Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6e390cb7-b995-319f-a8a2-19656b58fc69.roa
File:                     6e390cb7-b995-319f-a8a2-19656b58fc69.roa (raw, json)
Hash identifier:          r34HPUbm1tiOIyIr+cb/R9J90603Hy/wk6Vn69K6TOw=
Subject key identifier:   82:E8:98:24:BD:97:E9:B1:06:F4:C5:4B:49:98:81:AA:59:95:DC:BE
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285848CDE10E764B419A09FF02A800
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6e390cb7-b995-319f-a8a2-19656b58fc69.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7862
IP address blocks:        146.23.46.0/23 maxlen: 24
                          146.23.226.0/24 maxlen: 24
                          146.23.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0e:76:4b:41:9a:09:ff:02:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=365ce35c-3df2-4fef-a813-d052bd820d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:9a:1c:9f:54:47:f9:d9:bd:5b:e5:a8:2f:
                    8e:33:de:e6:0c:f9:56:b2:49:33:df:9e:7e:63:14:
                    6f:0d:55:c0:e0:d1:99:36:8e:b1:f7:e5:18:c1:72:
                    ee:56:95:46:61:de:c0:3d:4a:2a:e8:d4:03:80:2f:
                    fe:a2:e7:c1:41:9c:9e:61:9b:59:ad:6f:6d:88:60:
                    85:30:99:5b:c2:09:54:b2:59:a5:d7:52:43:21:a4:
                    95:86:62:d2:71:a6:40:28:bd:d9:de:b0:0d:f3:e6:
                    a1:e5:d6:86:fb:5a:a1:48:7f:f6:e6:09:8f:91:e7:
                    0b:06:72:e9:e0:ba:37:ec:5c:39:58:ea:2b:12:06:
                    51:d6:bd:6f:25:bb:23:d8:dc:56:3d:71:50:02:8b:
                    d4:eb:b2:0a:76:6b:fe:7b:ec:ab:c1:c4:1b:de:0e:
                    c1:01:e8:8c:c3:d9:e1:18:ca:80:7d:19:84:2b:e8:
                    47:f5:36:2a:e6:21:75:2f:65:25:52:e4:96:b2:ae:
                    de:84:64:e0:13:fb:45:7a:f1:76:e8:d7:09:bd:e8:
                    44:c1:3c:5c:f5:65:1b:1c:46:ac:74:40:2d:12:cc:
                    dc:bf:cd:f1:76:9c:d5:ba:f9:a9:f8:6e:d0:4a:62:
                    af:ac:f8:2e:9a:32:7a:33:13:9f:6f:ef:f1:b3:7a:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:98:24:BD:97:E9:B1:06:F4:C5:4B:49:98:81:AA:59:95:DC:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6e390cb7-b995-319f-a8a2-19656b58fc69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.46.0/23
                  146.23.226.0/24
                  146.23.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:84:f2:33:70:ab:92:f4:7a:bb:54:4d:73:7e:a6:b3:8a:fa:
         c4:be:97:3c:9a:b3:ae:e5:ef:1b:e6:c4:4b:32:5c:8c:35:f0:
         4f:89:9a:41:2e:43:c1:0a:23:88:68:cb:55:63:ce:dd:96:71:
         77:b7:34:27:26:fe:ba:86:e1:89:2c:6b:9f:a5:14:b8:24:ac:
         00:7c:23:6b:78:eb:3e:76:e3:3f:a3:81:5f:3b:39:e3:e3:1d:
         07:8c:2e:38:7f:c8:10:39:ec:ff:e6:88:18:43:af:52:ac:56:
         3b:cf:07:54:3b:d6:a1:e2:14:1c:e9:b8:00:06:78:29:bd:bd:
         cb:d5:28:9c:f2:75:3c:99:0a:4a:02:69:58:3a:31:1f:5b:ba:
         98:aa:d4:df:0b:a9:28:e8:2d:2d:09:e0:d7:63:ba:b9:39:73:
         67:50:f0:c5:7f:88:25:92:32:ed:1f:5f:f9:7c:23:8e:69:e9:
         25:4c:4f:09:33:ef:cb:e3:93:3b:d1:e3:ae:4a:b0:e3:8a:e2:
         5d:65:7c:d3:26:e2:04:42:fe:f5:28:79:92:66:d4:45:30:4a:
         b2:72:de:99:c8:c4:3d:cd:01:be:bd:68:ae:27:66:65:68:9c:
         80:8e:98:8e:31:7b:5e:ad:f4:6c:cc:3f:a4:d3:b3:5f:23:43:
         3f:32:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:59 2025 by rpki-client