Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa
File:                     0d0da064-5007-3068-8b10-eaf7c0848fdf.roa (raw, json)
Hash identifier:          KiUoqzeSD/zJYO27PNP1E0bTtOT1V2JxhclojxS9V3E=
Subject key identifier:   2A:BB:93:12:15:4C:66:6C:E1:02:BE:E6:A6:46:7B:EF:12:D2:6D:4C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524B3BCB576B0154501720
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        96.58.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4b:3b:cb:57:6b:01:54:50:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=651ee842-1f17-44e8-bc3c-85541e53efd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:96:c5:0d:88:ad:f4:0c:32:f1:d7:1e:f0:
                    06:b8:5b:3a:4a:05:4b:a4:dc:05:c1:24:25:6c:59:
                    d0:a2:b8:74:1c:b1:8a:f2:4a:a9:21:97:f8:3c:69:
                    96:6f:16:7f:31:1d:fc:d4:e9:7a:fc:b3:17:b2:1d:
                    8d:aa:33:64:de:4c:e1:40:6d:28:a8:94:bf:ba:81:
                    9e:68:90:a6:ad:a2:b2:b6:0b:fd:77:19:19:f4:79:
                    29:61:2b:b1:7b:db:a9:a9:83:12:dc:92:27:d0:c3:
                    d0:c9:00:05:7f:aa:a2:40:3a:ab:a7:57:a4:44:ad:
                    01:93:f3:f9:81:0f:57:05:3a:97:38:89:c5:c8:59:
                    fd:18:a7:27:bd:e8:1a:5b:84:44:07:ba:1d:07:0b:
                    42:1a:bd:a2:9a:83:8e:64:4e:c6:ba:cf:94:44:58:
                    f0:52:45:c6:71:74:e6:3c:ec:9e:75:36:7e:9e:6c:
                    0d:6f:23:f5:3a:04:c3:3d:8e:79:e8:16:c7:2e:9f:
                    4f:d8:51:e0:38:d2:5c:ed:22:e6:09:ad:b4:02:47:
                    86:58:21:41:fc:18:b2:a5:d4:e4:3a:40:22:37:96:
                    b8:0f:eb:25:4a:eb:c9:3b:3f:2e:65:2d:ed:e3:08:
                    d0:50:74:71:0b:b2:1d:18:e3:34:56:19:34:c2:00:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:93:12:15:4C:66:6C:E1:02:BE:E6:A6:46:7B:EF:12:D2:6D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d0da064-5007-3068-8b10-eaf7c0848fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:09:70:88:a3:dd:ac:9a:98:d1:94:ec:9c:e2:0f:3a:b7:63:
         6d:22:a2:97:2b:ff:cb:1c:d9:3e:e3:3d:f7:21:e6:1f:5a:d0:
         f3:0a:97:d6:e5:85:48:59:08:d4:8e:1e:1f:94:4b:59:37:58:
         82:41:65:72:d3:72:80:64:5d:10:f0:f5:1b:18:6b:37:15:e4:
         1c:43:a3:9d:04:98:9f:7c:99:7d:5a:83:e5:65:77:06:f1:af:
         c5:04:84:3a:27:f9:de:98:97:8f:3a:a3:5a:e2:6b:ed:1e:25:
         18:de:35:8b:28:aa:20:d6:69:8b:95:47:26:df:1c:19:35:ab:
         29:51:ce:b3:7f:15:e2:9e:92:5a:89:79:26:a4:03:fc:10:45:
         da:2f:fc:28:be:7d:b4:ae:e7:0a:4c:fe:48:72:bd:b9:c8:59:
         82:70:e3:e9:35:e0:27:94:37:b0:b5:7c:c5:dc:96:6f:42:89:
         8a:67:21:1f:a3:ee:f0:db:d6:15:10:b9:40:ee:9f:de:ab:6b:
         42:4b:58:2e:25:f9:71:3b:d6:59:65:8c:c7:08:f9:9b:5f:25:
         79:1d:a5:36:0e:4d:97:a8:32:84:47:2c:24:2e:ca:0c:c0:1b:
         f4:32:7e:19:91:41:f7:d8:f1:72:5b:08:dc:84:d0:5f:97:29:
         99:75:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:44 2025 by rpki-client