Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          9/VSiqKfgyEvXSleFz/mgwTSHE7RqVqoDsCRZ4Dbtv4=
Subject key identifier:   C0:8F:15:1D:24:A3:1F:56:94:9B:35:77:E0:D9:94:92:D9:56:C3:AD
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849DF5A71BEF5E5D086CDEDFB00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:71:be:f5:e5:d0:86:cd:ed:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=9bc1818f-8214-415d-b9e7-70c130038108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:fa:df:a2:b7:57:89:72:0d:7c:bc:44:0e:
                    18:be:29:63:e2:ed:ae:6a:9f:d2:15:3c:d4:5c:0c:
                    ef:c0:db:f3:29:e3:ab:ea:1d:62:a2:08:0b:d2:5e:
                    73:90:0d:ea:cd:c2:b7:fc:69:61:4d:03:ec:8f:90:
                    f8:06:e9:df:52:a4:c5:33:75:d2:07:e1:3f:4f:fa:
                    ba:55:93:99:b3:bd:18:2c:cd:74:c9:8a:7c:1c:2d:
                    88:8c:33:c7:79:18:b1:2d:c3:86:5e:f9:cb:bf:0f:
                    fc:74:48:b3:5f:3b:81:cf:fa:36:46:ba:ae:6b:fe:
                    20:30:35:e5:82:a6:f6:1a:27:5e:c2:f3:b2:4d:a6:
                    36:7a:2c:cd:2c:6e:fe:73:f1:a3:58:a7:0e:74:1d:
                    b5:ed:c9:6f:07:c8:2a:ea:d0:66:20:54:1e:81:e9:
                    b9:67:8c:38:5a:b5:ee:44:d3:e0:10:9d:94:13:bd:
                    f5:5e:21:2b:1e:dc:15:a5:00:17:6a:38:a6:30:af:
                    56:16:9b:2b:77:e4:b3:80:00:92:88:8b:b8:1b:58:
                    a2:b3:05:dd:08:62:d8:97:bf:c5:28:1d:7d:6e:68:
                    68:dd:d2:75:2e:8f:24:24:5a:3d:2c:99:a6:e0:1d:
                    3b:d6:76:54:d6:3c:93:c5:18:d3:33:84:96:e3:70:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:15:1D:24:A3:1F:56:94:9B:35:77:E0:D9:94:92:D9:56:C3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:98:15:29:51:24:33:b7:d0:e8:cf:89:dd:14:9b:9f:f2:7f:
         e2:c8:3d:1d:fd:c2:19:3b:80:dc:67:3b:aa:ea:3b:83:49:af:
         43:6d:b9:31:cf:a5:aa:ed:6f:c4:46:6e:7e:fa:7c:ee:3f:5a:
         a8:d4:c0:8d:7c:d8:41:04:74:70:17:fc:1c:eb:05:bc:7f:45:
         59:c2:6d:8f:00:98:23:a3:6a:62:6d:fe:ab:64:9c:40:99:31:
         c9:1c:0d:70:b7:3f:68:67:9e:ee:3b:31:57:18:81:a0:48:11:
         52:e3:23:da:ba:c0:76:d8:4f:f2:e7:fa:92:92:7a:27:62:ec:
         8e:b8:84:9f:d3:be:a5:e1:6b:3a:95:e8:8a:9b:2c:ed:40:16:
         ee:51:61:4d:0c:76:10:47:22:ac:ec:42:26:0c:c5:06:66:e7:
         31:04:22:bd:39:9d:fa:f6:58:e7:3d:67:3c:d9:ff:ce:16:8b:
         8b:e9:3a:9a:7f:fa:ad:73:06:b8:51:55:90:f9:1b:b3:37:7b:
         d0:ab:bc:41:81:68:a8:f5:d8:4a:21:47:b4:7d:03:b7:00:0c:
         a3:38:30:26:4c:ca:61:89:cc:dc:be:6d:47:6e:a8:c6:2d:a5:
         e1:89:71:34:fc:43:23:b2:d8:d0:4d:ae:35:64:d0:dc:3e:09:
         0e:0e:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:54:15 2025 by rpki-client