Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa
File:                     2baed75c-eb76-3fc6-968a-334867e0a6d0.roa (raw, json)
Hash identifier:          mu07XtInY+1JdhGjUSz8Ky0qfb8/3fSaYcRqK1A8qaU=
Subject key identifier:   E6:F4:55:A1:D4:98:1D:25:BF:AA:7C:72:66:48:3A:25:7A:A9:F5:94
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068EC7DB2FDF99FBBB1F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.44.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8e:c7:db:2f:df:99:fb:bb:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=cb34f671-50d9-4997-9070-1bfa83190212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:8d:ae:a0:86:db:be:bf:44:dc:12:95:5f:
                    8f:48:04:39:38:3d:59:54:fc:d2:de:e9:44:24:e7:
                    66:ae:6e:4a:4e:b2:b1:72:fb:46:75:71:ac:fc:72:
                    04:a5:b3:33:c0:a9:30:8b:26:23:84:a3:da:75:56:
                    89:a8:f3:70:78:2b:6a:0f:bf:3a:d9:e5:73:5d:92:
                    25:bf:33:99:9d:3b:f8:95:2f:08:20:ca:73:55:07:
                    f1:c2:91:e6:ae:95:f3:fb:0a:1c:98:01:58:2d:03:
                    74:2d:02:89:bd:68:5d:f5:9a:72:5e:6c:66:d9:af:
                    35:87:81:ce:af:80:15:ff:10:71:df:74:76:10:68:
                    51:a5:db:14:64:76:95:dd:12:aa:0a:8e:5f:69:d0:
                    c2:1b:ea:91:44:4a:89:75:74:52:30:6c:bd:65:d1:
                    71:6f:e2:49:ae:8c:12:66:ac:1c:da:5b:c9:85:03:
                    f6:a9:14:0f:4e:f6:e4:46:a6:3b:44:69:31:48:20:
                    a4:bc:1a:7c:bd:70:ec:c2:11:04:1a:80:2d:4f:3f:
                    a3:9e:98:75:25:1c:57:3c:60:5f:f2:39:c3:3b:3e:
                    8a:fd:4b:67:ec:dd:f6:ac:5f:a2:fb:c9:38:46:56:
                    8c:95:ea:20:62:59:51:34:02:9c:56:3c:df:04:0d:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F4:55:A1:D4:98:1D:25:BF:AA:7C:72:66:48:3A:25:7A:A9:F5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2baed75c-eb76-3fc6-968a-334867e0a6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:66:d9:33:58:cb:ad:7c:db:cb:43:ef:0f:73:c6:20:8c:3d:
         a7:fc:13:47:54:62:c2:10:34:26:2b:cd:c4:66:0c:4a:d3:d2:
         8b:b3:af:8a:4a:4e:82:e0:b4:96:51:89:d0:39:37:5c:c4:82:
         50:c8:60:25:33:e8:56:a6:08:d2:9f:55:b6:70:0b:d7:4b:61:
         9c:ee:0d:49:4a:76:1b:ef:b9:ce:b0:ca:a1:78:9c:33:68:8a:
         65:6d:c5:e5:35:1c:46:f0:a1:e0:d7:76:6b:19:e5:fd:0d:9f:
         d2:bd:5a:1a:b8:d6:ea:0e:26:6f:e3:cd:bd:64:45:c0:f2:c0:
         8d:ab:b3:0f:c6:fd:f7:78:51:f7:21:96:eb:d0:6d:72:17:37:
         5e:d8:f4:c2:40:46:ba:a4:27:08:21:96:16:e7:dd:9a:ee:fa:
         98:3e:13:4c:b7:f8:a9:53:bb:2f:2a:e8:c8:a5:0e:07:b1:7b:
         52:0c:55:27:3f:71:ac:b6:e4:81:cf:50:7c:12:a4:51:dc:74:
         94:1c:be:52:9f:af:3c:20:92:0e:79:47:5b:62:a7:f3:8b:0b:
         24:49:65:8f:c2:4c:48:cc:09:bf:6a:53:af:46:39:ce:74:d4:
         ae:e4:8c:08:e2:e5:8a:68:57:eb:16:ef:a3:58:27:89:b4:f3:
         d2:77:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:08 2025 by rpki-client