Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa
File:                     71946b01-6052-3777-8280-5d1a5e5f3715.roa (raw, json)
Hash identifier:          TNTCXaJRhNTDK3hSBaQGFQxzhLdBfeMzH61wCs9HR6s=
Subject key identifier:   95:B2:29:59:C5:A0:00:88:31:86:B1:D2:59:9D:E1:92:71:BE:BD:61
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584A629093B2F7B363C38D8CB400
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     399629
IP address blocks:        206.71.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:93:b2:f7:b3:63:c3:8d:8c:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=335487a7-5cb5-4e6d-9863-33c9fd2f7573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:30:4d:a9:b9:a4:e9:54:17:5c:c3:5b:65:
                    29:bc:18:57:a6:9c:bc:f0:13:78:b6:18:e6:38:26:
                    00:69:1d:37:1a:0e:0e:4c:a9:4d:a0:c3:00:13:bb:
                    c0:67:38:8e:47:d3:c8:6b:16:1d:e5:70:a3:d2:3c:
                    cf:77:50:a6:fb:9f:d9:78:ed:46:6f:6a:9a:2d:67:
                    4f:0e:c4:78:1e:02:5d:41:3f:3d:75:26:df:1a:e5:
                    d2:a7:80:05:31:4a:fb:0d:bb:b1:07:cc:9f:1b:55:
                    73:55:8d:0d:be:fb:aa:4d:aa:8d:99:a1:15:d4:48:
                    20:4d:25:51:53:69:d5:0e:3c:90:87:67:19:6d:48:
                    fe:16:6c:7b:f2:e7:37:35:8d:d2:b4:82:3e:78:39:
                    b0:bf:98:5d:57:d1:de:b3:ec:ce:90:e3:eb:48:76:
                    6b:56:c4:7d:2e:cc:ee:6c:54:9a:d0:82:45:c9:8d:
                    98:bf:eb:70:83:49:6c:89:35:2a:6d:57:a9:03:d5:
                    09:7c:5b:0e:90:ae:13:17:eb:9e:8a:52:9d:78:1a:
                    35:a1:bb:64:3a:06:62:8c:6b:88:c8:d3:f8:9e:bc:
                    e4:31:63:37:ea:81:60:64:cc:6a:ab:27:ba:26:e1:
                    4f:3f:2d:92:92:1d:89:77:9a:5c:e7:8b:a5:eb:8b:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:29:59:C5:A0:00:88:31:86:B1:D2:59:9D:E1:92:71:BE:BD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/71946b01-6052-3777-8280-5d1a5e5f3715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:a2:28:4c:9a:da:06:f5:9c:0a:dd:11:ae:c5:33:6e:a6:
         60:f8:1d:3d:f6:6c:7e:02:d1:7d:bb:8c:b8:53:52:c6:46:a0:
         a1:24:09:03:61:68:4f:d9:33:50:38:d6:9d:7a:41:49:f9:62:
         f0:bc:11:d6:0c:09:eb:1e:c6:73:99:b0:dc:19:02:63:fa:89:
         8b:09:c5:cd:43:56:77:37:6c:78:3f:98:be:b2:4c:a4:eb:c6:
         27:df:7c:cd:c4:62:26:0c:f3:07:7e:5b:a4:04:2b:9c:6d:af:
         eb:1c:8b:24:38:9a:b6:dc:dc:e5:a1:23:63:1e:a9:f6:c5:16:
         32:18:d9:be:03:03:49:f2:ef:74:6e:d6:9f:5b:0c:a2:85:c6:
         54:4e:44:54:37:fe:c1:7f:98:5d:d1:a7:1b:69:0e:c5:a6:57:
         b6:19:26:70:fb:15:c8:ad:49:1c:5f:f1:19:f6:b3:08:32:c0:
         82:c3:38:de:53:28:88:78:8b:68:64:2f:a4:55:26:1f:6f:9c:
         8c:66:94:4d:44:00:3a:32:20:64:35:cb:17:0b:90:69:77:5e:
         68:0c:a5:df:66:0f:c3:01:5d:71:4d:ea:e3:2e:a8:90:80:ad:
         e4:f9:a9:9f:94:ce:b9:f8:41:23:a0:13:c4:df:14:d6:25:50:
         d6:5a:1d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:09:02 2025 by rpki-client