Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
File:                     495cb66f-12f2-3497-84f1-a6fdf007b729.roa (raw, json)
Hash identifier:          FaQhkVW060O8K4VSTqTei7HD8hqZxXZEON4EiS6DBF0=
Subject key identifier:   DF:42:9A:8E:04:8E:F1:C5:DB:89:C2:E7:9C:61:AD:11:0D:42:C0:A9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F955B8ECB952FF1F9E000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.44.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:95:5b:8e:cb:95:2f:f1:f9:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=4b7f876e-b7c8-42df-a94d-c7463f34070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:c5:d5:9f:e8:1d:cd:78:e2:a9:bf:ec:26:
                    31:e4:48:06:dd:e7:3e:3d:c3:2a:ac:73:e0:c1:f2:
                    80:2d:51:c7:9d:cb:c8:1e:cc:70:77:ab:84:71:4b:
                    73:4e:7f:2b:89:63:65:17:99:c9:40:82:73:d1:b2:
                    5e:28:08:cf:53:6b:55:d1:24:38:e6:bf:c2:4b:80:
                    9e:3d:18:22:cd:6f:39:e7:0f:20:86:04:79:46:6e:
                    76:1a:e4:04:02:06:84:f6:a1:f7:70:a5:a2:b5:55:
                    3c:6d:22:2a:c1:c1:f7:c9:41:7d:17:f3:04:15:20:
                    b5:ec:ba:84:a5:f4:06:2f:55:d3:61:ed:6f:fa:18:
                    d2:a9:09:28:a9:bd:4f:af:46:ac:33:51:0b:b9:1f:
                    aa:49:ce:48:c0:26:01:63:b3:40:c5:92:6a:b7:0e:
                    24:3d:9e:69:af:50:fd:3d:dc:c8:a2:1f:b4:d1:18:
                    7c:6f:c9:b8:6d:94:86:9b:aa:d7:a8:8a:28:23:bc:
                    7f:a7:6a:61:f6:f9:02:33:d6:d5:5c:8d:57:db:60:
                    86:2a:1d:79:7d:99:1f:13:be:b1:9f:0e:b8:b9:7e:
                    49:25:8c:40:ad:0b:8a:a3:4f:97:2c:81:59:f5:2d:
                    94:91:93:01:1f:c3:da:ed:55:39:bf:d3:53:98:c3:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:9A:8E:04:8E:F1:C5:DB:89:C2:E7:9C:61:AD:11:0D:42:C0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/495cb66f-12f2-3497-84f1-a6fdf007b729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:91:fa:26:14:e3:a3:99:1e:56:2d:6e:9b:67:41:3d:b1:
         c8:f7:d0:3c:82:02:7f:66:58:ff:38:5f:ef:36:8e:c3:d8:46:
         45:67:00:98:c6:82:6a:0b:48:77:97:83:63:0c:ea:db:6b:b4:
         26:2f:ee:be:70:e5:20:24:55:66:eb:09:c4:a4:6c:df:50:bf:
         4b:ab:b9:9b:a7:53:b3:fa:b9:b8:82:7c:f5:1f:16:43:88:45:
         fe:79:47:93:81:f3:66:21:fa:3f:04:02:5b:30:eb:21:9b:e2:
         31:44:2d:6f:94:14:43:1f:56:ce:00:82:f4:9d:dd:a0:66:b3:
         3d:4f:26:a2:bd:82:b4:5f:5e:11:d7:59:1c:22:94:c5:85:63:
         d3:f8:75:48:27:2b:73:46:4a:f2:a9:7d:bc:d4:c3:e2:6c:69:
         1b:d4:07:93:ee:8d:ba:e1:e9:e6:cf:50:05:ef:64:7d:77:ae:
         96:1a:e7:ba:d8:ad:40:6c:a6:03:86:9e:c7:25:ae:ca:09:fd:
         01:ab:2b:69:7b:03:a4:48:0f:10:3d:69:d3:ed:66:db:71:e6:
         ba:40:1d:c8:30:e6:c7:2e:c0:47:cd:cd:4f:07:5e:8c:47:14:
         15:21:aa:28:32:03:c9:95:e4:b7:37:44:16:9d:29:84:13:3e:
         74:0c:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:10:59 2025 by rpki-client