Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
File:                     03f961f3-6b43-39af-89bc-92927876bcab.roa (raw, json)
Hash identifier:          vlVUNFHH1nwl4YbzpAnG9BpRnOgppKzMTE6Fvlhf8tU=
Subject key identifier:   2F:BB:A4:05:E2:F8:F6:51:51:13:69:DA:92:18:0D:A2:A2:36:59:6D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584A84117B6019EF518E19105A40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        172.102.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7b:60:19:ef:51:8e:19:10:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ec90bf37-8c5c-42c5-95ee-619d84eb47ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:64:fb:b7:0f:c2:9c:49:1f:57:7a:bf:ae:
                    4a:97:aa:67:d0:47:cf:b7:91:d3:49:a6:07:58:63:
                    91:49:77:d6:ce:7d:0e:6e:c3:14:3a:a8:5b:0f:bf:
                    db:ee:fc:7e:7c:79:8f:11:ef:09:42:ba:aa:ee:ac:
                    c2:dc:a5:e3:78:89:22:07:de:2b:0f:00:f1:93:1e:
                    4c:0e:88:3a:18:48:5f:9c:e8:e0:02:59:8b:a0:d2:
                    d0:6e:b5:a8:e0:56:74:fe:02:2e:68:1a:d0:07:97:
                    9d:fb:6e:1c:66:15:51:94:80:a7:5a:7f:85:95:0b:
                    c5:a5:b8:de:62:b7:8a:26:62:c4:75:b0:bc:50:32:
                    55:9c:cd:6e:c8:39:ae:9f:36:fe:6b:1f:bf:20:47:
                    c2:ec:c1:a8:04:73:a5:82:85:95:fe:3f:88:d6:e0:
                    b3:a5:49:b7:43:8d:6f:b1:74:79:85:b4:9b:7a:b7:
                    63:af:46:80:3e:80:c3:48:72:97:1d:aa:c2:c7:d5:
                    b0:f3:29:81:4e:8b:fa:f7:78:ce:6d:e3:1c:58:a8:
                    1f:59:5b:2f:bb:2a:12:b9:9b:3e:ea:63:b9:53:8a:
                    3e:9e:1c:1d:86:97:da:b5:7f:6e:4b:82:6d:11:64:
                    a4:25:59:78:ad:5e:c6:99:5f:bd:fd:06:63:49:54:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:A4:05:E2:F8:F6:51:51:13:69:DA:92:18:0D:A2:A2:36:59:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/03f961f3-6b43-39af-89bc-92927876bcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:f9:63:4b:fe:31:bd:c9:e6:8e:f4:d5:b4:cf:9f:aa:3d:
         61:a3:bd:67:90:68:31:a1:9c:f0:14:31:86:d3:d2:64:26:58:
         21:17:e2:a9:da:85:3c:de:94:79:0d:01:d6:70:d3:a5:fb:be:
         9b:44:60:d1:81:26:11:a0:db:d1:6b:f5:2c:02:88:9c:00:0a:
         89:30:bc:09:bc:39:d1:d7:18:be:ff:1a:cb:13:33:b5:ab:35:
         63:18:15:6b:34:e7:74:aa:1b:8d:98:e2:0b:4e:54:05:46:96:
         45:0d:80:d8:32:dc:cd:0b:e2:00:43:ae:33:c5:99:56:93:d3:
         97:28:b9:b6:d5:34:56:3d:ee:53:de:4d:ab:ef:6e:62:cc:a2:
         c4:c5:73:99:d0:fb:48:82:c5:8b:d4:01:f5:25:f1:c1:fb:8e:
         0b:26:46:09:3e:64:8c:75:63:dd:d9:23:25:55:a0:24:fb:82:
         c6:d6:f3:dd:03:f8:ff:19:21:35:73:7c:b9:df:69:ab:bb:99:
         4d:92:81:73:cd:91:41:20:1c:5f:d7:63:d6:de:11:19:dc:06:
         08:4d:ec:ab:ef:17:4f:9d:31:50:46:b8:31:cc:38:f9:c0:2c:
         ed:7b:4e:ea:e9:8b:f8:7d:4c:5c:10:99:3f:3a:d7:23:bb:09:
         7c:76:46:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:31:31 2025 by rpki-client