Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/71f7185d-448b-34c6-af28-a30fd58ee445.roa
File:                     71f7185d-448b-34c6-af28-a30fd58ee445.roa (raw, json)
Hash identifier:          rKFG2H3CYq2zRinr7kl83ACIJCSoMW1gq0CbYdBiW/A=
Subject key identifier:   A1:CA:57:7C:4F:07:E6:EB:D7:CC:02:30:DD:79:70:BA:C0:F6:21:E7
Certificate issuer:       /CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Certificate serial:       010D0C9F43285848A830B47540C273FF88724E80
Authority key identifier: 83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/71f7185d-448b-34c6-af28-a30fd58ee445.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        147.140.72.0/24 maxlen: 24
                          147.140.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:b4:75:40:c2:73:ff:88:72:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=35c48d99-cece-4e08-b0c9-f2c03e88497b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:95:0d:9a:a1:2e:1a:16:f7:ec:5a:4a:ae:
                    18:17:37:7c:d0:9a:b2:87:81:be:8f:a7:98:f3:1c:
                    a9:48:f0:95:62:af:97:51:3a:fc:07:bd:8a:7f:bb:
                    6f:01:03:4e:91:de:6e:0c:ca:7d:3c:48:62:51:e2:
                    ef:4b:96:52:00:8e:99:88:61:85:a9:0f:48:5b:1d:
                    0a:5a:2e:18:30:3f:2d:f1:39:7b:12:f8:d7:1e:50:
                    7f:3c:dc:14:72:9f:0f:2e:47:c6:c4:df:a4:69:e8:
                    b3:b1:7a:95:1f:5e:ac:fd:f8:29:2c:ca:76:6d:ce:
                    fa:9e:9d:82:22:95:dd:59:35:26:89:69:84:91:ef:
                    a1:8e:8b:53:6e:55:ca:42:2e:29:6e:73:32:05:08:
                    41:6b:9f:fd:7c:ca:91:20:6d:2b:86:70:6f:00:ac:
                    ab:5d:17:c5:35:43:15:eb:cd:d4:97:d7:c0:dd:9d:
                    35:3d:ff:af:24:e0:5f:f2:d1:4e:c0:7d:0a:d6:90:
                    18:8a:24:06:88:65:a2:14:8f:10:65:65:c3:74:85:
                    6d:4e:0a:27:7a:40:ec:ac:69:22:e2:f2:99:a2:36:
                    6f:09:a9:70:bd:21:32:1e:fd:f7:d5:a5:46:ee:ac:
                    97:69:1f:3a:73:1d:20:36:d0:e8:8c:20:9f:d1:b3:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:57:7C:4F:07:E6:EB:D7:CC:02:30:DD:79:70:BA:C0:F6:21:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/71f7185d-448b-34c6-af28-a30fd58ee445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl

            X509v3 Authority Key Identifier:
                keyid:83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.140.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:5c:95:12:bd:96:9b:30:57:1b:0e:b8:bd:44:7c:56:31:
         a0:82:90:98:de:48:2a:eb:31:a5:5b:d0:db:85:b6:8b:1b:f1:
         93:4d:8d:78:b9:35:74:1c:33:1a:73:87:07:f5:2d:78:ce:66:
         f7:ed:0b:3b:2a:83:5d:91:e9:48:b8:99:db:d1:9c:f9:74:0f:
         e1:01:9d:9a:c3:4d:5d:16:a4:0a:c5:4e:3c:94:8b:fd:99:25:
         97:1e:58:69:00:c4:0f:0f:31:6f:61:d8:b8:20:d7:49:a8:be:
         b1:46:51:37:be:86:d2:8f:75:31:2f:89:5e:32:90:d0:12:fa:
         d3:eb:03:f0:b3:b6:d6:7a:83:c3:75:14:20:d1:44:1f:da:8a:
         fa:a6:9a:83:37:25:d5:7e:89:f3:d5:87:d4:e8:81:f3:1e:a0:
         64:bd:aa:19:f1:74:c1:e2:a4:fe:1f:2d:9d:88:5a:08:c9:d2:
         02:4b:3b:72:18:83:cf:60:29:cb:ae:78:2e:2e:6f:52:65:39:
         33:80:f5:c7:a7:d2:3a:83:1b:78:c3:4d:68:28:15:03:36:d3:
         49:27:14:cb:08:aa:e0:f1:f1:f9:04:70:13:f7:c4:ee:7a:40:
         9e:7a:9a:5e:58:c5:4f:0c:18:83:b4:28:8a:c5:11:c5:fd:fc:
         8a:d5:2f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:11 2025 by rpki-client