Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa
File:                     d966d503-7893-3029-a31a-2ca439bfc75d.roa (raw, json)
Hash identifier:          Q+pR6A5ZQLXVqJV27jeJ6Z1+WhjAJfoRYQoyc6WWQG4=
Subject key identifier:   4A:98:93:95:EA:67:1C:A9:D9:09:D0:8D:18:6B:C1:F1:3B:BA:A5:2A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965196511969B58C1A6460
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.44.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:51:96:51:19:69:b5:8c:1a:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=f2ebd52a-d408-4529-984a-c21517260610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:2a:a5:b1:b0:21:c9:f2:53:3a:4c:32:f3:
                    05:f0:aa:71:66:11:32:2a:c5:16:5d:1f:40:cc:36:
                    89:7b:5e:fd:1b:a6:6c:e2:93:64:4b:0d:c6:23:9f:
                    54:ba:3c:04:2c:c4:48:1b:99:ea:f4:63:ce:e5:04:
                    bc:d7:cb:0c:d5:b3:4a:75:ac:10:75:47:70:cf:99:
                    ec:ff:9d:ad:ee:ac:ec:f7:7c:da:ab:11:bf:fa:e3:
                    04:ca:d5:e2:f0:39:02:28:e6:10:4e:c7:7a:b7:5c:
                    50:db:aa:3e:81:82:48:ae:74:47:58:25:44:22:2e:
                    57:94:61:05:f4:bb:23:b6:06:41:79:53:32:27:11:
                    df:c1:d5:59:86:19:3e:ee:4b:8e:9a:13:d8:0a:d9:
                    ca:2e:68:6c:13:99:f9:f5:a1:13:34:98:ff:a4:fd:
                    35:bc:f8:15:06:2c:44:e6:d3:cc:87:11:15:ad:df:
                    b4:4d:1f:cd:ff:bc:aa:95:b8:c4:75:ef:78:3b:e0:
                    8c:a0:34:8d:b2:94:c7:79:58:c9:53:6f:11:a1:52:
                    32:09:0b:41:86:ae:2f:12:f3:e4:84:c8:dc:2c:18:
                    43:55:0b:6c:54:16:12:ec:a1:24:02:a4:ed:2d:72:
                    53:ba:8d:20:ef:f2:a0:cf:61:90:53:ac:d7:2a:b1:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:98:93:95:EA:67:1C:A9:D9:09:D0:8D:18:6B:C1:F1:3B:BA:A5:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:43:95:03:c0:93:43:52:1e:98:5e:9b:c4:8c:b7:71:27:61:
         49:ae:3b:57:64:e7:4e:33:be:75:d2:a6:c2:8e:cc:10:41:45:
         ee:5c:82:c1:e0:f7:06:97:6f:6b:c2:c5:51:ef:42:b8:98:dc:
         70:ed:d7:3f:68:f3:7c:d9:ab:65:6c:9f:ee:36:31:66:b5:d1:
         b1:0d:04:05:99:c4:1a:88:20:60:b2:37:d2:99:d2:6d:48:67:
         a9:f6:de:d6:71:76:f0:0f:aa:fe:40:ae:fe:35:a1:e9:43:5a:
         5b:f3:84:d0:cc:7f:50:88:0e:e5:cd:eb:77:b9:50:9a:8e:f4:
         25:cf:81:3c:e4:71:37:04:c0:83:32:17:6d:ed:ec:ae:c2:8e:
         73:6b:5a:d0:48:bb:87:8c:5f:94:ab:4e:9a:7a:2d:3a:71:ec:
         9c:19:5c:e3:e2:45:d2:14:2d:3a:56:4c:65:81:94:dc:5d:5b:
         73:1e:1d:42:95:6a:62:58:8b:6f:f1:79:a1:13:e4:99:6c:bc:
         e6:77:ff:58:be:d5:f0:23:09:19:5f:fd:10:1f:4d:ab:a2:2c:
         90:bd:7a:72:97:c7:fd:a9:00:26:18:59:af:18:a0:b1:04:80:
         d1:ec:07:0d:03:d2:0a:0e:f3:60:06:c7:02:7d:db:b2:72:82:
         8e:ff:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:33 2025 by rpki-client