Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa
File:                     1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa (raw, json)
Hash identifier:          FGW8x+bFg+pZQiHkjkFsWikr0jiDVsSToBSEyvzwcHc=
Subject key identifier:   C1:47:34:29:E4:8B:38:61:F5:E8:6D:49:8A:55:D2:54:C4:E9:AC:C4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F957E365E00F925C0BDE6
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.46.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:95:7e:36:5e:00:f9:25:c0:bd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=2b2f673c-2244-4e05-b323-73a94bd53028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:a5:fc:83:5a:3b:5e:97:36:82:42:d4:79:
                    d4:b8:bf:f4:1b:f4:ff:74:86:f9:b2:af:27:04:9e:
                    c1:fe:66:5e:22:62:2d:69:2f:4a:ed:61:63:21:eb:
                    89:47:6b:df:62:c8:4b:a8:be:a5:7a:4b:c9:c7:5f:
                    3b:70:fe:b7:38:0b:16:07:ca:6c:4f:09:6f:70:ac:
                    b7:a1:21:11:2b:0c:b7:7b:7e:94:a6:d9:76:5d:5f:
                    d4:b2:80:cb:c5:cd:a6:73:05:ef:ee:78:f0:5a:4d:
                    b9:48:36:4d:20:5e:e3:89:42:66:ad:65:64:c4:bc:
                    96:ea:fd:32:fb:05:62:eb:25:f4:37:42:90:75:c7:
                    91:9f:2a:2e:17:58:58:b9:eb:27:fa:ce:7d:d5:cb:
                    d9:c8:5d:72:b5:a5:f2:bc:63:dc:39:7a:85:62:53:
                    43:ad:3e:56:34:6d:4e:dd:36:4c:ee:75:0f:a0:3e:
                    7a:e8:75:bd:07:0c:de:85:a2:19:51:e6:6e:fe:fe:
                    8d:b0:5d:25:b9:3c:4f:44:76:0a:95:46:20:03:5d:
                    e9:55:a5:f3:56:dc:27:bb:24:fb:19:f0:e8:ba:b7:
                    f2:ae:5c:64:dc:a0:4c:08:5b:92:cc:d6:0c:bd:33:
                    92:14:9d:56:06:cd:d9:34:29:e5:6e:d8:48:19:4e:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:34:29:E4:8B:38:61:F5:E8:6D:49:8A:55:D2:54:C4:E9:AC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f4f6e37-636b-3e9b-b27c-a7ce8a9f80cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:13:c8:cb:69:94:91:c1:a6:6f:7a:8f:a1:43:2f:d5:06:ce:
         86:50:ad:6b:c8:f4:4f:13:4a:29:79:19:ff:3b:2c:a1:a7:90:
         b5:c2:33:6d:46:06:b7:27:3c:98:ff:b5:ab:70:32:9e:89:71:
         f5:6c:6a:4b:30:92:74:56:f8:84:d3:c2:a6:4b:ad:c7:5f:72:
         a5:8d:0a:6c:4f:18:2d:65:7f:5c:74:8a:b2:ad:a0:67:89:19:
         dc:23:79:08:5b:36:6e:c9:c2:43:1d:5d:b1:f1:40:a5:11:09:
         6d:73:87:04:6b:64:92:5b:12:ba:04:f7:14:6a:30:ba:5b:a6:
         95:47:1a:43:85:78:b2:2c:6d:52:75:87:c1:e2:ae:1d:25:62:
         36:bd:bc:53:e6:3a:e1:f8:8b:81:10:e3:03:94:4f:51:00:bc:
         83:9c:36:e5:87:db:97:70:14:bd:6a:ce:a9:12:40:af:29:fd:
         db:32:88:9a:b1:46:4b:08:a6:ed:cc:cb:cc:a2:b6:d9:62:bf:
         f9:c1:66:a7:69:95:67:e0:6b:5b:65:08:bf:48:60:5a:8f:f5:
         bd:b8:43:45:d8:04:e4:37:7b:e5:cf:35:79:91:ee:c8:c9:3f:
         e1:88:61:3d:0b:80:ba:a2:57:6e:a0:d3:48:9f:7a:4c:99:c7:
         a5:ad:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 02:56:03 2025 by rpki-client