Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/79f9b34e-a1d5-3cac-ab71-3a445df560f9.roa
File:                     79f9b34e-a1d5-3cac-ab71-3a445df560f9.roa (raw, json)
Hash identifier:          ZKQjmBg5RirdLjBM8Tk3ojaZE+2fvUcDY9+G1PunyIM=
Subject key identifier:   EC:9C:52:3B:C1:95:D3:44:F9:EA:62:9F:83:B9:AC:F0:48:3D:28:76
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285848CDE10CDF2FAF66BFF95A5B00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/79f9b34e-a1d5-3cac-ab71-3a445df560f9.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7862
IP address blocks:        146.23.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0c:df:2f:af:66:bf:f9:5a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=662abe2d-853f-48f5-a84e-fee0696aaa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:e0:b3:f7:fa:f1:1f:1f:55:f3:0c:4d:95:
                    12:5b:66:95:ce:bf:32:46:ef:73:da:a1:05:4e:3e:
                    38:b4:a0:df:d1:5b:e2:88:49:bf:4d:54:5e:8d:75:
                    da:7e:7f:9e:10:f8:0e:13:81:e2:22:0b:0a:a1:19:
                    25:d9:34:c6:a9:a9:fb:20:2d:57:af:a7:61:3e:d8:
                    2e:88:c2:22:b9:42:df:cd:4a:bf:b2:b8:d7:be:36:
                    84:16:61:ac:77:66:b7:35:6b:0d:1e:eb:05:30:c9:
                    29:9f:6d:69:a9:b4:c5:2b:34:3d:31:d3:80:17:ad:
                    50:4c:01:08:92:c6:e4:5e:a6:31:ab:44:f6:12:a6:
                    cf:50:00:36:d4:25:f0:b8:ab:59:42:0e:34:7f:5b:
                    42:5b:90:c1:de:26:c5:67:fd:66:fb:a8:a9:4f:4f:
                    ff:83:07:30:bf:95:05:1b:91:17:e9:7d:b7:57:2b:
                    1a:20:ee:3f:b3:d8:05:53:56:85:42:82:9d:ae:bc:
                    82:18:49:23:79:e1:ff:3f:3b:fc:d8:a5:88:af:22:
                    98:15:0b:87:38:8e:bb:12:9e:7a:7c:2f:b5:d8:cc:
                    34:30:ce:e4:20:cd:d8:a6:05:03:ef:1a:51:d3:52:
                    c8:1c:d4:44:d4:76:84:e7:a9:3e:ce:4f:dc:04:e9:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:52:3B:C1:95:D3:44:F9:EA:62:9F:83:B9:AC:F0:48:3D:28:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/79f9b34e-a1d5-3cac-ab71-3a445df560f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:17:3e:c8:03:81:b1:1e:ef:04:c9:45:cc:8e:29:80:e1:
         03:9a:b8:69:e9:29:50:d8:f3:29:6a:af:7e:49:3c:22:12:9e:
         d0:20:70:e6:50:b6:67:b0:54:86:00:75:86:32:c0:83:ee:df:
         de:ca:36:f9:c8:03:2d:97:88:ba:60:98:99:f6:e1:00:7f:e7:
         d1:44:70:52:2c:66:db:aa:94:04:05:1f:10:15:4c:fb:a1:95:
         33:7c:b8:f7:a4:89:1a:d1:84:31:03:78:88:0a:55:34:18:7b:
         73:77:53:2d:a1:98:ff:7e:fe:9d:63:24:c8:91:97:91:ba:bd:
         92:33:68:5f:2e:6e:ef:a8:70:11:d9:e4:f8:5b:cb:bc:8b:8b:
         77:8b:ed:38:c6:a9:6e:5b:9d:b3:cf:eb:f9:66:c1:37:ca:da:
         4c:9b:75:bf:b3:14:3f:86:93:92:ac:49:87:45:57:21:32:78:
         02:69:55:d0:16:60:4d:f1:1d:8c:56:0b:fd:fa:da:81:18:87:
         16:48:44:09:53:7b:30:c9:2f:84:3e:90:e3:b6:11:a0:d5:be:
         e9:1c:53:cf:12:d6:bc:44:1b:38:73:00:76:96:6c:f2:31:e6:
         7c:06:dc:4a:bb:ae:ab:3b:2f:c7:68:6f:fc:b3:98:6f:9b:b9:
         cc:46:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:49 2025 by rpki-client