Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4404197-ee59-3a6e-a7dc-daf806c1dd49.roa
File:                     d4404197-ee59-3a6e-a7dc-daf806c1dd49.roa (raw, json)
Hash identifier:          ub4sYvganCnMBkUSMtl/PP6jTBw5c9g8zf+eS2IKzFM=
Subject key identifier:   8B:B9:8B:4E:0C:DE:C8:E5:01:53:78:B3:0D:98:31:11:59:8A:9D:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9654C63500BAA9A7BE8480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4404197-ee59-3a6e-a7dc-daf806c1dd49.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.44.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:54:c6:35:00:ba:a9:a7:be:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=20524e23-ba54-43cf-824c-932cccc3654d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:f4:49:23:ae:13:b2:6e:da:ef:ec:d5:2e:
                    2d:df:82:4c:b7:79:b6:9c:c4:7a:3f:a8:ea:18:58:
                    cc:97:be:27:07:7b:5e:f0:cb:1b:40:c1:aa:30:47:
                    fc:73:ad:f9:e9:9e:53:69:1d:6d:1d:b3:15:70:0e:
                    74:97:ff:e9:cd:7a:6a:fc:1c:5f:ce:31:a1:38:7d:
                    69:30:55:9b:77:db:9c:d7:37:2e:59:67:ed:f9:45:
                    f9:62:a8:6f:d4:6f:18:05:2f:c4:36:67:ac:e7:29:
                    fb:d8:73:cd:ef:72:c1:ab:5b:19:55:f5:d1:67:50:
                    8c:f0:77:6a:51:8b:bf:95:2a:bc:fa:02:37:b8:5a:
                    c0:51:63:8b:d6:f4:e1:bd:99:75:29:89:22:e1:39:
                    24:10:6b:b7:02:f3:72:17:dc:39:14:2b:ab:db:8c:
                    79:ae:bd:2f:e6:3b:1c:2e:ce:b0:35:95:07:45:bb:
                    45:16:06:93:31:b8:51:01:b8:a4:1a:6e:43:3a:cb:
                    45:87:6d:82:53:dc:a0:00:c4:0d:d7:9a:2a:2e:8a:
                    c5:5f:19:77:56:f1:22:00:d3:0b:06:cd:a9:ee:ee:
                    77:23:b9:22:af:40:c7:27:60:f6:19:80:d6:40:d2:
                    33:88:47:f4:01:4d:17:f4:95:79:e4:35:2f:72:bb:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:8B:4E:0C:DE:C8:E5:01:53:78:B3:0D:98:31:11:59:8A:9D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d4404197-ee59-3a6e-a7dc-daf806c1dd49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:56:75:46:d4:45:b9:6a:8b:79:fb:33:ea:74:1c:86:40:e5:
         33:50:3c:98:28:1b:39:a6:fc:15:dd:df:d6:a9:f3:df:02:74:
         c0:d9:96:c5:aa:fc:af:8f:00:00:db:3a:12:94:a7:e0:c0:28:
         52:6c:44:b9:bf:0d:57:38:43:66:8e:76:77:e5:1d:e1:fd:0e:
         7b:22:27:70:72:4d:88:fb:00:84:28:1e:aa:63:31:f7:64:b3:
         77:90:28:e7:fa:96:06:77:45:54:29:c7:42:43:cb:cb:17:9a:
         b0:ba:0b:5d:1b:5e:f5:eb:54:b5:16:6a:a9:8a:48:c4:5e:83:
         3c:1f:ca:03:85:40:ff:62:d1:f2:22:a2:7f:db:43:5a:0a:ce:
         bb:ef:8f:3a:6c:47:82:94:f7:c4:23:b7:57:23:0f:db:d4:34:
         8a:3d:99:ee:a0:b6:53:fc:aa:b6:6d:32:42:bd:39:5e:3e:03:
         15:d8:75:2a:5c:6f:eb:a2:33:24:25:95:47:ff:7b:2b:58:e8:
         d3:4a:80:69:ab:06:23:8d:d4:d9:92:72:82:62:dd:49:11:fc:
         42:0a:76:ff:d4:0a:b1:9e:aa:31:f1:19:e5:42:4a:cd:6a:81:
         26:b8:60:15:1e:6e:8f:b5:06:8f:a6:da:c8:44:7a:96:cc:16:
         5b:7c:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:28:44 2025 by rpki-client