Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
File:                     0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa (raw, json)
Hash identifier:          BHlpUzAmPD/UkRO7MI391al7H+ejhECtV6hqNQnGRCU=
Subject key identifier:   1B:4E:38:7C:E8:03:1D:F2:43:0C:1D:21:49:4B:E3:D7:E7:64:44:68
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068E16109D90407099E6C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.46.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8e:16:10:9d:90:40:70:99:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=ed48bf52-c825-4065-88ea-21b531a75eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:92:e1:ea:29:ef:d0:51:ec:f7:fc:36:44:3a:
                    78:87:9b:aa:00:72:20:e9:1b:22:d9:3a:2a:ac:b5:
                    3c:0c:ba:40:3c:b7:74:04:5e:4b:24:5f:e0:66:70:
                    f3:25:64:cf:f7:ff:b2:25:dd:d5:ee:92:70:93:8b:
                    f2:9c:29:70:58:ad:4e:b3:40:fc:9e:7e:30:b0:b6:
                    e0:f1:cd:c9:42:6e:40:b4:d0:fa:1a:55:22:b0:d1:
                    72:fb:84:ca:0f:1e:6d:31:05:a3:45:e5:15:b5:96:
                    1a:6e:19:f7:8b:65:82:fd:75:c9:ff:92:c8:7a:72:
                    b9:3f:b0:26:30:e2:82:b2:3c:03:74:2e:6e:fe:f5:
                    97:23:43:1f:78:44:dd:44:9c:8c:9d:14:47:82:38:
                    3c:62:a1:57:b3:55:b9:02:ff:ec:6e:17:91:70:13:
                    d2:97:d2:de:9a:04:c3:3f:84:ab:41:d0:ac:f3:bb:
                    dd:10:07:ed:f4:e4:fb:37:6c:d1:b4:3d:f1:6f:18:
                    52:48:36:cd:e4:66:30:0e:a0:1d:2f:26:1c:11:3e:
                    eb:aa:5f:f7:c4:9a:aa:c6:35:d3:d4:0f:6b:99:25:
                    bc:46:f5:80:20:e8:3a:13:82:6d:9d:41:a4:65:f0:
                    bc:fc:21:27:83:71:72:2b:3f:93:ee:ed:8f:d2:07:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:38:7C:E8:03:1D:F2:43:0C:1D:21:49:4B:E3:D7:E7:64:44:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:12:a9:03:a5:a9:60:96:25:92:95:d7:73:80:cf:05:5d:52:
         fa:44:57:5e:65:b3:41:ab:92:d7:bf:25:33:f8:1d:cb:40:5c:
         68:ba:77:8b:f9:89:10:4e:a8:52:c1:0f:25:2a:71:70:db:2c:
         32:1e:bf:de:de:1b:2a:6c:58:c8:53:f8:57:4f:8d:c5:b8:17:
         0d:56:f2:46:9f:11:6d:ab:80:75:a1:73:43:0b:dc:b8:98:28:
         f8:a1:10:4f:a3:a0:34:e3:53:a2:09:bd:be:40:e9:87:e8:39:
         d1:4c:e4:58:86:51:29:19:31:02:c6:60:b8:3a:8b:6d:5a:a8:
         a7:f0:50:bd:b9:cd:7c:f4:94:11:c4:8a:d6:79:11:aa:93:37:
         5f:b6:f9:55:85:3d:cd:12:a1:a4:b8:89:0f:7d:86:ef:d4:c0:
         b3:c9:c6:fa:f0:6c:1a:74:6b:15:dd:aa:e7:52:97:04:34:ab:
         3a:8d:79:32:be:81:b4:21:bb:49:e6:57:43:08:7e:90:50:90:
         51:4a:90:1b:30:b8:21:aa:9f:f3:ee:2e:00:0d:63:e4:fe:37:
         f6:6d:dc:59:2e:6c:3c:23:bc:11:61:50:78:34:b2:74:6a:13:
         aa:74:9c:fe:3a:40:bc:b3:d5:41:2b:0f:4e:a2:01:31:fc:ba:
         fd:44:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:52 2025 by rpki-client