Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          IMTPqPTKNxDrojVeTuMUhZTuD1noxbxCVo9Pe3GAc48=
Subject key identifier:   E7:4A:C3:E5:62:02:BD:08:54:2D:EB:4B:E7:54:B3:87:6A:B5:D6:81
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584900216DC58BF2F57F92BAB200
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6d:c5:8b:f2:f5:7f:92:ba:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=cc522d7e-e61a-4e03-90e0-7596566147f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:cb:57:b8:97:9b:e4:e7:f7:04:02:66:0a:
                    2c:dc:1d:96:6d:5f:ec:2b:6d:3e:e5:db:20:c1:e1:
                    cb:cb:a4:d2:3b:e8:6c:60:c8:e0:6c:3f:4a:d5:d9:
                    f6:48:14:2a:f9:5b:80:60:70:3f:7f:40:2c:70:b6:
                    d7:f3:53:ea:12:bd:16:d3:99:7c:99:1a:fc:db:da:
                    92:24:11:4e:b2:32:af:2c:46:0b:32:84:11:b9:ff:
                    60:a9:e4:30:33:dd:17:36:4e:fe:81:da:ce:2f:d3:
                    de:29:1a:fb:09:69:4f:77:4f:39:03:58:7a:6c:83:
                    c9:7f:96:eb:1d:52:3e:b8:15:63:4a:ad:10:77:fa:
                    3a:ee:ea:e7:34:ed:02:02:70:17:1c:1e:d5:53:8a:
                    29:24:76:a6:42:b5:2d:4d:4d:6c:1b:26:9b:86:99:
                    eb:9a:5c:f8:46:1e:53:ab:ed:f3:81:fa:53:81:69:
                    3f:5d:83:dd:ec:38:0b:2e:3a:3d:32:ba:a4:26:5b:
                    5b:6d:66:a7:9c:0a:ea:e5:e7:a3:a9:1f:49:27:fc:
                    3b:92:6f:ea:5a:59:c5:8a:df:98:68:9d:92:4e:a6:
                    91:77:d4:34:18:24:c7:a2:0f:96:32:94:87:8f:fe:
                    fa:5d:16:57:05:0a:ab:08:6a:cb:a9:a7:ae:bb:25:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4A:C3:E5:62:02:BD:08:54:2D:EB:4B:E7:54:B3:87:6A:B5:D6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:60:e3:65:bc:96:f4:e3:a5:c8:fe:1a:c0:fc:5b:ad:23:e7:
         43:9f:90:0d:e0:0a:1e:ed:5b:55:59:4d:a0:65:fc:e7:4a:25:
         57:df:69:90:16:45:1a:e0:35:39:ff:ca:2b:6d:e2:3d:aa:ff:
         0e:bf:95:42:e0:ad:42:2e:7d:bb:56:a8:a1:ec:09:0d:d3:07:
         5f:d9:b0:46:dd:60:48:8d:00:cb:05:1f:86:40:70:ea:f3:89:
         b7:7e:e9:c7:54:01:a9:89:b5:54:4f:6c:dc:38:bd:ee:8c:83:
         84:0d:ff:6b:c3:d8:b5:03:d2:fb:f9:5b:6b:00:ce:8a:ba:2a:
         f5:b3:dc:c7:a8:e3:40:9a:b8:cd:6d:ed:1b:07:4b:b8:27:8a:
         f2:da:ab:81:62:a7:53:c3:45:2c:8e:44:59:29:6a:13:48:b4:
         af:fe:35:65:32:fa:d8:38:76:11:8a:64:e1:92:2f:f3:4b:49:
         19:a9:fa:79:2f:3a:8c:96:00:fe:e8:16:8d:ba:9a:4f:60:d0:
         69:b7:e8:e8:ab:64:3d:4d:ad:f8:a4:11:ce:ff:b4:2e:1d:ef:
         45:dd:22:51:43:05:06:a2:ef:5d:14:4c:e4:11:72:23:2d:72:
         7c:7e:9d:3a:37:63:80:19:6e:a6:75:7c:71:e3:6d:80:d1:9a:
         30:9b:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:41 2025 by rpki-client