Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa
File:                     4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa (raw, json)
Hash identifier:          JIU7KGfGVLA7tfEr6PEH+rqxqZFAaPufAelGwoRHlNk=
Subject key identifier:   33:19:0C:FA:CA:5C:86:7B:A5:78:65:03:19:7A:13:41:CA:19:BD:06
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F432858481F653886A4779B51B0112200
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     7862
IP address blocks:        146.23.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:38:86:a4:77:9b:51:b0:11:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=34e0101c-de1b-4733-8ce9-066673f8803e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:9c:98:8f:47:29:75:14:d2:f8:d2:35:68:
                    c3:bb:97:72:04:cb:25:eb:76:4e:69:b3:64:0c:24:
                    dc:fe:70:ff:0f:e0:b4:f6:d4:3c:e1:52:f0:be:3b:
                    91:ee:e6:7a:01:07:ac:00:eb:47:73:fa:ca:54:b9:
                    9b:b6:52:76:f7:43:be:da:f7:db:ac:08:a3:17:86:
                    d6:84:a1:5a:2d:ab:2e:7c:a9:42:5b:4d:80:48:08:
                    22:0f:ad:07:43:4e:8e:0a:3f:0f:23:77:b3:69:60:
                    e6:dc:9d:2c:7e:09:d8:d8:b3:78:70:d3:f5:c0:1b:
                    9a:24:14:3e:2f:ba:8a:01:d7:ca:a9:21:ad:29:75:
                    d3:a7:1e:50:66:39:5f:a5:0c:eb:59:99:7a:a6:66:
                    e3:b9:61:18:95:c7:3c:7a:f9:cc:0e:2e:bc:5b:f7:
                    ae:91:14:1b:86:91:ec:b6:8d:2f:19:44:6a:9d:46:
                    bb:c8:49:e8:7c:03:93:22:f4:7e:48:5f:d6:aa:44:
                    ec:a1:71:0b:8e:5d:bd:ce:96:c4:6b:b5:40:4b:b6:
                    f5:c6:80:23:db:e7:34:20:65:69:30:a9:c1:b0:8e:
                    e7:e0:61:4c:29:6c:61:5e:8a:f9:db:b7:35:7a:ba:
                    15:99:ef:ed:a2:42:8b:8d:6d:76:ff:59:6a:18:13:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:0C:FA:CA:5C:86:7B:A5:78:65:03:19:7A:13:41:CA:19:BD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:31:8f:38:3a:cf:ea:3e:11:8a:47:90:0a:c4:04:b0:55:ed:
         2c:23:5a:65:78:4e:2c:6e:c7:da:11:c1:b5:97:c9:8c:6a:4a:
         41:7b:cc:49:31:3d:8a:5e:40:83:fe:dc:6a:30:a3:98:bd:ef:
         26:31:7d:6d:87:5c:ea:fb:59:b5:23:78:aa:5a:e4:9e:f2:53:
         d6:1e:0e:55:c3:64:7f:2a:ce:1c:2c:05:25:dc:f3:f2:cc:36:
         cf:9d:8b:7e:fd:0e:83:21:b2:b7:74:e5:3b:52:51:92:a7:b3:
         f2:44:d7:a7:64:d2:cc:b3:32:ba:bd:5c:5e:47:3e:df:fd:ea:
         c5:59:61:47:a4:7a:86:e7:f6:48:64:f7:7c:41:d8:24:f3:1c:
         cb:62:ff:92:70:f5:39:82:35:0f:4e:7b:f3:2a:b4:c1:68:3c:
         13:65:71:67:8c:49:e4:38:28:f7:a9:fe:53:8a:90:6f:6b:93:
         11:c3:cb:be:ac:6c:ac:ff:41:d0:d7:1e:c0:cb:88:97:df:14:
         21:3f:10:1e:44:07:62:f8:72:3c:f5:39:ae:83:15:31:ab:68:
         7f:a3:eb:b5:7a:64:bf:ab:c2:ea:52:9a:a5:ab:55:e8:eb:6b:
         53:ec:44:08:70:5c:26:cf:de:2e:53:00:82:a5:44:a8:92:c2:
         69:67:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:19 2025 by rpki-client