Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa
File:                     7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa (raw, json)
Hash identifier:          eJ54tmsVArwoD5d9kCJSvOqJFiYfb3AbUzPpx4gIdMU=
Subject key identifier:   E3:78:AB:B1:4E:70:78:6D:0C:D9:C1:6D:AA:14:8F:21:C3:5E:FF:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068DF3E98FAAC374F12600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.46.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8d:f3:e9:8f:aa:c3:74:f1:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=8b98d93b-9552-4fb1-bfdc-2eca34006a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:b4:89:18:bc:70:ae:67:c7:21:88:18:2f:
                    d4:b2:c2:3d:fd:f0:4f:5e:87:eb:5c:f6:8e:89:e2:
                    db:c1:07:a3:4b:44:f6:54:7a:ab:92:22:ff:ce:31:
                    5b:a9:ba:5c:9e:2c:96:47:e1:0e:a7:24:bd:98:f2:
                    f4:94:f4:09:48:cf:e5:19:64:4f:9e:90:df:1e:b4:
                    0a:42:4b:99:04:9b:9f:eb:68:dc:d9:07:cc:1d:58:
                    23:e9:65:27:1b:e1:e3:85:76:47:be:15:44:c2:55:
                    0f:be:4e:5e:e5:a4:cd:7d:5c:bd:66:01:ac:b4:04:
                    a0:24:59:c1:77:d5:7f:31:fd:a3:22:68:4d:03:85:
                    fc:a1:43:27:ec:87:6d:74:2c:3c:2e:53:f8:8f:40:
                    7e:72:b8:40:f8:d3:56:27:58:5e:42:af:b8:d1:5b:
                    34:b1:81:62:13:a2:cd:bf:01:18:5b:7f:b4:9a:07:
                    df:c6:7b:9e:1a:4c:06:7e:fc:63:32:86:90:9b:d0:
                    af:c1:3d:a8:4d:e9:80:ff:c3:ed:3b:b8:52:9e:be:
                    56:6b:ac:11:9d:a1:ac:4f:cf:33:6d:a7:bf:de:cf:
                    33:49:02:80:64:d9:66:05:99:15:69:f6:fc:17:f3:
                    b4:23:76:77:6c:44:20:d9:ff:f5:20:83:6a:3f:17:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:AB:B1:4E:70:78:6D:0C:D9:C1:6D:AA:14:8F:21:C3:5E:FF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:dd:7a:f0:16:56:63:ec:44:9f:8b:4a:21:61:78:ca:9e:
         73:f4:0f:60:da:32:3f:a0:22:e4:63:f8:47:44:3b:5d:96:c2:
         01:75:39:1e:a6:d4:f1:37:c7:7a:06:8b:21:11:08:7f:08:d3:
         d5:df:70:fa:7d:0e:ac:65:74:2f:94:c0:9c:de:ba:62:e8:69:
         6d:da:2e:1d:3e:e6:a6:6f:f7:a4:ee:b6:3e:d2:51:30:24:b5:
         db:09:14:00:01:c4:74:f9:84:66:ef:1f:33:2a:ac:4b:be:70:
         e2:ba:6f:5d:44:76:b6:68:11:62:b1:7b:aa:f5:70:b8:73:29:
         22:52:20:99:98:3c:ee:ab:14:ba:be:79:1c:5d:65:13:fb:e4:
         ae:82:bd:5c:83:c7:f0:fa:65:a9:62:82:70:3f:d1:d5:79:0b:
         48:14:0b:df:14:38:dd:26:08:83:98:7a:89:46:d9:ae:23:a7:
         59:80:dd:50:02:50:f3:ee:54:db:37:85:b5:94:1a:a5:dc:e7:
         f5:6d:96:14:7b:c1:29:ab:f6:71:7b:b0:ef:9d:fb:66:5b:a3:
         f7:c6:27:c6:2a:53:71:2d:e4:bc:32:6a:cb:a7:93:16:93:0b:
         13:92:44:3c:da:ae:41:80:a0:78:8f:e2:af:db:0e:77:ad:a0:
         b0:f6:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:39 2025 by rpki-client