Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/970a9e3a-7448-3095-800a-2c44969b5cce.roa
File:                     970a9e3a-7448-3095-800a-2c44969b5cce.roa (raw, json)
Hash identifier:          7NY9cmru+6fQp48Yhr9vvTS4MZ+SWRqO4zszE/5BTP0=
Subject key identifier:   43:6F:FE:9F:72:FC:3F:BE:35:0E:12:49:01:36:96:27:B5:44:8A:A0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B181428D727EA7F86B6149980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/970a9e3a-7448-3095-800a-2c44969b5cce.roa
Signing time:             Fri 05 Sep 2025 13:27:43 +0000
ROA not before:           Fri 05 Sep 2025 13:27:43 +0000
ROA not after:            Thu 04 Dec 2025 14:27:43 +0000
asID:                     22516
IP address blocks:        72.31.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:28:d7:27:ea:7f:86:b6:14:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:43 2025 GMT
            Not After : Dec  4 14:27:43 2025 GMT
        Subject: CN=341e9783-cacc-4480-b8b6-db02f0261866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:ed:d7:6f:a2:b7:71:e4:8d:3d:4f:ba:f3:
                    a3:62:66:8d:50:01:a2:17:54:d2:de:6e:af:db:bd:
                    a6:38:b2:f0:c4:a4:f3:df:cc:aa:ab:56:e3:a7:06:
                    f8:40:67:99:72:f7:f1:85:29:91:4b:03:bd:73:9d:
                    e1:b8:3d:6d:12:22:53:6f:ec:30:b3:5a:3f:02:77:
                    fc:a0:f5:fe:05:a3:f7:c0:21:20:3e:38:0e:85:28:
                    d9:e5:6b:d4:95:7f:ed:19:0d:77:84:58:00:7b:59:
                    09:4f:02:1d:ba:43:44:46:92:c7:76:a5:f0:83:1d:
                    cd:0d:7d:e6:e8:aa:56:2c:6c:a0:4f:ad:31:e9:2a:
                    32:d7:4d:60:2b:0c:e4:8c:14:3f:4f:df:b9:6c:00:
                    07:ed:c5:7f:21:92:2b:c0:ea:b7:35:c6:9f:5a:da:
                    9c:86:fe:5e:6a:7d:96:a5:91:15:9e:b0:7a:2d:26:
                    50:ba:bc:a9:3c:03:5f:6c:14:12:71:33:58:23:26:
                    b2:6f:8f:f8:58:29:72:72:5e:fc:8c:9c:9e:ee:52:
                    c1:f4:ed:6b:16:a6:09:73:36:9b:f7:7d:bb:63:a5:
                    5e:0a:de:d8:cf:34:88:c7:12:fb:77:8e:45:b4:10:
                    ba:37:e3:0a:e0:e7:bd:7b:30:6a:67:67:fe:21:2a:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:FE:9F:72:FC:3F:BE:35:0E:12:49:01:36:96:27:B5:44:8A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/970a9e3a-7448-3095-800a-2c44969b5cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:a0:21:52:92:ba:4f:12:a0:37:5d:93:10:16:59:40:b6:
         46:cd:9d:47:5c:b7:76:af:de:1a:22:c9:56:f0:91:34:08:ea:
         6f:34:f8:42:99:54:5f:16:67:98:e7:58:dc:6d:28:ee:48:6d:
         48:26:9c:f4:ae:b0:67:26:90:40:a0:ed:f3:2c:06:1e:2b:11:
         04:9b:32:62:c3:dd:5f:1f:6f:e8:cd:08:f8:77:c2:58:7d:37:
         46:57:6e:d4:64:50:c5:9f:fb:d0:51:3a:29:07:31:04:a4:be:
         16:06:7a:e5:c7:0c:e0:fe:e3:dd:2b:fc:80:f5:3f:47:64:38:
         88:54:a7:2d:a3:4a:45:8a:d4:85:d3:19:7f:e8:43:f3:79:15:
         0e:04:9b:0b:ce:90:3e:a2:cb:5c:a3:7b:66:a1:9b:32:eb:3a:
         f0:86:0c:19:6a:fc:21:aa:31:84:61:42:74:0b:f3:9d:fa:f7:
         8f:53:83:21:31:f2:31:3f:66:3f:d6:bc:0d:a6:e9:4d:04:4f:
         d5:53:e2:a6:3b:41:b1:83:b6:4f:41:2b:d2:71:40:82:24:64:
         e3:8b:fe:17:9c:66:d9:58:c8:33:b8:28:40:5e:cb:91:56:bf:
         1d:7f:8f:24:35:79:ec:f1:7e:97:5d:85:7e:dc:ae:7e:75:5e:
         e6:59:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:15:25 2025 by rpki-client