Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa
File:                     e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa (raw, json)
Hash identifier:          LKZKtN3jv6z4Z04rupCyykZ8UOI7rj8odKDaPDrT3Ps=
Subject key identifier:   47:C6:EB:58:38:87:05:20:BE:FC:39:13:62:CC:C8:BE:0A:98:A3:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96516AFCCBD4C38F42D900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        97.69.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:51:6a:fc:cb:d4:c3:8f:42:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=604039ff-e3d3-4dae-97b5-3322aa217a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:a0:23:45:25:39:ce:cb:4a:9a:76:3a:e6:
                    31:8d:56:7d:70:72:9f:a9:f1:a6:32:2a:c1:2a:ed:
                    e1:cd:f9:fa:52:24:bb:18:74:2a:5f:97:c3:af:79:
                    ef:b4:55:88:6c:2a:22:dd:44:70:72:70:b8:94:f6:
                    be:21:5f:07:f5:1c:29:f6:77:27:27:09:cc:c7:ca:
                    f5:2d:62:c7:79:fc:94:6c:fd:34:ae:02:ae:6c:b1:
                    20:4b:53:84:3c:2d:a7:25:c9:66:b5:8e:c2:1c:67:
                    d4:69:40:a5:20:05:8d:09:2a:77:95:d2:cc:b5:46:
                    dd:62:ef:47:ab:6c:37:c8:59:7e:d7:5e:6d:12:f7:
                    e5:dc:02:63:dc:43:2c:b6:05:23:e1:43:6d:1f:d2:
                    2f:b2:33:43:fd:c8:67:21:38:78:7a:d3:aa:03:20:
                    14:a7:0b:f9:3e:b6:ca:2b:ea:5a:05:cb:ac:ae:a7:
                    e1:1e:aa:0f:f7:39:d1:6d:8b:db:ac:e7:c6:b4:c2:
                    6e:2c:ad:ec:f1:9d:ca:95:ee:e6:f2:82:a4:3d:e2:
                    ae:74:76:e3:a3:af:d2:f2:88:e6:c4:c3:c2:a9:d1:
                    97:32:cf:37:f3:80:1d:c3:61:78:11:bd:a1:65:cd:
                    4d:4b:c5:d3:8f:81:97:ec:34:e3:63:bc:c4:14:87:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:EB:58:38:87:05:20:BE:FC:39:13:62:CC:C8:BE:0A:98:A3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e44be2a7-1699-3e18-b7f0-80a3b99661b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:19:04:75:0b:7c:b3:36:76:b9:2a:19:40:0f:fb:15:be:56:
         7e:a0:c1:eb:52:65:c2:fc:1d:a9:c0:6a:de:4f:e2:b2:c6:1f:
         30:05:c0:15:69:51:37:c1:d8:10:cb:85:ea:a1:20:63:9b:84:
         cb:86:bc:0f:4c:7e:66:b2:57:96:a7:e0:81:cb:41:b7:d2:9f:
         f5:e3:37:c7:34:88:4c:17:9f:6a:14:98:df:0f:97:9e:8b:96:
         39:90:0c:95:bd:fb:0b:7b:32:c2:c7:fd:18:04:00:ab:b1:80:
         ba:14:6d:f9:cc:02:67:fb:d2:99:94:36:d5:c0:a4:1b:b3:e6:
         a0:1b:97:0c:b8:db:92:e4:bd:8f:cf:a2:cf:93:f9:8b:34:6f:
         e1:93:60:1f:cf:17:00:51:49:ce:0d:bd:19:f9:58:99:e0:33:
         d0:2f:28:2c:20:32:21:93:53:35:a6:23:37:41:4e:b1:e0:54:
         80:65:b9:a4:ed:ae:02:3e:3b:67:c0:ff:d8:85:81:1a:a2:00:
         1d:6b:1e:ed:ed:15:a6:b2:06:72:b0:cb:52:ca:5d:a7:4c:9a:
         79:c7:90:18:57:0b:01:22:81:3a:55:f1:05:47:02:a9:42:ef:
         67:2f:98:c9:ae:50:06:94:9f:4d:4e:a9:d5:1e:c2:31:db:5c:
         2c:2b:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:42 2025 by rpki-client