Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa
File:                     afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa (raw, json)
Hash identifier:          0nnoUWJ7P+Gk9vreNnKL555uwX8A9UMxOOHV0seo1Lc=
Subject key identifier:   27:DC:3F:06:F6:5D:05:A7:E9:05:20:4F:42:85:F1:14:85:8A:BE:23
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068700BF2F50B1E2376380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     16787
IP address blocks:        71.44.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:87:00:bf:2f:50:b1:e2:37:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=c8a1fcd0-8d33-4435-b11b-194e88e3cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:f3:a0:66:e9:5a:15:aa:54:5e:58:13:ee:
                    0f:0d:f2:5f:12:4a:3a:79:0a:fd:c2:cd:33:4f:d5:
                    ca:d9:90:a3:0b:d9:8e:14:e9:a2:cc:71:a3:b0:81:
                    99:a7:ae:2f:b4:5e:70:7e:7d:d4:ff:ac:51:2c:65:
                    e6:81:26:a1:4d:11:1a:4a:91:13:3f:6c:d3:1d:c6:
                    7b:c6:21:1e:7f:a6:f4:27:e0:5a:fd:07:13:7c:41:
                    17:d9:34:b1:63:da:4b:94:9b:5f:f6:b5:1e:28:17:
                    b2:4d:04:b4:3a:fe:23:40:d4:72:fd:27:11:33:8c:
                    84:af:af:5b:41:95:60:37:80:a2:50:27:4c:7e:de:
                    ae:f5:c9:03:2d:36:de:c4:85:5b:b1:c7:06:b7:f1:
                    af:12:c0:d4:d0:77:69:0b:ad:ad:38:95:42:e1:53:
                    19:5f:31:6e:33:fa:c9:46:90:6d:08:6e:2d:2d:61:
                    0d:8a:c0:a6:53:df:4f:c1:ca:22:02:f2:87:4a:d5:
                    0e:1d:9c:cf:ce:d4:55:c0:63:26:2a:64:0b:fd:7c:
                    3f:88:eb:26:c0:a2:7b:82:44:1d:99:ee:33:06:3e:
                    56:89:60:44:ff:6d:c2:a7:c1:e2:39:3e:68:99:c3:
                    ed:8d:94:68:3f:89:c1:e9:d9:5d:20:12:b6:1a:4d:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DC:3F:06:F6:5D:05:A7:E9:05:20:4F:42:85:F1:14:85:8A:BE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/afd695ce-f4ee-34f0-9565-c98e196d9bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e9:9a:95:29:22:a5:d3:c8:67:f4:aa:13:e1:71:d2:67:3a:
         cf:1d:2e:f4:37:64:b6:33:57:57:cf:a8:30:6e:3d:56:34:7a:
         99:50:f9:da:79:5e:06:e2:48:bd:df:39:7b:95:49:4f:61:99:
         3d:0b:cc:f4:42:54:83:d6:2f:8b:23:b8:19:e6:a9:38:ed:35:
         39:00:56:15:5f:27:87:42:52:fe:fe:c2:20:a0:99:1e:12:8c:
         1d:61:c3:87:c1:71:82:0d:11:69:da:bf:10:cc:eb:ba:c1:d2:
         14:34:b7:75:4c:4e:fa:0f:ec:bc:f3:13:d6:41:ba:95:cc:8f:
         82:0c:c6:bf:02:19:51:c6:20:5f:ab:5c:12:8d:72:54:ab:35:
         99:d7:80:35:82:22:9e:d6:da:ff:73:48:da:c9:e1:a0:89:f0:
         d4:56:ad:70:25:a1:32:9d:e6:95:45:ef:31:a3:2c:fe:c7:d4:
         f8:8b:23:e4:db:25:72:b8:d0:65:47:05:c0:85:af:0b:b9:4b:
         5f:ef:2f:c6:82:b0:f4:02:5f:13:5b:e9:2b:01:92:fd:33:4f:
         fe:dd:ee:a6:b8:5b:00:0e:57:d3:7c:d7:c8:42:f0:38:d0:93:
         e7:11:f9:0a:03:d1:94:2e:d8:26:f2:d0:d1:b3:0e:ea:b3:4f:
         8d:74:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:38 2025 by rpki-client