Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb980bb0-720f-3a64-b072-853dd4847933.roa
File:                     eb980bb0-720f-3a64-b072-853dd4847933.roa (raw, json)
Hash identifier:          LZ6hjCti12sBNkNMwnENBLnbJchYxPPF7O4BhcgRjho=
Subject key identifier:   12:38:A2:EC:7E:DE:60:ED:F9:0C:C4:CC:8E:A1:7F:EB:22:EF:84:E4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9629D1AE8CE69D4BF54280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb980bb0-720f-3a64-b072-853dd4847933.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.46.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:29:d1:ae:8c:e6:9d:4b:f5:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=066f5494-dc98-4ee8-a177-8992a6c3e764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:54:24:99:17:f4:f8:a9:c3:8f:a5:fa:7e:d6:
                    17:8d:2e:82:ee:20:b7:d4:a7:9e:a0:17:d0:67:48:
                    bb:ec:14:a6:2b:3b:86:f3:9f:c3:a8:5a:e4:ce:3c:
                    eb:bb:10:48:82:51:71:dd:ea:da:26:d2:7c:ba:d4:
                    6f:21:fd:c4:0b:0c:a7:d9:ba:e1:48:02:50:d5:02:
                    63:d6:6b:2c:e5:9f:83:ed:d9:33:2d:93:9e:b8:10:
                    c5:82:fb:6e:63:4d:c1:a7:42:ef:c8:cf:f5:8d:48:
                    fe:aa:a9:fe:2b:3a:0c:bf:ee:c4:81:b4:26:ca:4d:
                    97:a7:a2:1e:ff:06:63:69:7f:d4:5f:8d:dd:0a:f7:
                    1e:70:53:1b:7c:1c:49:7e:27:61:3c:0e:3b:a3:55:
                    ac:51:b7:a2:42:d7:8f:61:a6:50:f6:f7:68:12:8e:
                    da:e4:ed:c6:e2:af:39:de:3d:42:68:d2:d0:08:05:
                    88:26:3e:89:33:36:72:79:68:71:9f:d9:43:6e:7a:
                    95:5e:80:ce:ea:dc:2a:48:2b:4a:73:19:43:6b:23:
                    b6:37:63:42:ea:83:50:a1:7e:43:a9:46:d7:0d:ec:
                    df:ce:64:cb:93:90:32:d8:11:02:f0:55:04:8f:9f:
                    32:6c:e0:b5:15:fc:90:13:a2:ba:ee:71:f7:33:17:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:38:A2:EC:7E:DE:60:ED:F9:0C:C4:CC:8E:A1:7F:EB:22:EF:84:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb980bb0-720f-3a64-b072-853dd4847933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:de:8f:1b:57:a8:7f:8b:77:af:80:61:e5:40:c3:38:1e:
         ad:33:44:15:0d:37:39:12:2b:70:39:25:9e:bf:ff:f0:83:5f:
         0b:12:59:37:58:0f:28:b2:c7:c0:fa:41:74:40:43:6b:0c:29:
         1a:98:e6:bd:46:62:f4:cd:3a:9f:54:f5:b9:49:a0:cb:0b:dc:
         ec:f6:40:ff:ad:e9:d3:f5:06:cd:e0:0c:0a:27:04:a8:a6:a5:
         f7:4b:70:ce:db:cd:d4:97:8f:ae:a3:d0:f9:1c:ba:23:86:42:
         4f:e3:6a:42:dc:35:19:f6:e4:25:68:f5:5d:37:69:f9:64:a9:
         47:a0:b5:10:ea:34:65:05:49:59:77:cf:23:15:1e:c2:12:2b:
         42:81:ec:34:3d:79:38:22:49:10:4c:07:7c:40:f0:21:12:cb:
         21:7e:9e:7d:92:e7:37:6a:b1:93:f9:35:8c:32:3d:43:84:e4:
         24:6d:cd:81:28:e1:b8:32:5c:2c:84:0e:81:cd:b4:6a:05:9e:
         a5:cb:6f:5a:40:08:9f:92:b9:ad:00:31:57:51:9c:09:ad:00:
         86:a7:80:92:dc:31:5f:e0:50:bb:38:2c:04:8a:d2:45:20:64:
         99:46:2c:4c:5c:4a:a7:2d:fb:70:c3:b6:e8:f9:af:50:d5:5d:
         40:49:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:24 2025 by rpki-client