Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
File:                     bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa (raw, json)
Hash identifier:          SSsZKvaoy1iXkdK9u0wIj2S8giBxFvCQz9HW+OKjdmg=
Subject key identifier:   76:5D:49:16:AC:47:39:D3:82:CA:E6:BB:D1:2F:82:05:F4:22:FD:5E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F94B862AC7A4C6EE79B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        97.71.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:94:b8:62:ac:7a:4c:6e:e7:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=2b33e996-b93a-4327-be35-0db60c75689d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:b9:a4:9d:b8:bb:d4:17:d1:f5:5d:ba:36:
                    b6:b8:86:53:05:d9:db:7b:c7:3c:fd:00:df:db:4b:
                    97:cb:3f:3a:0c:4c:f9:08:0c:08:57:b4:ef:1c:9e:
                    60:34:97:44:f1:2c:85:66:f4:3b:d8:36:bf:f9:2d:
                    f5:85:68:19:66:75:30:7b:c9:09:47:4f:11:66:eb:
                    f0:7c:87:52:30:75:ae:84:ab:3e:1a:56:e2:2f:1f:
                    55:4e:dd:12:88:2c:7e:f5:5f:19:17:c0:19:5c:19:
                    de:67:ae:64:2c:f4:9c:90:e9:85:f3:8d:f2:b8:aa:
                    41:6a:04:44:a2:85:94:d6:24:e7:57:e0:f4:98:00:
                    45:88:eb:21:3f:41:7f:3b:7d:1a:c2:f0:dc:3e:ad:
                    42:5a:c3:92:0c:21:9e:1e:e6:48:78:38:4c:eb:15:
                    8c:18:52:f5:62:25:80:74:30:b0:1a:6f:01:0a:7d:
                    e9:bb:57:72:bf:b7:06:07:66:b7:9d:55:bb:4a:b4:
                    72:64:02:6b:c8:1b:e3:69:fb:a9:a5:ff:e7:9a:0c:
                    fe:46:66:01:94:cb:7d:da:b0:35:30:80:2a:9d:85:
                    f2:7a:89:f2:a3:6d:93:8a:b6:39:cf:6b:a1:40:d4:
                    56:b2:e2:a0:05:0a:30:c4:0c:34:e9:a3:4f:5a:9e:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:49:16:AC:47:39:D3:82:CA:E6:BB:D1:2F:82:05:F4:22:FD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbf73244-bc3a-3aa9-9626-ccc8a0b277b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:8b:d4:2d:0e:13:93:a4:52:50:f9:54:fb:e9:5d:a0:0b:
         83:2c:14:f5:c6:25:5b:eb:ae:76:32:d9:76:8e:fd:c3:b9:0b:
         98:7d:b6:c5:66:37:27:88:90:c3:17:7e:62:66:65:e7:1a:cd:
         31:ca:1d:36:fa:3e:9b:15:8b:08:ba:be:cc:da:d5:bd:50:5c:
         52:20:b8:3c:cf:4c:5c:d0:5b:d9:f9:a9:cc:ca:3a:a2:54:55:
         69:42:70:cf:26:b1:db:63:a1:7f:0e:92:4b:94:16:4a:e4:1b:
         b7:fe:97:33:fa:e2:13:5b:28:20:4e:8a:75:55:f0:42:f8:40:
         b5:df:13:b2:cc:02:42:ee:b5:95:e2:22:dd:a4:26:04:25:72:
         26:c3:72:bb:20:26:43:4a:c6:68:ed:89:b3:33:9c:76:bb:4e:
         2f:e0:49:41:e9:04:35:5b:13:aa:59:c2:52:dc:0b:c9:0d:04:
         e5:e7:64:a2:19:b4:d7:f8:7a:f3:9d:fb:69:76:b4:04:19:da:
         4b:a0:c1:29:1c:d8:91:26:f9:76:e5:76:8b:5f:0f:9e:47:25:
         0b:25:19:b6:a4:93:ea:15:f2:8f:f0:fa:b5:f4:d9:3c:c9:e1:
         28:bc:e1:b3:86:f7:1f:02:76:84:af:ec:bc:d2:0b:bd:1d:bc:
         35:bb:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:08 2025 by rpki-client