Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e57ac20-cebd-3933-818e-c21462795c7f.roa
File:                     8e57ac20-cebd-3933-818e-c21462795c7f.roa (raw, json)
Hash identifier:          c6OyR11FAAShpS9a0KCMRL6TvFViVFBy8QgF1Ent7kw=
Subject key identifier:   4F:05:5B:7C:0C:25:8A:6F:83:97:5D:BC:64:E5:77:A3:82:4B:D9:F5
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849DF5A71B1F80C9C6B075E5200
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e57ac20-cebd-3933-818e-c21462795c7f.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     7862
IP address blocks:        146.23.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:71:b1:f8:0c:9c:6b:07:5e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=17d50bf2-7dfc-4c79-b703-7cdee577b1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:2c:3b:26:bb:ad:7a:87:b2:1a:86:0d:53:
                    33:c8:dd:0a:a2:c0:c5:4c:8b:2f:58:19:61:61:52:
                    19:4c:01:d2:9a:65:96:d1:85:71:46:5b:a2:d8:e5:
                    ed:1d:0c:55:fd:70:78:e7:26:0a:38:7a:dd:59:d0:
                    e9:73:fa:b3:c0:33:3e:69:08:5f:ff:3f:80:83:ee:
                    55:6d:d2:05:44:67:3a:16:f1:7e:24:7c:85:6f:5b:
                    48:ea:ba:48:5e:43:03:10:5e:37:e6:74:7d:fc:f7:
                    b7:d9:f9:17:0c:0e:2e:75:0b:17:ec:cd:d3:0f:e2:
                    0d:a7:c2:42:f7:3f:36:c9:76:54:f1:39:c3:7f:4a:
                    e2:97:c8:21:99:19:df:b5:aa:c8:77:83:2b:04:9d:
                    4f:88:b2:b2:99:fd:83:e6:77:44:4d:1c:9e:d4:55:
                    b3:9f:d0:89:69:60:f6:fa:ef:13:1e:b1:bb:49:39:
                    8a:ac:9b:23:d9:c7:70:b3:56:2f:43:1d:3a:8f:30:
                    52:ff:2d:0d:3a:5b:4f:ee:f5:06:34:48:ea:f8:88:
                    95:3f:49:fd:05:ca:35:45:cb:1a:4d:46:c3:8f:f1:
                    91:06:58:1e:3d:58:97:90:90:46:2f:c9:cd:8a:dc:
                    a3:7b:37:24:a9:55:07:88:f5:9c:66:22:49:bb:af:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:05:5B:7C:0C:25:8A:6F:83:97:5D:BC:64:E5:77:A3:82:4B:D9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e57ac20-cebd-3933-818e-c21462795c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1e:d3:64:8b:0d:11:05:68:0b:8a:8e:76:c5:ba:f2:44:2e:
         7f:fc:2d:a2:51:88:d4:b4:47:07:ed:d5:32:4f:52:bc:32:62:
         96:e5:40:88:32:f2:3b:c4:41:c9:73:67:4c:a2:7e:3e:6c:2e:
         50:7f:f7:ed:fd:65:e6:8a:e7:5e:ef:c5:67:f5:44:89:87:04:
         03:ed:93:8f:eb:bc:d3:ba:7c:00:8b:a2:24:c9:dd:18:2e:90:
         3b:a1:57:c8:66:72:bc:12:61:e5:bf:33:1c:e2:cb:46:df:38:
         ab:ad:74:1d:89:c5:98:06:f1:d2:09:4c:a2:ea:72:14:3e:0b:
         bd:d2:8a:5c:44:1c:3e:6a:95:0f:fc:4f:32:3a:36:cf:78:84:
         24:4c:9f:87:0e:bc:fb:f3:42:6d:68:a4:72:0f:15:0e:90:d6:
         be:5e:96:70:a9:28:db:2f:15:43:8f:ae:e5:e6:dc:30:56:01:
         67:93:01:c0:f3:8a:ce:75:f4:af:f5:ca:80:6a:f5:db:af:7c:
         fa:b1:d1:14:b2:5d:79:ab:b1:29:42:29:51:aa:54:dc:31:2b:
         4b:a2:52:a2:fa:cb:51:a7:59:c8:11:32:10:c3:4e:0e:86:0b:
         83:d1:f8:69:bc:54:59:08:a7:52:3f:36:55:eb:39:4e:a7:84:
         10:60:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:25:02 2025 by rpki-client