Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa
File:                     8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa (raw, json)
Hash identifier:          qEh43zMCLTxIF29j7kDA51HrSqUnfek8w+sKcfVzgyw=
Subject key identifier:   2A:0A:26:30:73:1A:DD:79:E6:92:12:57:A9:4B:94:1C:4E:44:3C:3F
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285848CDE10D5109665AB91437B900
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7862
IP address blocks:        146.23.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0d:51:09:66:5a:b9:14:37:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=c6357bde-5a4e-4bc5-badc-52a60510d05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d9:0c:cc:77:d3:9e:86:93:b3:7a:8f:7f:e1:
                    f1:85:cb:cf:3e:a0:6e:ed:94:bb:60:69:ab:6e:2f:
                    d0:96:38:3b:f9:bf:b6:28:9c:e2:6a:6d:43:71:40:
                    b0:08:25:a1:a4:c5:16:fe:5f:7b:fe:07:65:1e:17:
                    de:44:fc:e6:28:4d:9c:0a:8a:7e:ec:bc:20:07:51:
                    a8:7f:ed:72:00:ac:d5:a6:f4:b8:dc:a6:de:1f:b8:
                    b9:91:e6:7c:17:f6:fa:9b:32:9a:51:7a:50:51:49:
                    01:ff:33:c6:39:09:94:82:ba:20:61:b4:23:2a:04:
                    c0:75:32:96:86:52:af:30:a5:29:38:8c:22:f4:4f:
                    8a:fd:72:f4:af:9b:31:59:74:28:90:42:21:50:cc:
                    7c:8f:e9:90:dc:77:57:14:c1:dc:1a:57:1f:98:d0:
                    18:a8:fb:46:ab:80:7e:fc:2e:c9:85:90:c7:8a:e9:
                    69:e6:c5:c3:78:df:db:20:5b:9a:84:b9:c4:12:0d:
                    6a:f5:f5:d9:fe:e8:4c:10:7c:f0:ab:fc:cc:d4:13:
                    98:ad:d4:d6:d0:37:01:6b:b0:5f:15:bc:82:b2:b1:
                    13:da:98:bb:46:5b:b2:92:4f:49:d7:9f:0e:fa:a5:
                    e3:a7:67:ba:b9:c6:16:a9:f5:9e:c2:99:8c:1f:f0:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:26:30:73:1A:DD:79:E6:92:12:57:A9:4B:94:1C:4E:44:3C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8f51ab72-0bb0-3de8-8b4f-ca8ab8bccfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2a:20:bf:7f:b2:3f:f6:34:ba:4b:35:55:00:82:68:51:7b:
         d3:c4:37:29:ae:2b:eb:ab:b5:88:69:48:07:42:cb:23:88:8f:
         0a:a8:19:3b:9a:d2:ed:57:d7:6e:2b:b1:e9:56:39:4f:2d:0a:
         4e:ac:57:16:d0:c1:5c:f5:8e:80:2d:79:98:d6:07:6c:6a:e5:
         1b:ff:51:8f:2d:0f:f1:79:24:8d:1f:e1:a2:7f:3a:ea:43:48:
         d3:ec:47:95:0a:63:93:cf:1f:a6:e4:c1:0c:b0:a3:7a:d5:9e:
         fb:b2:8e:f4:1a:0d:31:90:57:72:d3:22:4b:3f:77:05:bd:32:
         01:2d:0c:20:7c:48:65:bf:80:df:80:cd:e7:07:54:e0:64:e5:
         ba:cc:f5:f3:6b:50:a5:47:d0:08:92:36:f4:ba:5e:ab:15:2c:
         5b:0b:e8:7e:4c:1e:23:d2:93:e7:cb:19:02:e1:bf:38:2c:e7:
         ee:95:8b:02:3c:22:b3:56:e7:3d:4c:42:16:85:6c:14:4e:a7:
         73:ee:c8:0d:f0:9e:ad:86:80:83:8c:c8:74:c5:06:11:6e:4a:
         ba:1a:bb:04:fd:fb:04:98:fc:72:9b:85:44:65:35:fa:ea:e7:
         40:53:08:57:0e:11:fa:49:51:57:5f:76:13:78:10:14:fe:1d:
         8e:f4:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:04 2025 by rpki-client