Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
File:                     b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa (raw, json)
Hash identifier:          yl6G9l8h+xMsY7yDacILztai3UTGfIl6YOqN2StPvRE=
Subject key identifier:   25:CF:B4:06:5F:EB:DE:13:7B:A0:79:B8:AF:F9:90:41:E1:98:3E:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F99B72F7FF00C521A9380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.44.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:99:b7:2f:7f:f0:0c:52:1a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=cae150ed-0e40-4274-9141-8a56478af6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:4b:dc:80:36:0b:82:8d:bb:ed:41:7a:fc:
                    51:b8:f2:4d:8e:ff:1a:29:53:1c:f3:3e:e7:71:fe:
                    f4:6b:ce:61:b8:74:95:e9:f9:4d:d1:19:a3:99:16:
                    64:24:fc:a5:f5:e5:8b:2a:cd:cf:cd:6e:8d:90:78:
                    3b:a3:49:92:fb:e0:82:8c:84:26:fc:6a:ab:7c:c1:
                    ce:63:8b:fc:34:68:8b:5d:9c:7b:6b:f0:e5:a7:0c:
                    7f:ca:26:c1:45:a8:db:86:dd:bc:a0:61:a4:61:db:
                    a0:17:fb:25:44:4d:ee:35:75:f6:8b:3d:9d:67:d9:
                    b4:32:4d:c6:e5:7f:4f:9d:67:30:c7:39:16:8f:ff:
                    b7:bf:ac:a9:b3:51:fc:de:98:28:16:bd:2c:39:d0:
                    08:00:23:30:f7:11:e0:68:a6:d5:3e:d6:a8:4b:7a:
                    41:90:21:d4:84:cd:98:53:12:fa:2f:0c:27:a3:51:
                    37:49:0c:87:56:42:fb:1f:7c:43:5b:90:00:27:e5:
                    9f:25:4a:cc:b5:f0:fa:3d:30:74:d4:21:cd:2a:32:
                    2b:33:4d:bc:35:ef:fa:70:16:8a:1d:e1:40:e8:c9:
                    2f:6c:65:ba:88:ed:32:06:0d:cb:c3:02:ca:23:70:
                    3d:56:f8:ee:3f:d7:27:84:90:b0:7d:b2:a7:fc:b6:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:B4:06:5F:EB:DE:13:7B:A0:79:B8:AF:F9:90:41:E1:98:3E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b9967c32-ab38-3ac0-9e5c-39e7ba77d4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:51:32:46:5c:68:d6:e1:c2:d2:4b:88:79:ab:2d:45:a4:f3:
         3e:ab:54:32:21:31:53:61:32:6d:8b:8a:5e:e3:7a:ca:bf:39:
         2e:68:33:25:89:c7:23:18:07:19:23:a8:2b:49:32:cd:1a:4c:
         30:6b:3a:6e:24:d0:2c:16:da:97:ac:98:57:ef:fd:4f:85:e2:
         77:9e:cf:56:75:18:1f:95:0f:52:03:ac:d4:db:71:6b:9b:8c:
         92:f4:9d:00:a1:9a:fd:b6:07:10:4d:7c:cf:3a:d6:e9:e2:44:
         f7:6d:11:db:d1:8f:17:68:f8:a5:39:ab:74:c2:ff:ea:f7:8a:
         fc:2a:fe:fd:e3:1c:49:80:1d:a5:26:b1:77:b8:cf:14:2f:9e:
         85:6f:4c:98:35:ff:8f:b2:a5:8c:9b:ad:04:e1:65:6a:bb:ad:
         05:0e:cf:e9:48:4c:17:31:37:a9:71:b5:75:c7:d0:43:46:5b:
         aa:1d:42:21:64:a9:8f:4a:6f:de:1a:b2:98:36:f2:f3:88:57:
         cb:5a:c3:01:c9:cd:6e:df:bb:01:fd:a9:c5:f9:cf:ad:79:13:
         79:25:e0:ed:ed:ae:eb:26:fa:5f:83:44:4b:6f:51:b2:67:13:
         74:da:e0:85:3d:6c:53:c8:d0:4d:9a:27:16:68:c4:da:fd:fb:
         ea:91:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:32:17 2025 by rpki-client