Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
File:                     3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa (raw, json)
Hash identifier:          w3Nqu2pY4JsJbhWcbNViEgC34c/Ppxuc4oeBGlTf1II=
Subject key identifier:   5D:BE:41:45:FB:36:D6:A9:AF:27:6A:29:7F:56:7A:49:6E:35:A3:1A
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285848CDE10CD005E9926CEB34FB00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7862
IP address blocks:        146.23.8.0/22 maxlen: 24
                          146.23.16.0/22 maxlen: 24
                          146.23.20.0/22 maxlen: 24
                          146.23.28.0/22 maxlen: 24
                          146.23.62.0/23 maxlen: 24
                          146.23.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0c:d0:05:e9:92:6c:eb:34:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=44551fdf-ae95-4bed-a74d-c7f181c069c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:bc:b2:a9:e0:82:39:c3:f7:58:c8:8f:d6:
                    be:29:fb:56:03:0d:43:8e:71:d7:a7:b7:63:13:a2:
                    0f:07:9c:75:89:fb:b2:d3:88:41:2d:f9:67:38:27:
                    eb:4d:61:3e:a3:14:a9:04:d5:ab:df:0a:f4:02:58:
                    0f:e9:17:24:35:b6:0f:9f:68:a6:32:bd:3d:e9:3b:
                    64:78:4c:57:5e:91:f8:8e:43:da:58:c6:0d:e4:0d:
                    ad:f6:13:58:bf:f9:e2:8c:b2:a0:6b:47:45:97:af:
                    8a:88:31:9e:86:9f:06:67:e5:c8:63:ed:aa:a4:7a:
                    56:bf:39:7b:a8:f8:f5:f6:92:22:ed:c6:39:cb:57:
                    8d:3d:09:b8:e1:04:64:bd:b8:75:54:cf:aa:c2:11:
                    33:72:1b:c3:9a:f4:37:8c:37:7a:7d:b5:a1:5e:19:
                    d5:27:f8:db:1b:f9:10:f0:bc:38:8b:b8:75:ca:57:
                    69:26:bb:4a:4e:f9:23:81:c9:3d:41:84:a1:40:3d:
                    8f:d0:d6:35:d0:d3:6c:43:09:f9:d1:d3:00:6a:b9:
                    49:a0:c7:b5:eb:87:0a:55:cf:50:ee:a4:70:02:fd:
                    f9:a1:5c:8a:77:22:70:79:41:90:02:86:27:56:87:
                    23:b9:c1:c4:b3:da:10:70:cf:2e:47:fd:70:9f:ca:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:41:45:FB:36:D6:A9:AF:27:6A:29:7F:56:7A:49:6E:35:A3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.8.0/22
                  146.23.16.0/21
                  146.23.28.0/22
                  146.23.62.0/23
                  146.23.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c5:db:cc:df:02:28:57:33:fc:77:04:fb:3b:27:53:50:45:
         dd:4c:32:4b:bb:c8:3e:c7:34:c4:a0:72:f1:e2:55:a3:e9:e4:
         7e:46:cf:3f:6d:5b:1f:99:49:68:d9:dc:bd:76:51:ae:bb:e1:
         a0:24:f2:65:35:57:f8:c8:ba:05:58:10:15:cb:f1:74:fe:cf:
         1d:98:38:3c:ef:50:98:fa:a5:45:cd:b5:60:eb:87:b0:21:32:
         27:6b:d0:dd:93:7b:f7:7d:0e:08:20:4a:fc:73:6f:a8:78:48:
         e9:03:fd:80:6d:f7:5e:dd:6c:82:4c:b7:39:2d:32:02:c7:cc:
         c7:c6:6c:90:53:f3:60:b5:30:57:d9:46:e7:50:fc:09:df:46:
         64:83:2a:d2:4c:6c:72:92:25:bd:c5:47:f2:f0:b5:1b:46:7a:
         ab:1e:04:21:e1:74:b7:6e:45:24:ce:ae:10:59:37:19:9c:fc:
         04:90:54:06:97:9a:89:e6:bd:a5:81:48:cd:94:d0:3a:87:38:
         39:f6:9a:e0:46:40:ed:73:80:2e:74:ed:5d:f1:38:b2:88:4a:
         b2:26:59:1b:51:58:6e:35:4b:08:63:ac:83:36:94:41:3b:b9:
         53:30:da:68:da:e0:e4:5c:b4:e8:39:b6:23:11:d9:9b:d5:26:
         21:6d:97:c4
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEjN4QzQBemSbOs0+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
NDQ1NTFmZGYtYWU5NS00YmVkLWE3NGQtYzdmMTgxYzA2OWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou28sqnggjnD91jIj9a+KftWAw1DjnHXp7dj
E6IPB5x1ifuy04hBLflnOCfrTWE+oxSpBNWr3wr0AlgP6RckNbYPn2imMr096Ttk
eExXXpH4jkPaWMYN5A2t9hNYv/nijLKga0dFl6+KiDGehp8GZ+XIY+2qpHpWvzl7
qPj19pIi7cY5y1eNPQm44QRkvbh1VM+qwhEzchvDmvQ3jDd6fbWhXhnVJ/jbG/kQ
8Lw4i7h1yldpJrtKTvkjgck9QYShQD2P0NY10NNsQwn50dMAarlJoMe164cKVc9Q
7qRwAv35oVyKdyJweUGQAoYnVocjucHEs9oQcM8uR/1wn8o5zwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFF2+QUX7NtaprydqKX9WekluNaMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvM2I3MThiZDctYmQ4ZS0z
YjkxLWJiMDMtODJhYzViMmYwNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCkhcIAwQD
khcQAwQCkhccAwQBkhc+AwQBkhfqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJTF28zfAihXM/x3BPs7J1NQ
Rd1MMku7yD7HNMSgcvHiVaPp5H5Gzz9tWx+ZSWjZ3L12Ua674aAk8mU1V/jIugVY
EBXL8XT+zx2YODzvUJj6pUXNtWDrh7AhMidr0N2Te/d9DgggSvxzb6h4SOkD/YBt
917dbIJMtzktMgLHzMfGbJBT82C1MFfZRudQ/AnfRmSDKtJMbHKSJb3FR/LwtRtG
eqseBCHhdLduRSTOrhBZNxmc/ASQVAaXmonmvaWBSM2U0DqHODn2muBGQO1zgC50
7V3xOLKISrImWRtRWG41SwhjrIM2lEE7uVMw2mja4ORctOg5tiMR2ZvVJiFtl8Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:18 2025 by rpki-client