Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3903f4-82d5-3f32-9d84-62a8628237b9.roa
File:                     ce3903f4-82d5-3f32-9d84-62a8628237b9.roa (raw, json)
Hash identifier:          ZclRqUCOGQ2J3YPNYtVxYrFtybg0THdvp0+4iOlSXF4=
Subject key identifier:   F5:BF:F9:D8:F2:5C:A5:E1:7B:3E:EC:43:A3:27:B6:60:51:F5:29:B5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B18142C2927CA144911712900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3903f4-82d5-3f32-9d84-62a8628237b9.roa
Signing time:             Fri 05 Sep 2025 13:27:45 +0000
ROA not before:           Fri 05 Sep 2025 13:27:45 +0000
ROA not after:            Thu 04 Dec 2025 14:27:45 +0000
asID:                     22516
IP address blocks:        97.71.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:2c:29:27:ca:14:49:11:71:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:45 2025 GMT
            Not After : Dec  4 14:27:45 2025 GMT
        Subject: CN=46d1292d-2079-4ff1-bd26-e8749d9e8be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:ef:e2:0a:14:81:5d:21:cb:e7:46:b4:49:
                    72:96:fb:52:0d:0b:d0:66:d1:db:e7:06:67:32:39:
                    70:1d:1a:ff:12:41:e6:23:ef:cc:c5:68:1e:79:6e:
                    f7:0b:24:b6:26:f1:87:f7:ba:c4:05:ca:11:47:e8:
                    dc:8b:c6:09:8d:16:d2:0f:af:36:ed:16:c6:6c:74:
                    8e:cf:77:d7:a8:70:dc:09:6c:3c:28:e3:7a:26:40:
                    77:9c:03:05:5b:89:cd:fb:ac:89:f7:ce:07:e4:0c:
                    aa:94:b4:ec:0e:cc:3f:d4:5a:4f:d5:6e:88:42:3b:
                    1e:18:f2:a7:b6:ae:04:99:a6:67:f3:af:3f:fa:48:
                    29:84:ee:41:db:54:de:5a:67:bd:f6:5c:3e:42:2a:
                    22:e7:c7:61:d5:84:3c:f0:08:b0:bf:e4:7e:d9:c9:
                    1b:e6:53:46:4c:0b:30:05:da:99:7f:c7:0f:27:0d:
                    49:12:cc:dd:65:11:4b:54:b5:3a:4b:8a:c0:76:7a:
                    1e:f6:cf:0e:cb:5c:bc:0e:b1:02:d5:fb:f4:e4:63:
                    c0:28:db:1d:b5:e6:d2:f6:00:62:01:03:7e:c1:76:
                    d4:a4:58:00:08:7b:0d:7e:30:a8:c1:75:1b:7b:9b:
                    6c:db:8c:67:3b:58:f8:86:0f:6a:21:e8:ed:c9:a9:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:F9:D8:F2:5C:A5:E1:7B:3E:EC:43:A3:27:B6:60:51:F5:29:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce3903f4-82d5-3f32-9d84-62a8628237b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.71.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:42:c5:3b:8d:7f:83:9d:eb:33:60:2e:b5:dc:f7:93:1e:84:
         1a:be:4e:b5:fe:50:f2:ea:82:ca:92:44:b3:c3:bf:13:62:c6:
         b7:bd:b2:79:09:15:69:a4:1f:e9:bd:17:c1:c2:a7:13:a7:3a:
         da:b5:85:c3:43:8e:99:d4:60:53:77:7f:bc:68:f5:77:a6:4a:
         22:a9:23:bd:b4:3f:01:63:a7:08:a7:65:3e:64:70:b9:63:d9:
         15:72:36:2f:a6:90:fb:48:d5:43:6f:50:18:84:30:05:7d:66:
         b9:e9:37:6d:7e:57:35:fc:3e:d1:fc:fc:4a:f0:ba:ba:5a:2f:
         cc:a6:d5:f5:9a:5c:ac:d9:0a:75:f6:cc:da:d4:ce:68:03:15:
         90:3f:82:c0:2d:4f:5e:ed:6d:fa:24:55:02:b0:cf:b8:11:ed:
         29:2b:41:90:72:ec:22:fd:39:11:af:93:8a:5c:d0:5a:c4:b0:
         9b:6b:ee:72:14:6c:4b:49:8f:38:79:e1:bb:5e:41:ca:b0:c7:
         4d:7a:80:43:9f:de:4b:86:e5:2d:0c:4d:09:11:39:48:64:eb:
         85:db:e9:02:2e:f0:4c:b8:e0:e9:d2:02:70:25:35:ac:af:f2:
         05:d9:ea:9f:ed:5c:45:5d:a8:fc:c9:c0:29:b5:fb:cb:e9:75:
         e5:36:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:18:48 2025 by rpki-client