Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
File:                     3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa (raw, json)
Hash identifier:          dmUH4hpU2i+EN9IhQT3Y8ztczJzfEGhRsQ1wefxfXWc=
Subject key identifier:   EF:0C:CB:4D:01:FE:15:DA:10:86:2C:45:DF:22:8E:C0:DD:97:DE:04
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285847EE8A267DD74D7D5DB3CC7B90
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7862
IP address blocks:        146.23.8.0/22 maxlen: 24
                          146.23.16.0/22 maxlen: 24
                          146.23.20.0/22 maxlen: 24
                          146.23.28.0/22 maxlen: 24
                          146.23.62.0/23 maxlen: 24
                          146.23.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:26:7d:d7:4d:7d:5d:b3:cc:7b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=946b5bce-68d6-4678-9615-d5091f53b082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:38:a6:4d:92:7b:ee:f6:c1:51:0e:21:29:
                    8e:c1:65:84:a7:a4:a5:c4:9f:15:ff:2a:19:b2:b9:
                    0a:5e:9e:02:08:b9:de:bc:ad:6a:ed:1c:72:26:d0:
                    ef:9b:32:18:4d:66:9f:24:2a:4c:e2:c7:ba:1e:1c:
                    89:05:a0:c7:43:92:4b:41:ff:58:38:73:06:1f:e1:
                    95:8d:3b:5e:07:ac:c1:98:c9:a6:c6:98:df:be:85:
                    43:91:81:76:7f:46:f5:fe:a3:ca:7e:c7:ea:f3:73:
                    06:36:d2:75:00:89:3f:f9:ea:30:79:e8:4a:26:cc:
                    71:a2:af:d1:70:44:e7:69:c0:0e:a2:61:6d:f5:fa:
                    ef:43:44:9e:06:4a:be:5e:3b:3c:25:de:08:82:97:
                    4a:52:a2:ee:e7:6f:2e:95:1a:4b:2d:cd:a7:61:69:
                    53:e8:73:7c:33:eb:fe:7b:61:f9:3e:77:86:98:e7:
                    8e:49:4d:01:b1:90:1d:3a:ff:bf:88:42:9d:66:69:
                    77:53:bd:58:0f:dc:f7:69:14:83:5a:29:41:49:70:
                    f1:7a:dc:d6:5c:ac:e0:ec:dd:01:3a:b9:d7:cd:9c:
                    5a:ab:d6:43:97:e4:55:d2:05:fa:ca:44:fd:18:77:
                    b4:b9:ff:3a:33:89:85:5a:33:d2:bf:db:2c:e0:55:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:CB:4D:01:FE:15:DA:10:86:2C:45:DF:22:8E:C0:DD:97:DE:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.8.0/22
                  146.23.16.0/21
                  146.23.28.0/22
                  146.23.62.0/23
                  146.23.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:d7:c9:70:6c:1c:1e:ab:ff:87:0f:85:ee:6b:13:6d:62:
         43:3a:26:6e:24:b9:72:e2:00:f1:dc:78:5b:da:b3:c7:36:ca:
         8b:84:de:79:41:86:39:38:98:7f:ca:bb:75:75:19:15:9b:59:
         0e:5b:8a:68:a3:20:25:b1:df:27:fb:09:3a:4d:1a:e8:99:d9:
         06:8c:f9:fc:0c:c1:14:34:5a:2c:14:73:d7:aa:ff:92:d2:c9:
         f6:5c:d2:7d:49:97:37:d3:e0:52:4b:92:21:01:0d:2d:b8:1e:
         d7:0f:e9:5a:91:ce:44:30:f8:e5:f6:b7:97:38:2c:d1:fc:fa:
         40:cc:60:55:a1:88:ed:03:53:b4:d1:2e:5d:8f:f4:20:8c:df:
         62:89:7f:18:17:42:4d:c5:22:e8:61:05:3f:21:ac:02:44:4e:
         0b:8d:78:10:a2:44:e8:e5:1f:5d:bf:72:18:6f:74:9c:c3:8b:
         a4:f4:8b:9b:67:89:a2:5e:8a:86:6c:76:83:81:61:03:c9:51:
         f3:9d:3d:60:ad:07:df:34:44:2b:28:e1:53:10:84:8c:3e:76:
         9a:ab:9e:9e:27:bd:24:4a:54:30:6d:ee:6d:f3:e5:95:cc:57:
         ec:f6:47:af:83:10:ef:fc:7c:d1:f1:52:35:53:70:eb:a9:6b:
         da:d1:04:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:03 2024 by rpki-client on console-fra.rpki-client.org