Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa
File:                     1a719295-aec9-3735-9952-520d20827ef7.roa (raw, json)
Hash identifier:          DKqazkmwh2za4FAY97FaSijujkYwlh1C0KokpcfO+zg=
Subject key identifier:   25:F9:76:02:62:DB:C9:F0:B7:76:D1:11:36:2E:62:90:18:17:32:D5
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584900216DA8D38F8CA8BD751880
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     7862
IP address blocks:        146.23.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6d:a8:d3:8f:8c:a8:bd:75:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=f5bfb906-7dd8-4a0f-89f2-829fd59d22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:32:77:c9:74:94:fa:75:7a:fa:a5:84:cd:
                    83:67:1c:86:0a:b3:01:5e:05:d7:47:3d:e9:1d:a9:
                    32:c2:93:c4:4c:be:b6:2d:5c:a3:c4:f1:a5:f4:38:
                    5b:d6:45:7f:50:aa:44:34:5c:21:dd:f0:b3:4b:d0:
                    e2:c0:20:6c:c2:9a:59:24:c2:29:33:e4:36:fe:79:
                    8e:da:6c:48:0d:4a:03:be:bf:5c:68:a1:9c:bb:48:
                    00:f0:ff:5b:9a:78:fd:61:82:7e:9b:ba:cd:00:f0:
                    ba:77:98:a1:e0:ca:bd:4b:c1:9a:a6:bd:4d:9b:d4:
                    74:97:a1:c0:2f:13:50:c8:f0:fb:c0:39:20:6c:36:
                    30:de:22:fc:89:ea:e2:4b:eb:5a:84:6b:a1:e5:eb:
                    57:f6:be:02:a5:ea:2a:a7:bf:65:e5:18:82:6e:41:
                    f8:b3:66:97:58:d3:76:3f:38:c3:30:e8:95:02:09:
                    1d:73:0d:72:0a:30:1b:56:68:f8:1c:55:b1:86:bc:
                    19:73:1e:48:c9:e0:6f:b5:84:ca:c1:b9:61:7f:da:
                    7b:45:3e:46:06:6e:1f:f4:d1:83:dc:e6:1b:18:2a:
                    a9:98:80:99:50:a3:36:aa:0e:de:d4:5b:d1:af:87:
                    d5:4a:06:81:04:d0:fb:4c:a9:ec:06:49:73:2a:25:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F9:76:02:62:DB:C9:F0:B7:76:D1:11:36:2E:62:90:18:17:32:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/1a719295-aec9-3735-9952-520d20827ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:42:7e:2f:01:a4:87:a6:5c:31:ec:d4:11:56:2a:44:f3:
         24:d5:02:f6:28:a2:e2:15:22:22:e1:9c:3f:a2:bc:48:7d:bc:
         3a:ef:d3:50:93:e1:94:3d:5e:8b:8d:0a:a0:18:b7:70:a5:ae:
         0e:e9:95:a4:37:25:fb:50:ca:a3:76:27:88:31:4a:c0:a5:f8:
         96:a5:b8:34:4b:93:98:2b:a9:14:07:d8:33:29:c1:d8:35:77:
         8b:00:77:e8:62:89:49:b4:41:5e:a3:be:ed:d4:d8:cb:c6:ed:
         1e:93:68:20:fd:1e:24:48:2b:94:b6:ee:0f:00:59:59:ef:35:
         94:45:21:29:30:32:50:75:5a:30:98:96:47:c6:e4:47:a5:51:
         a0:d3:d8:10:26:75:16:0a:b7:01:3a:be:be:a8:f8:fc:a3:ca:
         61:d1:62:90:4c:07:1b:2f:be:e5:6a:60:71:75:4a:3c:50:99:
         20:ab:74:74:dd:3f:1a:2f:28:b3:df:35:20:fc:b2:e4:c8:51:
         30:d6:68:e7:57:2b:2d:78:0f:19:8d:93:b2:d5:5a:db:86:25:
         a4:22:fe:4c:ed:25:81:0b:35:95:2a:d8:b1:2f:81:8e:ff:62:
         84:13:91:2e:b6:e0:45:93:8b:48:29:e5:af:b1:6b:ec:d4:97:
         29:c1:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:11 2025 by rpki-client