Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa
File:                     16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa (raw, json)
Hash identifier:          Hug6wW4PgFwJldls3Smwnuy8uoUMMsbC707TzEJbP64=
Subject key identifier:   DC:83:AD:A5:49:88:6F:34:39:F0:4E:AF:2B:F2:FD:37:DA:68:D2:15
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9321D0410BF33F682280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.44.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:93:21:d0:41:0b:f3:3f:68:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=a42dd71b-7cce-4672-945d-e0cf996f8165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:ff:b7:40:4b:d0:66:d2:97:15:73:b7:c9:
                    d6:99:33:bc:96:88:84:11:a6:a7:ef:44:41:7c:8b:
                    a6:23:29:50:04:e6:e9:b4:8f:8f:95:c1:7c:9f:6a:
                    c1:ce:d4:04:00:5d:30:f9:77:31:c3:da:a8:2c:6b:
                    0c:93:fa:78:74:0a:ce:df:cf:41:5d:8d:88:55:41:
                    5a:3f:ff:13:12:03:0b:72:f6:b1:03:6d:a3:d0:d8:
                    bd:16:26:61:58:8b:91:57:16:17:27:a1:5b:b1:24:
                    a3:38:77:a2:1f:be:5a:98:c9:e0:be:60:bf:b4:5e:
                    1f:5a:b3:0a:5a:a9:71:ab:e1:39:71:d1:09:79:2a:
                    b5:dc:a1:9b:1a:1c:6e:74:4d:58:98:5e:8b:33:3c:
                    1e:d5:4f:5c:fc:6a:d7:81:de:af:dc:c7:3f:4f:6c:
                    40:63:a7:e3:48:36:0e:ad:10:3a:f1:ff:fb:14:41:
                    9c:e8:55:19:62:1c:b8:71:3c:3d:b4:12:b5:80:57:
                    e3:87:f4:d1:66:f0:f5:0e:d2:d7:de:d1:73:33:ce:
                    03:45:2b:26:a6:3f:df:33:ac:ad:60:35:9d:db:15:
                    dd:6b:f5:84:ca:76:87:7c:4e:3e:13:aa:0a:0a:02:
                    0e:dc:92:fa:6d:49:ec:b4:18:b0:35:0c:9f:9a:c7:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:AD:A5:49:88:6F:34:39:F0:4E:AF:2B:F2:FD:37:DA:68:D2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/16581881-5eb6-3bd6-88ab-ecf938c64ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:b6:35:69:17:82:f5:da:ca:ab:e4:3e:26:7a:2e:5e:70:
         7f:0b:df:6d:b7:95:8b:b5:b6:3f:fb:2a:51:32:0a:7b:80:d5:
         5b:44:50:d1:3c:0d:37:c0:ed:ca:40:f6:4c:e1:3a:3d:08:4e:
         df:e0:e8:6d:78:48:43:04:b0:9c:ff:bc:77:ea:ec:7e:dc:20:
         ff:4f:28:4d:47:d4:2c:e0:47:21:b3:76:17:d1:ef:1e:dc:2e:
         21:0e:d3:3c:9b:e0:1e:7a:94:52:fa:5e:3b:49:67:94:d6:92:
         b4:9a:52:2b:97:a9:6f:88:94:f8:3c:b4:58:37:f8:b2:81:74:
         a6:ae:f9:71:a6:d4:17:ae:c9:40:ad:54:6f:e0:71:03:d7:f5:
         87:a3:57:c3:ad:09:46:85:55:27:47:09:24:12:a0:7c:a0:40:
         1f:39:b2:df:62:90:53:52:4c:c5:3c:62:fb:3f:7c:de:c7:1a:
         40:de:b7:2d:a2:19:84:58:f0:40:61:f3:2e:15:59:99:f1:cc:
         d0:2d:a3:b5:fb:75:0e:5c:06:e8:e6:15:54:3c:88:aa:81:86:
         91:6d:77:db:e2:bd:48:a0:40:09:9b:f6:95:09:e4:d5:45:51:
         c5:ca:8e:25:95:a9:92:7e:9a:4d:1f:1e:6f:8e:51:d2:7b:dc:
         53:ba:ee:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5Mh0EEL8z9oIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
YTQyZGQ3MWItN2NjZS00NjcyLTk0NWQtZTBjZjk5NmY4MTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzL/t0BL0GbSlxVzt8nWmTO8loiEEaan70RB
fIumIylQBObptI+PlcF8n2rBztQEAF0w+Xcxw9qoLGsMk/p4dArO389BXY2IVUFa
P/8TEgMLcvaxA22j0Ni9FiZhWIuRVxYXJ6FbsSSjOHeiH75amMngvmC/tF4fWrMK
Wqlxq+E5cdEJeSq13KGbGhxudE1YmF6LMzwe1U9c/GrXgd6v3Mc/T2xAY6fjSDYO
rRA68f/7FEGc6FUZYhy4cTw9tBK1gFfjh/TRZvD1DtLX3tFzM84DRSsmpj/fM6yt
YDWd2xXda/WEynaHfE4+E6oKCgIO3JL6bUnstBiwNQyfmsfLPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNyDraVJiG80OfBOryvy/TfaaNIVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTY1ODE4ODEtNWViNi0z
YmQ2LTg4YWItZWNmOTM4YzY0ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRyx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfWtjVpF4L12sqr5D4mei5ecH8L3223lYu1tj/7KlEyCnuA1VtEUNE8
DTfA7cpA9kzhOj0ITt/g6G14SEMEsJz/vHfq7H7cIP9PKE1H1CzgRyGzdhfR7x7c
LiEO0zyb4B56lFL6XjtJZ5TWkrSaUiuXqW+IlPg8tFg3+LKBdKau+XGm1BeuyUCt
VG/gcQPX9YejV8OtCUaFVSdHCSQSoHygQB85st9ikFNSTMU8Yvs/fN7HGkDety2i
GYRY8EBh8y4VWZnxzNAto7X7dQ5cBujmFVQ8iKqBhpFtd9vivUigQAmb9pUJ5NVF
UcXKjiWVqZJ+mk0fHm+OUdJ73FO67to=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:27 2025 by rpki-client