Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa
File:                     8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa (raw, json)
Hash identifier:          KaWPI7SM4/8UP3hwQlMTP6BJ2nwKpY3FzXj5QV+6sBQ=
Subject key identifier:   8B:0C:FA:89:55:CF:02:66:3A:28:BB:D2:BE:A3:48:E1:0D:53:5D:EF
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584A8C70C619289F5D08E4AFB2C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     7862
IP address blocks:        146.23.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c6:19:28:9f:5d:08:e4:af:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=59d4e886-f5f1-4f06-85ca-2ccfcce3bbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:62:59:9a:a3:eb:21:15:ea:8e:16:5d:83:a7:
                    bc:57:47:42:a8:20:fa:0b:61:34:fe:a7:b9:c6:1c:
                    cc:7b:70:6d:e5:78:bf:59:09:dd:0f:a4:aa:c5:b5:
                    0e:e4:b6:bb:bf:dc:e0:7f:60:f4:eb:e4:59:64:92:
                    1d:be:ba:7d:9c:58:31:e3:28:ad:ad:db:3f:a0:b6:
                    db:3b:68:56:a1:6e:85:62:49:0d:4c:ad:56:e6:74:
                    0a:74:71:dd:a9:48:bd:e6:24:23:60:13:59:9f:57:
                    71:90:69:a2:ea:77:fe:dc:f1:1e:cc:dd:82:74:2e:
                    39:c9:fa:17:98:b8:69:00:30:23:cf:bb:36:f2:41:
                    8d:dd:32:a0:5c:60:1d:7a:90:bb:2e:37:aa:a4:e5:
                    fb:9e:cd:6c:6d:7c:86:af:07:5e:c3:b6:02:59:fa:
                    eb:a5:a1:d0:5e:96:96:f8:34:2c:b7:12:88:51:48:
                    f1:4c:65:51:0e:56:8f:e8:8f:b3:9a:d9:4b:36:f7:
                    ff:8e:ea:92:9f:2d:51:5f:ca:02:5b:f7:ca:7e:39:
                    a6:d4:ad:97:4e:3c:23:95:32:be:83:de:f9:16:c2:
                    34:df:cf:f0:3c:82:db:8c:10:7f:fa:df:0c:c7:07:
                    41:58:7b:d6:ae:15:e7:15:fb:b6:f8:c4:f5:75:b7:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0C:FA:89:55:CF:02:66:3A:28:BB:D2:BE:A3:48:E1:0D:53:5D:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:4b:94:39:f0:f2:0b:9b:a1:62:62:8d:fb:70:31:a2:e8:ae:
         48:44:b3:5e:c5:e7:ac:92:10:34:1b:e5:a6:8d:13:ed:49:9a:
         0f:c3:8e:8e:f3:b3:65:1d:7d:65:73:c7:f8:98:d9:6f:8e:ef:
         9f:86:8d:40:60:56:3e:cd:f3:24:ce:2d:3c:21:9e:47:18:13:
         a0:ca:13:d1:b6:f1:87:b0:f8:d6:96:71:e0:74:d3:43:b9:03:
         7d:7a:ba:84:52:b6:68:eb:46:1d:68:01:19:08:2d:f3:1d:33:
         d8:0e:de:76:fb:cd:fa:68:77:91:b5:d7:33:42:30:74:69:58:
         ee:c4:08:60:3a:73:56:4b:41:15:bf:0c:37:c1:4d:0e:19:53:
         0c:4e:55:9e:f2:82:63:5f:93:77:cc:3a:b0:10:73:14:eb:c2:
         23:54:5a:38:7d:91:4f:10:8d:6e:92:8d:45:88:82:eb:8d:55:
         c2:82:64:3d:4d:96:60:89:ad:ac:25:f1:39:65:1b:ba:e1:8b:
         e2:10:7e:33:03:af:f4:0f:f8:69:17:05:70:d5:f6:20:3c:9f:
         ea:7e:bb:84:38:39:ad:75:c9:9f:70:aa:64:09:45:38:ef:35:
         71:30:46:13:33:f6:8b:d0:45:65:db:e3:d4:e1:68:60:5d:2e:
         0c:3f:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:13:48 2025 by rpki-client