Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/2fb3e7a4-9f64-30f7-8128-637601af1761.roa
File:                     2fb3e7a4-9f64-30f7-8128-637601af1761.roa (raw, json)
Hash identifier:          +rQYQsin86eSllaw6AyN3hriyqsjwyKfYkrMlHaUoNc=
Subject key identifier:   63:2E:44:B3:DD:64:2E:72:A9:2E:66:32:41:12:D6:DE:0B:30:D6:30
Certificate issuer:       /CN=46d00789-4028-40cc-9ec8-cff15d1c3618
Certificate serial:       010D0C9F4328584B2CF71B434FA000392ECB0E00
Authority key identifier: 75:76:A4:83:96:46:C7:A6:A5:F5:13:A7:F3:5B:79:F5:10:8D:C2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/2fb3e7a4-9f64-30f7-8128-637601af1761.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6210
IP address blocks:        72.46.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/46d00789-4028-40cc-9ec8-cff15d1c3618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/46d00789-4028-40cc-9ec8-cff15d1c3618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:1b:43:4f:a0:00:39:2e:cb:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d00789-4028-40cc-9ec8-cff15d1c3618
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=239a9eb6-4547-4591-b078-4a7dabd4fbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:39:91:29:9d:e7:2f:8a:20:43:5c:0b:15:
                    17:b8:6d:66:fd:a4:54:bf:c6:99:58:79:42:2b:d7:
                    c2:ae:16:61:01:3d:2b:96:21:24:fc:86:25:d6:72:
                    21:f6:06:1f:70:7e:6d:88:61:23:c3:d7:d7:9e:d5:
                    71:83:92:6c:3e:6a:eb:a6:a1:8f:02:51:2b:48:75:
                    e0:c5:28:eb:7f:fd:92:b1:1e:f6:71:b1:fc:dc:30:
                    0e:f7:a6:c3:e3:9f:11:7f:c2:ca:11:60:83:f4:79:
                    0f:63:5b:0e:3c:33:47:da:5f:58:a5:e3:14:8a:07:
                    3c:05:37:e1:54:f9:67:00:e7:f5:3e:2e:03:0c:40:
                    d5:5f:c7:d3:5f:0c:b7:41:3e:9b:77:de:c6:2a:cb:
                    06:1f:46:9a:0b:91:ce:20:31:d0:59:58:29:e7:16:
                    cd:37:1d:41:80:0d:0b:32:52:b4:c7:60:70:17:72:
                    ea:fb:d5:f0:55:9f:9d:4e:27:a8:56:9c:22:4b:da:
                    40:d5:5a:10:d7:3c:e5:1f:f3:00:5f:5f:9d:f8:bc:
                    2a:ca:f2:fd:aa:db:61:28:47:99:12:0c:b2:67:7f:
                    29:fd:e3:e3:4b:f8:89:10:35:52:83:0f:db:2a:bb:
                    df:cb:19:6d:3a:5e:2d:cb:34:94:16:ea:3f:94:f0:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:44:B3:DD:64:2E:72:A9:2E:66:32:41:12:D6:DE:0B:30:D6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/2fb3e7a4-9f64-30f7-8128-637601af1761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618/46d00789-4028-40cc-9ec8-cff15d1c3618.crl

            X509v3 Authority Key Identifier:
                keyid:75:76:A4:83:96:46:C7:A6:A5:F5:13:A7:F3:5B:79:F5:10:8D:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/46d00789-4028-40cc-9ec8-cff15d1c3618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:40:e2:de:9e:d2:4d:39:c8:e8:6b:f4:1a:ce:01:77:b5:
         29:e7:1b:43:71:ef:bb:20:7a:be:58:ca:b5:7c:1d:96:ef:26:
         81:f7:df:83:1e:8c:c8:f2:3a:11:97:26:3d:f4:31:5d:93:35:
         6c:55:c1:2b:db:4e:e2:38:b6:47:a8:e4:ef:19:08:62:8e:6d:
         f3:be:6e:b7:41:0c:5e:b8:68:2a:e0:ec:dc:b4:c4:1f:0b:18:
         74:2e:b3:82:d5:ca:76:dc:90:17:57:4c:2d:ae:83:2f:bf:ae:
         66:6a:5f:76:79:23:44:fa:f7:bb:5f:7d:ec:a1:82:15:1c:b3:
         b7:a0:28:e9:db:1f:b7:f9:42:13:4b:bb:e5:d7:be:99:93:f4:
         f1:ed:a0:9a:b4:32:b0:f8:f9:5f:ad:33:4c:61:76:bc:ab:7d:
         82:2c:94:ac:f9:6b:13:f8:3e:ad:fc:a4:1b:35:64:89:da:4e:
         61:96:27:3a:62:9c:88:22:3c:e5:87:b4:a0:20:49:9a:2a:de:
         56:38:7a:ad:63:65:95:80:23:5d:74:de:97:ac:b0:8b:56:d9:
         8d:93:5c:e1:3f:30:66:34:43:6a:a4:cd:56:16:55:93:1f:df:
         64:2b:ca:99:84:46:5d:6f:fc:4f:c3:94:0b:7b:ab:71:43:88:
         84:79:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:10:20 2025 by rpki-client