Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
File:                     a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa (raw, json)
Hash identifier:          TB5LU6B9gEETKbyqcbGo76xYJKcnR+0mMBiL/pjRZno=
Subject key identifier:   94:09:9A:98:D0:E1:EE:63:28:6D:38:46:4E:D5:7E:AB:23:59:34:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9627B75790C847F3B59644
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.46.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:27:b7:57:90:c8:47:f3:b5:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a9521d64-f8a6-46ba-a8ef-465a7ed48f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:eb:f0:be:d4:9e:65:a7:68:77:e0:34:b0:b6:
                    1a:67:5b:12:a2:2c:1f:2d:42:86:da:4e:95:13:56:
                    06:9c:46:96:b0:f1:e3:1f:c4:21:68:73:99:44:a4:
                    45:71:ae:0d:b5:1a:4d:dd:23:d1:09:b6:89:92:62:
                    a2:7e:d0:10:2a:4d:7f:dd:fd:44:65:15:b1:2f:37:
                    3f:92:fe:3e:85:cc:c3:46:59:43:73:f7:b0:4d:fc:
                    4a:ad:35:5e:94:1a:ef:02:59:e5:0b:4a:7f:f5:72:
                    96:f7:ca:93:95:8e:11:f6:c5:37:e5:7f:95:bf:60:
                    6a:47:16:b0:f0:7c:05:e3:1d:e1:24:b1:24:c1:2e:
                    16:8e:35:af:1e:69:82:44:fe:82:a0:b6:65:9d:75:
                    55:b5:e0:e4:2d:99:e3:b7:df:2d:88:72:cc:ed:08:
                    52:66:ae:b0:35:c6:22:0d:f6:bf:17:2b:ed:53:c9:
                    27:dd:9d:c9:94:6e:93:89:85:dd:52:61:6b:c3:95:
                    6f:f9:96:72:4c:f3:18:27:38:b4:19:4b:0b:7b:34:
                    0f:14:23:1d:4d:2f:f8:eb:89:95:af:df:ac:93:83:
                    e4:ea:ec:40:89:28:ea:6d:65:90:7d:60:10:b1:52:
                    e1:c9:3b:5d:43:be:59:a9:39:83:bf:df:b3:39:81:
                    a6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:09:9A:98:D0:E1:EE:63:28:6D:38:46:4E:D5:7E:AB:23:59:34:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:71:f5:f7:bc:88:8b:d4:46:90:6f:9b:17:c5:73:d1:e9:
         29:e1:05:4e:fe:e3:7f:aa:d7:c6:13:e9:11:31:7c:bd:3c:c0:
         24:52:8b:35:c3:fa:9f:2e:9d:57:a6:47:a8:37:ed:36:4e:45:
         c9:0d:d5:03:13:01:ab:07:da:ca:fc:73:5e:69:38:ec:fb:ad:
         28:50:b3:57:35:43:09:20:f2:65:e6:ac:36:84:77:64:8c:3c:
         15:79:ce:e4:3f:e8:c5:2e:d6:7f:6b:a1:90:d5:ae:d8:2e:2e:
         62:43:2e:7e:41:3a:cf:bb:df:3b:17:db:02:e2:33:92:ff:2c:
         c1:15:77:36:27:3d:af:99:b5:64:d4:27:4b:91:f2:e8:48:f3:
         3e:71:a6:e8:3f:df:3c:5c:81:e6:c9:08:73:20:64:43:91:e7:
         04:39:8c:72:a4:85:7c:40:a6:73:38:e5:b4:d8:12:37:f0:89:
         f7:ae:bd:9d:f1:33:ab:fb:83:c6:b1:6b:ce:16:ef:ec:52:7e:
         c7:62:3b:07:75:c9:ac:49:83:c3:d7:15:44:20:41:fc:ad:6f:
         1d:e4:f2:b7:a7:d9:85:09:59:de:08:e1:2b:15:d3:b6:13:ea:
         bd:79:1c:58:6b:be:3e:8d:c9:81:e7:c6:10:ea:34:a5:cb:6a:
         c6:24:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:19 2025 by rpki-client