Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbd3a09-0eeb-36ad-8e7c-30496de240cc.roa
File:                     9cbd3a09-0eeb-36ad-8e7c-30496de240cc.roa (raw, json)
Hash identifier:          c242iiIspD93T4Z3S+USAI2XUwmq/lbb0LYV7K5t/Tc=
Subject key identifier:   3C:AF:C2:D5:68:4E:5F:FE:72:84:19:47:3B:CD:79:8F:3C:65:A0:1F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521DCE2419A23CE8812180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbd3a09-0eeb-36ad-8e7c-30496de240cc.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.46.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1d:ce:24:19:a2:3c:e8:81:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=cc87b024-95c0-4626-b0bc-a4e8d962ea0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:00:4c:90:34:c4:59:e6:ca:6b:a0:7f:0f:
                    03:f6:c1:53:d2:4a:c9:26:43:64:7c:7d:6c:13:04:
                    da:43:0b:8d:ef:b5:d4:21:56:8f:08:ea:a9:46:fd:
                    6b:97:e3:3c:b9:9b:3d:ac:c0:f0:30:ce:fc:e8:17:
                    bf:c4:ee:54:79:9e:72:07:c3:ad:12:b2:11:ca:a0:
                    89:5a:e1:90:2f:7b:af:e8:29:e5:e0:c4:62:16:aa:
                    96:fd:b5:89:c6:05:f5:cd:3d:4b:84:f0:32:16:d8:
                    e9:aa:da:a7:25:02:22:16:0b:64:0a:95:c5:1b:43:
                    a4:eb:8f:17:61:89:ff:13:d7:fd:23:bf:fb:48:32:
                    db:74:c3:6f:fd:bb:d1:61:3e:af:5b:d2:74:58:1e:
                    46:f0:59:fe:b6:c9:7a:13:23:5d:6d:1f:b1:03:ca:
                    c3:de:44:42:9e:8b:91:06:0d:2f:18:83:97:95:62:
                    dd:b8:63:1a:58:49:d0:84:be:e8:41:c9:68:3d:0c:
                    25:a3:4d:8e:f7:16:98:e5:22:61:1c:d1:a0:f5:eb:
                    8c:f5:70:da:66:e9:9e:78:75:09:53:e3:83:f5:82:
                    52:84:5a:b6:3c:fd:15:cd:23:85:84:5e:7c:a7:89:
                    c0:3b:e1:bf:36:93:4b:9f:08:7d:37:3d:a6:19:e9:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AF:C2:D5:68:4E:5F:FE:72:84:19:47:3B:CD:79:8F:3C:65:A0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9cbd3a09-0eeb-36ad-8e7c-30496de240cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:24:57:0f:03:ac:85:ce:b7:6c:f2:29:5f:16:f1:2f:60:
         44:7a:21:18:54:16:69:b0:50:36:af:94:9a:8e:ac:ef:ab:73:
         5a:4a:29:dd:2a:86:b4:e7:0c:f4:43:19:92:8c:91:c3:e1:a6:
         27:1f:6a:4d:50:ff:53:1b:e4:38:32:b1:a2:84:d2:b5:66:c5:
         06:e0:86:1e:ca:9c:ec:cd:5a:c3:75:ee:c5:b9:58:f2:69:70:
         b7:d0:2b:56:f1:2e:fb:c8:d9:9d:b3:62:d8:df:62:9e:d3:d7:
         24:fb:3c:9e:0f:52:ca:b5:07:dd:c9:d0:d4:9e:1c:98:f2:31:
         e2:91:c7:d0:a7:5b:52:e0:16:93:1a:33:1c:7a:0c:c0:61:0c:
         1e:a6:58:29:ba:2b:78:f9:5b:4a:9e:03:18:0a:ed:40:54:d7:
         00:e1:a1:7e:d7:95:90:a7:bb:cf:61:19:21:aa:5a:5f:11:4e:
         ae:28:f8:ea:27:f7:e7:60:ca:d1:d7:b2:94:1a:37:25:99:7a:
         07:10:7f:e1:5e:83:43:8e:d4:c6:be:bc:68:1d:f0:f0:c8:a5:
         80:fb:84:77:bb:24:02:f0:a4:53:7a:6b:3b:af:0b:59:90:61:
         36:09:4d:ac:9b:f8:1c:3f:b8:6f:ed:dc:6d:12:ac:0e:22:1d:
         4d:86:b8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:02:27 2025 by rpki-client