Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa
File:                     4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa (raw, json)
Hash identifier:          l1W4N0d4likaFWlq8uk0f5ubctu1Yyb7sV/LnWiC7BI=
Subject key identifier:   4E:EA:FF:32:44:D7:ED:E8:AF:42:FF:4C:32:1E:61:AF:A2:CA:76:81
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849DF5A7582CD42023176CF1000
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     7862
IP address blocks:        146.23.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:75:82:cd:42:02:31:76:cf:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=6b3db2e6-2945-40e0-9892-f3f6e15c217f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:85:aa:be:03:5a:d5:7a:ef:61:dc:f8:0a:
                    94:e6:c5:a7:71:fb:b5:30:cd:7d:98:f1:e8:16:73:
                    f3:0a:61:82:93:ea:e0:71:bd:ae:e2:66:8e:c2:ae:
                    be:e1:f2:cb:b6:15:d8:3d:06:f6:d8:c2:58:75:7f:
                    39:ef:18:1f:c2:68:36:d3:7a:c1:2c:4f:52:1c:17:
                    d2:28:6b:14:e6:04:62:6a:18:b9:42:ed:69:22:7d:
                    51:84:05:4d:ca:f7:06:65:5f:fa:a7:66:12:dc:50:
                    e6:36:f5:4e:cc:bf:25:b2:e9:6b:c8:85:d2:64:de:
                    f1:63:6a:07:57:d5:e8:0f:33:b0:b3:59:c4:59:5a:
                    31:07:4d:00:77:48:aa:a4:36:38:a9:98:0e:bf:2b:
                    0d:da:ff:28:93:25:a9:22:ed:58:f2:69:ae:e7:62:
                    db:19:d7:1a:e2:b7:4d:cf:81:4a:78:b7:1e:0c:45:
                    e3:b3:b4:a8:ba:54:c7:a4:db:1c:d2:25:1e:7a:0f:
                    fc:ad:0a:18:2d:19:51:ae:00:24:dc:1c:1a:fb:b8:
                    90:30:01:9d:5a:19:ef:94:54:54:c9:02:c1:28:68:
                    25:fd:e8:36:ee:0d:a7:90:b9:7a:0c:6a:e6:69:a8:
                    f8:bb:88:a5:c0:e3:b9:a2:3a:57:a6:65:cf:f3:34:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EA:FF:32:44:D7:ED:E8:AF:42:FF:4C:32:1E:61:AF:A2:CA:76:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/4c763104-f0ae-3db7-8d2b-6c84c432cec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:ad:d8:0a:89:66:4d:04:96:8b:96:8f:de:52:7b:7f:ee:ae:
         a0:3e:e9:1f:14:12:c0:a0:f7:d6:e9:ea:b8:19:da:10:57:6f:
         f0:a5:3b:63:8d:81:0b:ea:a4:b3:16:26:d8:01:45:a5:bd:7b:
         ac:6a:ab:6f:e7:00:59:da:88:10:f1:df:1a:fb:15:ec:90:48:
         19:ef:08:48:ec:ef:8d:20:86:29:d3:29:a8:47:c3:a1:4e:2d:
         17:9c:18:4a:be:11:11:d1:10:b9:f5:75:2b:48:28:13:44:4c:
         63:e8:b5:30:68:1c:e8:87:a1:26:65:8c:96:46:96:3b:20:55:
         4f:0e:68:a1:05:cb:c7:c1:1b:7a:f2:5b:32:f6:06:ce:fc:34:
         84:e1:a5:41:8f:6f:80:e2:d2:7b:82:fe:5e:08:cf:60:73:0f:
         7c:99:da:a2:c0:1f:54:80:37:82:3f:30:1a:8b:c0:a5:cc:3b:
         86:4c:ec:3a:ba:28:79:66:c9:2c:f4:6b:89:5f:64:86:41:41:
         4a:fa:21:61:e3:0f:ed:f7:9c:8d:5d:a2:bb:ec:1e:b6:46:03:
         cd:14:ab:c3:7d:a9:93:cc:db:82:92:8a:46:c7:37:e7:4c:4d:
         3c:39:b1:71:f7:34:38:c9:28:a0:f4:f7:c6:f4:ba:14:7d:e5:
         34:74:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:17:34 2025 by rpki-client