Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d79477ef-1ac5-3b37-bbe1-5b4e8530b701.roa
File:                     d79477ef-1ac5-3b37-bbe1-5b4e8530b701.roa (raw, json)
Hash identifier:          vk6efBBHtUMNc6TswAudKAN1QbIaxE3TpNOyq4fTiqo=
Subject key identifier:   0B:19:FB:A9:79:DB:4F:B8:80:AB:31:47:F5:93:9E:0E:4D:32:44:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B18142878D56ECCCEB21EF200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d79477ef-1ac5-3b37-bbe1-5b4e8530b701.roa
Signing time:             Fri 05 Sep 2025 13:27:43 +0000
ROA not before:           Fri 05 Sep 2025 13:27:43 +0000
ROA not after:            Thu 04 Dec 2025 14:27:43 +0000
asID:                     22516
IP address blocks:        71.46.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:28:78:d5:6e:cc:ce:b2:1e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:43 2025 GMT
            Not After : Dec  4 14:27:43 2025 GMT
        Subject: CN=0429f227-64dc-4977-bec1-0b66b353070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:cb:33:41:01:81:aa:aa:22:93:2f:b9:22:
                    69:f8:87:3b:ea:cf:e8:d8:ce:67:87:65:c0:4b:8d:
                    fa:c7:12:94:c8:c4:4d:54:5e:c4:f2:42:44:70:1f:
                    a3:c7:4d:57:93:09:76:a7:49:a5:16:21:76:52:22:
                    79:a4:8e:2a:1a:05:50:a1:77:c8:cd:68:80:91:6e:
                    b8:33:9d:45:dc:e4:7a:7e:d9:7a:eb:ef:96:8a:d8:
                    4b:84:33:e3:ce:ad:4d:ff:81:b3:0f:3b:cc:5b:12:
                    5d:15:62:2a:09:a1:2d:46:08:b9:fb:ef:14:b3:1d:
                    10:62:26:07:c5:6d:53:74:f5:61:71:25:8a:a2:f9:
                    88:be:6e:47:e5:1e:73:c8:67:20:bc:d2:95:3c:97:
                    89:23:a9:1c:02:b9:69:9c:71:96:3f:35:89:23:1a:
                    6c:5a:fc:27:8b:72:3a:78:7f:9f:13:70:7e:3d:95:
                    59:a7:d4:c5:20:47:ac:f5:53:93:1c:0c:c6:bb:ba:
                    41:01:2d:96:6d:7d:23:08:e7:9a:40:e7:20:b8:01:
                    7e:61:b3:a2:da:d2:72:25:bc:4c:cb:cd:d0:31:10:
                    1c:43:94:e9:a6:95:48:bc:b1:99:8d:b8:de:eb:5d:
                    7c:b6:c3:23:01:e4:04:9a:8b:78:55:1f:30:b8:a6:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:FB:A9:79:DB:4F:B8:80:AB:31:47:F5:93:9E:0E:4D:32:44:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d79477ef-1ac5-3b37-bbe1-5b4e8530b701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:03:02:00:9c:03:c1:e0:f7:7d:46:e8:d8:5d:58:7f:6d:
         ff:b6:55:34:e4:a1:f9:85:45:ac:66:ce:5f:bc:3c:86:6d:c9:
         b3:63:00:51:09:60:4d:99:10:85:a0:66:64:15:e3:6a:66:74:
         c5:be:78:0e:1e:60:01:0b:25:67:3d:90:e9:b7:93:88:68:e9:
         ba:f8:60:06:83:a2:b6:7f:88:1e:37:af:42:b9:22:98:8f:5e:
         4e:1d:ab:d6:88:b2:b8:20:0f:17:83:85:93:14:33:1f:29:23:
         bf:ec:04:b8:ea:16:1c:ce:0c:8a:7c:82:48:89:62:39:10:90:
         6f:97:b8:0d:66:27:8c:40:e3:0f:3c:ec:27:17:02:97:0e:ff:
         8e:90:d3:7e:50:d4:1e:1c:0d:94:27:70:bd:c3:23:2c:dd:c4:
         d8:b3:67:0a:9b:48:2f:0d:68:d9:14:12:89:43:3c:21:ba:74:
         39:ef:17:a7:e8:b4:f2:3f:b8:72:5a:00:5a:3f:67:2c:15:6b:
         82:fe:05:53:1d:a0:79:f5:bb:35:8e:fb:93:be:26:1e:0d:59:
         ce:8f:6e:6a:7a:c5:87:ab:d4:26:ad:f3:b5:6d:1d:44:71:ba:
         2e:45:6d:f7:a4:72:92:72:a7:13:78:dd:89:4f:9c:1b:40:54:
         31:1a:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:12:23 2025 by rpki-client