Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa
File:                     44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa (raw, json)
Hash identifier:          aV7tDZHl9bgubcoXiy8GwHHGyyacFm9aeNTDt2Q3DTs=
Subject key identifier:   F8:FC:42:DE:50:AC:72:97:EA:BE:1C:0E:68:1C:3E:B1:A6:FD:8A:16
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584B0A116D35AA5E5DDC41DD8FE0
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     1273
IP address blocks:        47.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6d:35:aa:5e:5d:dc:41:dd:8f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=ac842525-7c7c-43c5-baf2-a31635cf2bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:9f:02:6b:1b:ec:f4:b4:53:bc:ed:e4:56:
                    ff:41:68:35:d0:b2:61:ab:b0:65:1a:f8:48:dc:1d:
                    d8:68:c8:ba:9a:f9:98:88:14:e1:3c:e3:fe:6c:87:
                    03:cf:de:58:1d:96:68:95:aa:4c:cb:85:23:fc:70:
                    1e:b8:94:d8:e2:2a:13:69:04:ef:49:7b:f4:ce:e0:
                    50:01:24:dd:7f:d1:87:e8:0a:60:70:b4:c4:f6:fa:
                    24:3e:c7:ed:1b:22:c4:9a:45:8b:9c:13:db:43:6e:
                    80:84:6d:78:1e:7f:3c:dd:59:6b:b3:87:be:44:18:
                    9c:a1:05:fa:7d:41:d7:bc:75:45:7c:1d:d5:aa:63:
                    d8:df:f0:80:78:30:f6:2f:30:55:f5:ab:1b:67:e7:
                    a0:02:cf:d5:c3:51:d0:1c:c4:62:ac:aa:b1:75:cc:
                    bd:f2:1f:a8:d7:f7:3c:bb:e5:52:87:c3:31:e7:53:
                    68:93:d0:2f:69:b8:a6:2e:c5:12:17:80:ba:d7:c6:
                    12:03:0d:c4:4c:72:e8:7e:0a:53:5e:26:af:ca:f9:
                    ab:5d:f4:68:bd:88:10:7f:07:1f:8e:b2:71:1e:76:
                    fd:cb:6e:47:22:15:39:a9:a8:79:bc:43:80:4c:d6:
                    05:5b:fd:51:18:f6:da:24:c7:d2:15:0f:9d:d5:c4:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:42:DE:50:AC:72:97:EA:BE:1C:0E:68:1C:3E:B1:A6:FD:8A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:e4:c7:71:66:b1:23:b1:99:bb:7b:41:a7:e2:dc:85:04:
         77:ec:36:fa:f0:82:dd:55:67:2a:f5:5a:e2:ae:75:bc:d9:5b:
         09:5b:71:12:07:b3:29:4c:77:1a:9b:b0:aa:17:d9:80:11:5b:
         a6:29:d3:1a:60:9e:35:18:09:7c:7f:32:e0:c6:94:64:52:32:
         a6:a1:e6:d6:e4:e9:34:10:8b:2a:c9:b7:56:88:77:7c:31:b2:
         de:e1:e3:30:55:ef:44:08:cc:7d:0e:86:db:40:96:b0:91:18:
         16:5e:0e:9f:3f:42:32:5b:55:c0:5c:ee:7d:44:ca:7a:6b:bd:
         a0:85:88:b6:01:a2:e4:5a:81:ec:a3:14:c9:76:c6:4d:c5:8d:
         3f:25:be:17:79:5c:37:4b:0c:d7:4b:1a:f7:4a:a4:be:ec:e5:
         d5:26:df:93:42:8f:c8:f0:c7:ac:0c:82:dd:a1:c6:f1:99:56:
         7d:8d:09:9d:6a:93:be:04:93:e8:56:d8:6a:dd:fd:12:62:62:
         f6:47:97:06:f1:20:4d:0a:07:9f:78:fd:52:3d:14:ac:12:86:
         52:51:44:9e:36:1c:76:87:c0:ba:64:d6:f9:48:47:59:e2:60:
         61:b8:4c:0d:9c:ee:88:51:32:41:8e:cb:bc:53:1e:ca:6d:07:
         cb:4e:66:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:38:12 2025 by rpki-client