Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b095b7ae-6e51-3717-9f4c-12d70c2e60b1.roa
File:                     b095b7ae-6e51-3717-9f4c-12d70c2e60b1.roa (raw, json)
Hash identifier:          eZgnJAtkg2yzLq3zDB7URYI61BPnteW+nj9mgR0QDKE=
Subject key identifier:   D6:6F:8F:43:9A:8D:9C:22:7D:19:6A:10:E0:9C:4B:2F:05:11:FC:F4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9A26553F76C12625D300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b095b7ae-6e51-3717-9f4c-12d70c2e60b1.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.46.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9a:26:55:3f:76:c1:26:25:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=80a099f3-1896-44ea-9b24-92a07345cae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:c8:be:e1:b7:1f:e9:4a:28:dd:52:d5:9a:
                    f5:51:67:5e:72:09:cb:65:67:2b:4b:bc:14:33:91:
                    2c:29:bc:86:c5:e3:23:8d:e9:83:f0:ee:0c:8c:56:
                    0f:1c:e2:30:ba:e5:73:2b:a6:89:f6:d8:5a:12:f9:
                    0b:1b:66:cb:89:23:12:9c:c4:c9:9a:e0:1d:e6:f3:
                    69:cf:7c:d8:1b:0d:3a:ae:94:d3:c3:3b:80:01:ca:
                    fc:89:c1:5a:28:15:b3:3c:21:3c:7a:29:f1:67:c9:
                    13:6e:da:d3:90:d3:a1:e2:ec:01:2d:8f:6c:01:6c:
                    56:9f:64:2f:f9:53:cb:0e:3e:2e:d3:b9:ef:97:0d:
                    2d:4a:71:08:00:4c:0c:b8:33:a2:3f:31:17:2d:b1:
                    52:0b:89:83:75:fc:b2:d7:e2:5a:d2:2a:4f:0c:8f:
                    af:c4:dc:c2:50:6e:98:a3:58:15:8c:84:7d:f7:7a:
                    dc:aa:9f:5d:b4:a4:8b:82:d4:d2:16:64:88:54:4f:
                    4b:c5:bf:09:11:16:65:bd:3b:8c:1a:c0:2b:28:d8:
                    c1:fb:cd:c9:ed:23:e5:39:50:e3:da:56:7a:7c:c8:
                    0c:bb:be:e4:57:3a:d6:6d:9f:9a:6e:d0:20:e3:12:
                    73:95:ff:53:b4:05:2d:51:63:21:4e:f4:33:22:a4:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:8F:43:9A:8D:9C:22:7D:19:6A:10:E0:9C:4B:2F:05:11:FC:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b095b7ae-6e51-3717-9f4c-12d70c2e60b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:62:9e:b1:23:69:39:7a:5b:00:40:62:2e:f4:0e:54:45:cf:
         a6:df:4d:2a:9c:7f:1d:c5:77:38:16:64:f7:ee:f4:0b:ad:fb:
         24:f7:bd:00:4c:79:d2:09:6a:f4:ea:5d:21:1b:81:21:c7:88:
         66:6f:d2:b5:3d:24:2f:97:de:1d:de:5f:82:87:1b:c4:1e:d3:
         d5:bc:a6:b8:f6:74:cd:c0:36:94:f5:e7:35:4e:7c:f5:d7:da:
         10:3f:36:90:45:12:42:27:91:e7:30:64:29:27:b9:8e:75:e3:
         d2:6d:74:f7:6d:58:1d:9e:c8:8f:7f:fc:7b:01:72:c5:96:55:
         d7:7f:a8:c4:8c:d6:cb:86:cc:82:58:c2:08:7b:9b:7c:08:6f:
         08:61:e9:47:e9:29:81:a4:7a:b6:63:4a:87:35:52:f4:a5:da:
         15:1c:be:d4:ff:86:47:e4:55:58:dc:a7:75:61:1e:34:c3:32:
         1f:49:f3:9f:dc:6f:31:33:ba:bd:26:4a:9e:eb:17:9f:3f:87:
         38:78:cc:e8:46:28:13:75:22:77:96:0a:c9:91:b7:f5:28:d1:
         26:eb:29:b2:88:50:b5:ee:0e:b5:08:6c:42:ef:25:8f:b9:5e:
         72:65:23:76:63:4d:92:21:29:b6:ac:3c:00:79:26:e0:3b:01:
         88:34:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:18:14 2025 by rpki-client