Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
File:                     703f5f39-4ca1-3844-a475-708e53f14853.roa (raw, json)
Hash identifier:          o1z75/VYSXGxPmRhww0WM6Fb2JE/twbuYKkda1hWAN0=
Subject key identifier:   F4:F2:16:6A:9E:E3:F2:F0:DF:9A:38:56:D6:71:89:B6:AA:EB:6D:AE
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584B1806F97934BAE60237F27000
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     36114
IP address blocks:        72.46.128.0/22 maxlen: 24
                          76.164.192.0/22 maxlen: 24
                          76.164.206.0/23 maxlen: 24
                          104.143.10.0/23 maxlen: 24
                          2605:6f80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:f9:79:34:ba:e6:02:37:f2:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ba8c6962-3933-4e78-8568-b83d81cdf1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:16:79:b1:08:59:6a:bd:7a:49:fb:f8:3e:
                    f2:19:07:cd:d2:2e:e9:7d:fc:49:6b:e6:e9:c3:8e:
                    e1:a1:0e:23:59:19:1c:27:fb:69:23:ee:9d:5d:be:
                    c5:19:83:07:ce:1a:ed:94:75:68:1e:19:41:fe:6a:
                    5f:07:07:4b:79:01:47:c4:88:ff:6c:92:c8:08:e3:
                    8f:b2:6a:87:6f:6b:6a:f5:96:9a:66:2e:0d:64:37:
                    72:39:90:22:cc:5a:8e:89:5e:a0:a5:de:1b:e8:c6:
                    1a:fe:20:87:31:da:c4:e5:74:0a:aa:9c:10:db:4d:
                    cb:be:f5:47:a6:92:2d:24:25:87:de:67:a8:b1:06:
                    8a:f7:18:b4:9a:dd:71:dc:85:ce:f6:86:82:bd:e6:
                    bf:85:e8:5c:ee:eb:c8:10:3a:81:f1:ee:91:74:53:
                    a1:be:46:1a:9c:fc:86:46:6c:5c:af:08:0e:55:ce:
                    9c:1c:55:b6:40:31:b6:23:86:e9:b1:1e:3e:39:08:
                    a2:51:5d:63:3f:aa:40:84:62:db:10:34:7f:23:36:
                    e7:18:94:d3:9a:f4:87:da:e2:11:35:78:c3:6e:07:
                    ec:49:44:78:4e:c4:6b:94:91:7c:b8:72:e3:e6:43:
                    6c:c4:78:26:ac:11:62:4d:f3:86:7d:71:05:07:9c:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F2:16:6A:9E:E3:F2:F0:DF:9A:38:56:D6:71:89:B6:AA:EB:6D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/703f5f39-4ca1-3844-a475-708e53f14853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/22
                  76.164.192.0/22
                  76.164.206.0/23
                  104.143.10.0/23
                IPv6:
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:08:6b:26:1d:32:a5:87:73:63:0e:86:c5:1f:d3:cf:ee:
         30:a7:00:12:17:00:db:c3:33:2d:fd:58:74:a8:1c:57:b4:17:
         1a:e9:db:76:91:2b:02:94:96:c8:de:3e:c4:d5:39:ee:31:6e:
         4e:db:06:92:e6:79:9e:98:31:36:06:f6:e0:fd:0c:17:96:3f:
         63:de:f8:83:ff:87:48:aa:ed:a9:bf:a8:64:6e:da:bc:8d:89:
         bf:ae:c4:48:3a:92:6b:3c:e1:ea:b3:ba:9e:42:19:87:0c:7e:
         48:9b:59:46:89:ea:fd:a4:8f:df:2d:86:07:b6:df:5e:77:a5:
         c3:b7:c9:c5:44:0e:d0:c9:ff:bf:9d:01:22:32:90:43:1a:ff:
         af:20:8a:80:05:c3:91:65:ed:8e:9d:e9:3e:d2:96:d2:a5:ef:
         29:62:27:33:e0:a2:59:7d:4a:fc:fd:5a:3f:52:7e:4e:2d:9e:
         ad:ec:30:2a:35:9a:24:dd:e9:c4:00:e9:36:08:19:37:85:3d:
         ef:42:8e:02:70:91:b1:78:cb:31:86:32:09:46:43:99:74:0e:
         a7:54:03:ae:db:3f:a2:0b:5f:3a:a1:1f:22:08:1a:8d:0a:ff:
         c2:87:17:6b:d0:2a:15:c1:05:51:d1:78:65:39:7f:da:5e:c0:
         98:36:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:55:18 2025 by rpki-client