Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
File:                     167e52c7-fbe4-3f43-bddb-624de95626ec.roa (raw, json)
Hash identifier:          f4krj/xBRW2XS+Mn4uI4DO56YiWSUptlgTTLWPujEwY=
Subject key identifier:   CB:F2:EB:A5:BB:1F:EE:E4:EB:29:EC:56:89:C7:57:2B:3C:98:88:28
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285848CDE11525B58487B3EFE9ED40
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7862
IP address blocks:        146.23.192.0/22 maxlen: 22
                          146.23.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:15:25:b5:84:87:b3:ef:e9:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=f17e2cd8-3e92-48a5-80af-7a6f6621d3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:f4:89:e6:33:58:66:08:01:1a:93:31:c7:
                    18:8e:fa:5f:a8:52:08:01:8a:ca:d1:db:40:ab:e6:
                    d5:22:e1:f9:b8:fe:33:36:49:f6:95:64:b1:0b:03:
                    d3:fc:ef:fd:f7:48:2a:f2:d0:00:dc:96:ad:fd:24:
                    4a:2e:17:9b:70:39:cd:d4:f4:bb:85:89:d7:66:cf:
                    df:b8:fb:43:13:d6:be:bd:2f:f3:90:c9:79:71:2b:
                    0a:92:58:c6:a1:d8:f3:23:17:43:98:a3:e7:5b:a6:
                    6a:ed:25:19:15:b3:c9:59:f7:b5:2a:8a:34:c2:82:
                    5d:92:01:b5:c7:c8:ea:3c:de:ac:7d:f3:0b:1f:88:
                    97:ec:14:65:4c:ee:36:19:48:6f:4d:f9:d8:40:79:
                    0d:4f:52:70:bf:bb:27:fb:da:ec:9c:74:9c:6a:2b:
                    07:80:38:e2:71:69:84:f8:49:59:46:7a:28:73:6e:
                    a8:fd:4e:21:bc:59:ca:86:56:c6:b8:ef:bb:5a:a5:
                    59:dc:7c:38:ae:cf:4e:97:32:eb:29:6e:d5:cf:2b:
                    66:56:5c:a0:81:a0:0e:ab:5a:ba:ef:88:59:ef:87:
                    a4:60:c2:2f:29:c5:28:be:a7:97:7f:dd:47:8d:c4:
                    1f:b0:ae:12:39:1d:00:11:fb:cb:12:9e:ba:a1:04:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F2:EB:A5:BB:1F:EE:E4:EB:29:EC:56:89:C7:57:2B:3C:98:88:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:61:7e:88:2f:e4:10:04:c3:8e:87:94:b8:c7:ab:3f:19:5d:
         20:5e:20:2b:14:54:ac:0f:c3:f3:5c:a2:61:ba:ad:7f:1c:04:
         8a:2f:28:43:2f:d6:40:d6:d9:1c:3c:c6:84:91:b0:06:b1:a9:
         dd:b9:f7:8a:63:98:82:af:f1:61:4a:ef:2a:0f:62:fd:4d:d1:
         31:06:b4:55:44:9d:1c:d2:b2:a7:1d:01:1f:e8:92:17:1c:ff:
         e7:d9:ef:6b:e9:18:fb:dd:6b:58:3f:3a:06:bd:21:12:bf:88:
         99:27:20:df:3c:ab:fe:f8:db:1f:50:55:19:c0:da:8d:10:14:
         a4:fb:41:20:71:6e:21:36:54:5c:5e:a3:cc:e2:e5:94:d1:cc:
         07:cc:fc:ad:9d:da:a3:8b:19:34:b1:d4:df:68:43:00:69:17:
         68:47:66:b7:72:fe:83:be:ef:4e:42:f7:d7:6e:06:32:9f:31:
         03:76:e5:40:44:df:1b:cc:8e:8d:fe:ea:46:a9:ad:f3:b6:e2:
         30:a5:02:c8:43:2e:c3:d5:98:b8:8f:dd:86:cf:e8:11:13:43:
         1d:8d:f9:fe:1a:30:3e:87:b1:59:13:de:00:d7:52:fe:f6:eb:
         b5:be:f5:16:c9:f6:2c:a4:7f:38:8e:c8:c4:1b:e5:cc:6b:b3:
         3b:78:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:42 2025 by rpki-client