Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          YqfuUXQkYVn4sV1DGVm7ZaoURE096xQnrJk2cRa2ZEI=
Subject key identifier:   CB:91:EC:A0:6A:80:35:38:49:89:83:D0:50:51:BA:AC:22:BF:86:49
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584AC01642A91BB5B551748BB180
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:42:a9:1b:b5:b5:51:74:8b:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=d8544c9c-9668-412d-8813-024d63c28fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:c0:1a:17:74:7b:af:76:7d:0f:4a:5c:ee:
                    13:5a:7c:78:b9:00:68:be:1b:d8:de:03:73:24:49:
                    a1:d3:7d:ca:b6:29:b7:c3:63:ec:22:a0:26:e5:f2:
                    72:f5:97:7f:3c:be:41:cd:ce:5a:f8:4b:81:8f:1a:
                    96:d3:04:b3:19:86:40:22:1e:de:31:57:ca:6d:45:
                    a6:d5:11:a4:04:65:2a:83:d4:c1:48:41:de:fb:30:
                    d0:ae:f8:98:d2:d8:a3:eb:91:e7:18:39:64:8f:5f:
                    51:4c:f9:23:90:e5:f2:95:d5:d0:ef:b6:80:c3:f0:
                    5e:78:8b:3d:6f:29:ad:c6:6f:a7:ab:3d:e5:d7:a4:
                    30:37:d8:0a:91:dc:6e:35:50:a9:ea:a2:0a:03:c8:
                    e7:5e:1e:94:b4:75:e7:18:48:aa:de:9c:0b:76:26:
                    94:85:0f:05:45:3b:08:ff:f0:b2:26:38:2d:3a:13:
                    6b:1d:65:95:c5:87:00:57:5b:70:95:61:23:65:67:
                    b2:6e:4c:d2:cf:69:7f:34:57:73:a4:26:ad:3e:30:
                    87:18:c3:cc:da:53:1f:2c:84:ef:3b:f2:9b:db:75:
                    63:0c:a1:89:04:92:a4:11:52:6f:11:9f:42:fa:1f:
                    bc:6d:27:cd:9a:d8:9e:6e:db:6c:69:06:0a:91:64:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:EC:A0:6A:80:35:38:49:89:83:D0:50:51:BA:AC:22:BF:86:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:33:6d:85:aa:4e:ac:4d:90:2b:60:7d:9f:8c:ed:79:02:eb:
         b8:cd:f9:b7:7f:8f:a6:b4:57:03:0e:40:56:10:32:f4:37:82:
         f1:24:4b:e0:1d:29:60:6c:ae:97:3c:57:ea:6c:30:64:95:a5:
         0e:7f:29:34:eb:75:15:c5:2a:2f:1e:11:bb:88:01:cf:27:47:
         28:5e:48:6f:d1:1b:53:44:7e:34:d4:30:d1:a6:78:7a:71:70:
         db:4b:bd:78:20:f6:3a:cd:ec:2b:99:c6:2a:78:ec:3b:37:09:
         44:96:78:bb:37:26:1b:48:b2:f3:d6:62:9f:dd:f7:12:3b:1b:
         52:d1:34:de:ee:2a:8b:e7:9a:cd:18:55:7e:65:fa:70:f4:11:
         72:45:d7:e7:5f:23:77:8a:08:6a:9a:90:b4:86:24:33:0a:6a:
         f1:48:4e:3d:de:18:4b:48:e8:8c:71:24:51:32:fd:d5:26:87:
         8d:8f:dd:08:8c:6d:be:29:a5:72:39:ec:3f:cc:c2:59:00:a6:
         61:7a:01:75:9b:1b:c9:b9:f0:d4:60:6a:d9:ca:95:5b:11:d0:
         29:15:38:00:e4:9c:9f:76:95:ec:33:cd:b3:be:ae:52:b1:56:
         79:28:08:87:4d:fc:28:89:df:3b:21:be:d1:59:b5:a8:f8:a6:
         ee:b1:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:42 2025 by rpki-client