Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b06ebcee-b8c8-3db5-81b3-2db2e4183f68.roa
File:                     b06ebcee-b8c8-3db5-81b3-2db2e4183f68.roa (raw, json)
Hash identifier:          TtD5uFA8m5RKhpA5RdUj/1Tiwtt/AIpvfr/yiXC05sQ=
Subject key identifier:   24:A1:83:CB:B5:A5:29:90:BA:18:60:B9:B9:F4:5E:F2:6C:5D:30:4E
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584AC01647150891D63ED8BEF380
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b06ebcee-b8c8-3db5-81b3-2db2e4183f68.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     7862
IP address blocks:        146.23.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:47:15:08:91:d6:3e:d8:be:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=f11cb93e-3702-49ce-9e61-7974f8b82644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:fe:0e:f5:6d:38:0d:be:81:31:b5:9b:8d:
                    de:56:de:1a:d5:a9:05:87:9f:55:b0:7f:5a:21:fd:
                    11:e1:9b:f0:97:e3:30:40:23:9c:00:c9:6e:b5:bd:
                    65:d2:47:e3:e1:20:43:1c:bc:aa:fa:94:d8:57:cf:
                    c3:24:6d:c5:ab:16:87:0a:51:14:c9:c1:6c:bf:b9:
                    cc:07:3f:77:27:05:29:4a:eb:d1:38:a2:b8:d7:90:
                    08:fb:17:ba:87:f7:60:5f:3e:6c:8c:86:f0:09:36:
                    ac:9d:40:65:6e:fd:49:b4:db:49:af:49:3a:73:9b:
                    95:ee:65:22:89:95:d7:5d:0b:ef:55:92:9d:12:3b:
                    db:3d:92:b5:79:97:1c:08:0f:60:e6:1e:8d:16:2b:
                    dd:5a:fb:ff:87:89:07:77:eb:fd:9c:79:c9:ed:ed:
                    b2:67:11:ea:89:86:d8:61:3c:13:92:0e:7a:39:5d:
                    c9:5f:22:7c:44:9e:7d:7d:75:f4:f4:9c:78:1f:c0:
                    09:27:4c:01:10:00:9b:25:e4:33:7f:dc:3b:7a:6f:
                    3c:ff:5d:b3:87:b0:1a:1b:11:d8:f8:37:1c:4f:ea:
                    ef:8c:a2:5f:61:ef:7c:d1:f9:c7:57:16:e3:54:ef:
                    80:f5:f4:d1:2e:4c:ff:74:79:42:0f:70:8f:0b:87:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A1:83:CB:B5:A5:29:90:BA:18:60:B9:B9:F4:5E:F2:6C:5D:30:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b06ebcee-b8c8-3db5-81b3-2db2e4183f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:67:b6:f0:e7:df:ba:4f:6b:0d:91:a2:eb:38:b5:a3:a6:d4:
         42:ec:a5:28:8d:a0:cd:cc:f8:9b:8f:84:5f:dd:0c:e7:bf:5d:
         ef:7a:36:be:41:3f:a3:29:60:75:e6:26:f5:da:0f:8d:b9:7a:
         4b:72:cf:c8:00:e1:24:88:0b:ba:8a:92:b6:99:0f:68:52:32:
         51:1b:ca:7b:51:d1:91:31:7e:ef:dd:c2:68:eb:3e:87:f4:14:
         37:b7:e6:40:6a:8e:2b:01:00:28:b8:bf:64:28:e0:7f:56:9a:
         5f:70:32:25:17:48:f9:c7:54:ad:18:b7:03:7e:2e:21:d7:fb:
         c1:b3:8d:50:b8:ea:ae:73:0a:70:2a:4d:06:78:8c:d6:6f:1b:
         8a:54:3a:31:12:08:dc:3c:8f:df:77:bf:10:64:a7:d2:7b:1d:
         05:6c:de:99:29:0e:29:57:5a:ad:79:85:ed:b3:49:41:47:03:
         07:83:4d:cc:08:22:b7:65:14:de:e8:37:a7:9e:9f:3c:ce:83:
         75:11:57:69:c0:44:c5:73:e7:8d:0a:7f:10:94:9b:52:d6:20:
         00:c5:e8:ea:d5:41:79:78:dc:b2:57:5a:4a:b6:34:df:64:53:
         d6:ca:85:b0:c4:62:e5:4b:1f:2d:24:d4:77:a2:2e:56:b7:f3:
         9c:9a:bd:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkcVCJHWPti+84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZjExY2I5M2UtMzcwMi00OWNlLTllNjEtNzk3NGY4YjgyNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJD+DvVtOA2+gTG1m43eVt4a1akFh59VsH9a
If0R4Zvwl+MwQCOcAMlutb1l0kfj4SBDHLyq+pTYV8/DJG3FqxaHClEUycFsv7nM
Bz93JwUpSuvROKK415AI+xe6h/dgXz5sjIbwCTasnUBlbv1JtNtJr0k6c5uV7mUi
iZXXXQvvVZKdEjvbPZK1eZccCA9g5h6NFivdWvv/h4kHd+v9nHnJ7e2yZxHqiYbY
YTwTkg56OV3JXyJ8RJ59fXX09Jx4H8AJJ0wBEACbJeQzf9w7em88/12zh7AaGxHY
+DccT+rvjKJfYe980fnHVxbjVO+A9fTRLkz/dHlCD3CPC4cKxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCShg8u1pSmQuhhgubn0XvJsXTBOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvYjA2ZWJjZWUtYjhjOC0z
ZGI1LTgxYjMtMmRiMmU0MTgzZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkhcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhntvDn37pPaw2Rous4taOm1ELspSiNoM3M+JuPhF/dDOe/Xe96Nr5B
P6MpYHXmJvXaD425ektyz8gA4SSIC7qKkraZD2hSMlEbyntR0ZExfu/dwmjrPof0
FDe35kBqjisBACi4v2Qo4H9Wml9wMiUXSPnHVK0YtwN+LiHX+8GzjVC46q5zCnAq
TQZ4jNZvG4pUOjESCNw8j993vxBkp9J7HQVs3pkpDilXWq15he2zSUFHAweDTcwI
IrdlFN7oN6eenzzOg3URV2nARMVz540KfxCUm1LWIADF6OrVQXl43LJXWkq2NN9k
U9bKhbDEYuVLHy0k1HeiLla385yavQ8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:56 2025 by rpki-client