:9f:76:18:65:24:04:57:1a:a8:
         3d:6c:2b:ed:bc:b4:9e:f9:29:ed:9c:88:8d:8e:62:5a:3e:03:
         41:3c:a2:65:54:e4:18:2f:ae:28:a6:f2:de:2f:a2:3b:b2:89:
         ab:06:21:05:35:8b:65:3a:39:a9:77:f8:af:09:42:15:50:55:
         0c:42:fd:b0:0a:33:60:5d:c8:a4:a7:5a:ae:d3:8b:b6:96:52:
         de:82:00:9e:ad:7b:76:25:40:68:24:3a:1d:b2:52:a0:b0:ed:
         5a:13:34:d8:ba:3d:48:dd:ac:ba:1f:b0:03:a2:7e:27:f1:5d:
         dd:54:bf:13:c4:1f:b9:e2:fb:b2:65:1c:ed:3e:3e:b4:af:f5:
         08:7d:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:28 2025 by rpki-client