Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2846889c-6d01-32ca-8cc1-07ca8172322d.roa
File:                     2846889c-6d01-32ca-8cc1-07ca8172322d.roa (raw, json)
Hash identifier:          nfIwZrznaUknIV0zDh8FkbsVPdbpX0LUDm2ETeikySM=
Subject key identifier:   ED:CB:74:A9:2F:88:B5:43:96:75:12:5D:92:E6:92:4E:8D:97:2B:AD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00692431E06215D85FC8B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2846889c-6d01-32ca-8cc1-07ca8172322d.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.44.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:92:43:1e:06:21:5d:85:fc:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=17b692c6-53b1-40be-812c-6829ac7b6443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:44:1d:7e:15:b8:21:49:48:18:19:6f:78:
                    a9:d3:fa:6b:4a:82:ca:52:34:6f:c1:78:73:2e:7b:
                    63:30:9f:bb:88:3f:56:89:2b:62:b1:e1:78:56:e9:
                    69:e8:e3:08:19:e2:18:55:98:2a:17:fa:35:a8:13:
                    43:29:4c:5d:d7:fe:20:ad:3e:98:2d:ee:4a:c0:93:
                    fd:bf:56:eb:1b:24:60:a6:c8:b9:e2:84:a3:25:71:
                    0d:9c:9f:be:70:54:bb:52:12:e2:5a:a4:b3:19:5f:
                    8a:43:f4:46:4e:20:57:fd:1b:a2:0e:38:57:59:01:
                    7e:0c:51:5c:69:9c:5a:7c:c0:65:9d:c2:d8:60:6d:
                    14:dd:95:7a:42:83:87:fa:62:92:ac:71:10:35:ab:
                    12:6d:21:3e:58:db:58:ed:36:9e:a9:05:37:c0:a6:
                    1f:0c:ef:82:1b:94:af:08:61:18:b4:a6:fc:e8:52:
                    f6:e1:21:53:50:c1:d7:ff:38:fc:24:24:f2:14:3b:
                    03:5c:42:50:89:c6:fd:0c:0c:ec:19:95:04:72:62:
                    1d:d6:9c:70:28:1b:0a:86:66:29:a3:93:d5:d5:6d:
                    ae:74:6f:ff:83:27:a6:e5:6f:a1:c0:c4:9d:44:6e:
                    e1:39:f5:60:69:b7:6a:94:67:55:85:bb:cb:35:ce:
                    84:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:74:A9:2F:88:B5:43:96:75:12:5D:92:E6:92:4E:8D:97:2B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2846889c-6d01-32ca-8cc1-07ca8172322d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:39:b6:d0:a1:06:e2:40:71:00:d1:90:ac:5f:57:22:d3:
         e1:33:28:62:cd:93:29:00:d7:32:4f:36:bb:63:14:2c:6c:fc:
         7b:a0:cd:39:50:58:a9:e7:e4:9d:79:6d:5f:fd:32:18:90:9c:
         c5:a9:cf:77:25:e1:52:59:58:6f:03:c3:31:73:ef:bb:f2:b9:
         49:38:f3:6c:2e:e3:96:b3:51:cc:19:10:1a:19:a2:25:43:48:
         19:84:61:95:ac:c5:6e:2d:e1:0f:2c:81:cc:b3:91:60:a1:90:
         2b:b1:fb:6a:46:b7:c4:e1:9a:59:e5:51:26:bc:1b:aa:e0:c9:
         7a:b7:a9:d1:d9:e1:9c:75:9f:8c:01:1d:8d:3a:d3:8b:92:85:
         3c:ee:6e:ef:c0:59:30:14:a8:21:ce:51:8e:31:62:9e:07:2c:
         c6:a2:7a:08:23:c2:3b:59:cc:b2:f4:6e:4c:d4:db:35:d6:dd:
         3c:6a:b9:b2:f2:99:aa:c7:a0:9d:65:12:cf:d9:20:d2:b4:f5:
         c7:47:9d:fb:3f:44:cd:3b:ed:d1:88:21:09:33:da:55:53:28:
         8a:81:e4:90:ed:40:4b:cf:3f:30:35:9e:f9:e7:2c:4d:0e:6e:
         99:28:99:1a:e4:2a:b3:d8:98:68:a9:97:eb:1b:97:00:1e:bc:
         26:f0:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:39 2025 by rpki-client