Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b07acd40-b3ce-353c-bbf0-ea4a5d3771ec.roa
File:                     b07acd40-b3ce-353c-bbf0-ea4a5d3771ec.roa (raw, json)
Hash identifier:          npN0GFgyK0ivHT5FsNE3QQ05SAmtkC8erM7fDeACacQ=
Subject key identifier:   B4:A4:D5:BB:75:BF:7E:D8:4B:A6:93:19:82:8C:FA:90:B5:9C:DD:10
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584AF7EBE51ACEFC07CEB7CEF900
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b07acd40-b3ce-353c-bbf0-ea4a5d3771ec.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     7862
IP address blocks:        146.23.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e5:1a:ce:fc:07:ce:b7:ce:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=ccfe0f93-85a2-42c1-a0cd-fae0f707b820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:ad:7e:75:16:55:fa:cb:23:1f:f4:c1:df:
                    26:87:ce:ca:2e:84:93:c7:bd:7a:d5:83:e9:ab:b4:
                    5a:c6:8b:79:52:7e:86:e0:0b:bd:77:03:fc:95:0c:
                    00:6e:00:75:b6:5e:59:4f:82:1a:72:c1:48:5a:df:
                    84:7f:47:7b:0b:d6:47:ad:0b:54:2b:e5:81:bc:46:
                    95:77:74:04:cd:05:71:3f:08:fe:7b:a0:c8:ec:23:
                    3b:9d:a7:b3:c6:08:e0:12:9c:55:7e:5d:c8:14:1e:
                    42:01:89:ef:47:f6:0b:de:61:37:ff:ba:2f:52:b1:
                    94:03:fb:6b:13:c0:6c:ae:bf:71:9e:4b:f8:02:81:
                    71:d9:5a:63:c9:22:d8:42:e7:ea:60:d8:0e:8e:f1:
                    db:81:75:65:4f:e7:66:cf:db:d8:f5:69:e8:3b:39:
                    81:90:34:f5:04:83:03:43:34:56:81:51:cb:61:0b:
                    91:02:14:59:21:b4:de:77:f8:d3:ba:da:1a:44:50:
                    2d:80:a4:e1:d7:c7:fc:f5:ee:e6:b5:df:2e:5f:7d:
                    39:51:0d:da:53:e4:96:06:3a:e6:3c:81:b7:36:d0:
                    8a:e0:23:6d:d3:b8:c0:c5:78:cd:65:8e:56:23:4a:
                    e5:96:95:83:1c:b0:2e:34:4e:d0:8e:92:21:57:0a:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A4:D5:BB:75:BF:7E:D8:4B:A6:93:19:82:8C:FA:90:B5:9C:DD:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b07acd40-b3ce-353c-bbf0-ea4a5d3771ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:49:9a:23:40:6c:2b:06:62:af:93:b1:d1:80:7b:c3:26:6d:
         23:15:e0:f2:4f:04:48:cd:a8:16:69:fb:8a:f6:23:c2:73:5a:
         b5:76:30:cc:28:90:bb:01:ff:e3:9e:2a:0e:0d:50:5f:27:5c:
         6b:41:b4:c0:8f:c5:d7:9f:28:98:05:ad:42:dc:de:38:e5:e4:
         70:59:07:37:58:ab:a6:32:3c:4a:9e:1f:9c:5b:4b:74:4b:74:
         bc:a7:4c:ff:a4:1d:33:91:b2:b2:88:63:f1:48:4f:54:98:89:
         df:55:40:7c:6e:95:37:ab:b5:39:16:79:1b:db:b6:70:c6:64:
         8f:a6:83:5e:b5:0b:26:3a:13:25:6d:8e:fb:a4:36:f6:e1:2c:
         19:9b:c3:6e:85:ca:80:3d:36:4c:be:1b:0c:7a:e3:c4:0f:70:
         95:a4:0b:fe:3d:6f:b7:83:cb:bf:22:18:50:17:71:77:0c:79:
         21:18:07:a6:90:ba:7a:9c:c6:5f:11:27:c7:21:64:97:80:b1:
         6a:19:59:30:e9:75:29:78:34:a0:fc:d7:34:84:01:61:86:e6:
         fd:9e:f1:65:a1:7d:c9:46:65:83:a0:37:0f:8b:bd:31:dd:c1:
         6a:7b:3b:fa:aa:7d:ee:da:f1:34:b7:67:be:2c:ef:be:1b:2b:
         04:73:f3:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+UazvwHzrfO+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
Y2NmZTBmOTMtODVhMi00MmMxLWEwY2QtZmFlMGY3MDdiODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHKtfnUWVfrLIx/0wd8mh87KLoSTx7161YPp
q7Raxot5Un6G4Au9dwP8lQwAbgB1tl5ZT4IacsFIWt+Ef0d7C9ZHrQtUK+WBvEaV
d3QEzQVxPwj+e6DI7CM7naezxgjgEpxVfl3IFB5CAYnvR/YL3mE3/7ovUrGUA/tr
E8Bsrr9xnkv4AoFx2VpjySLYQufqYNgOjvHbgXVlT+dmz9vY9WnoOzmBkDT1BIMD
QzRWgVHLYQuRAhRZIbTed/jTutoaRFAtgKTh18f89e7mtd8uX305UQ3aU+SWBjrm
PIG3NtCK4CNt07jAxXjNZY5WI0rllpWDHLAuNE7QjpIhVwpp0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSk1bt1v37YS6aTGYKM+pC1nN0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvYjA3YWNkNDAtYjNjZS0z
NTNjLWJiZjAtZWE0YTVkMzc3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1JmiNAbCsGYq+TsdGAe8MmbSMV4PJPBEjNqBZp+4r2I8JzWrV2MMwo
kLsB/+OeKg4NUF8nXGtBtMCPxdefKJgFrULc3jjl5HBZBzdYq6YyPEqeH5xbS3RL
dLynTP+kHTORsrKIY/FIT1SYid9VQHxulTertTkWeRvbtnDGZI+mg161CyY6EyVt
jvukNvbhLBmbw26FyoA9Nky+Gwx648QPcJWkC/49b7eDy78iGFAXcXcMeSEYB6aQ
unqcxl8RJ8chZJeAsWoZWTDpdSl4NKD81zSEAWGG5v2e8WWhfclGZYOgNw+LvTHd
wWp7O/qqfe7a8TS3Z74s774bKwRz86k=
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:19:15 2025 by rpki-client