Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa
File:                     2a28dd70-b06b-3843-af4d-73a9482b3961.roa (raw, json)
Hash identifier:          6NO4TQ5DhrEcYQlSaN63E96WjxaDNb9y7F1eyLVXIS0=
Subject key identifier:   A6:EF:01:F8:0F:A6:5D:51:F4:00:81:D9:B3:5F:A3:5A:34:33:01:D3
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584B6D2C91D07DB9AFA0E9A11C80
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     7862
IP address blocks:        146.23.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:91:d0:7d:b9:af:a0:e9:a1:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=314d456a-b909-4bb6-b2b9-64f9a1b69724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:f9:3e:30:5c:5b:78:81:67:cb:a6:22:33:
                    89:c5:af:1d:36:26:23:b5:bf:85:a2:19:17:b9:98:
                    0a:c3:5f:3b:cb:fe:0a:ff:61:03:29:e9:38:21:a2:
                    dd:58:78:f7:bc:9a:9b:5f:16:ce:1b:c3:c0:1b:cf:
                    a9:31:57:38:11:c0:56:5a:84:39:d1:0b:8b:99:e8:
                    3e:3b:b3:54:5d:6e:0b:4f:dc:f8:a7:3b:56:76:ba:
                    03:1d:26:86:ce:e8:65:d8:50:4e:4c:71:1d:26:91:
                    07:c3:af:74:f7:e0:2a:a7:bc:70:df:0c:d5:35:65:
                    5d:da:35:70:f3:3b:3b:7d:1a:24:e2:a1:5f:72:5c:
                    2e:09:e6:96:d7:c4:de:bc:c5:04:90:33:df:7f:ee:
                    ee:85:a0:f9:d4:8e:b5:a3:cc:30:8a:a0:8f:d4:36:
                    f3:45:24:3a:3a:2a:eb:3a:b7:71:dd:ad:32:cc:e2:
                    5d:35:ef:fe:ce:71:aa:e6:b8:b4:1c:44:af:06:7b:
                    63:fc:06:d1:ab:b1:25:ce:d3:04:0b:62:ba:92:e2:
                    70:1e:88:d7:d1:bf:0b:1b:6e:b6:1e:59:25:22:ed:
                    a3:6f:5f:02:f1:00:10:b4:29:45:2a:0b:05:77:34:
                    38:92:e0:61:2c:f8:2f:c6:0e:25:12:e1:15:db:8f:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:01:F8:0F:A6:5D:51:F4:00:81:D9:B3:5F:A3:5A:34:33:01:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:eb:bd:d6:44:66:87:4c:1e:1e:d0:a7:1f:09:13:60:59:
         60:90:94:81:3a:3b:d6:c3:0d:dc:1b:ab:46:19:6b:72:06:80:
         14:3f:7f:9d:e2:bb:f1:cf:90:a7:b7:7e:d9:76:67:e7:3b:62:
         ec:54:63:7f:e1:91:38:62:3c:c1:2d:6b:c6:1f:b2:01:83:92:
         1d:67:04:f2:b4:be:58:ba:f6:62:ed:ef:9b:08:a4:17:21:f4:
         6d:eb:7f:35:cd:c6:a2:d8:92:9c:73:0f:be:7c:de:ec:c0:f5:
         12:75:2c:a9:24:e8:ea:47:6a:32:a8:3c:26:ce:69:cf:a4:85:
         9e:4b:d3:c6:80:13:e6:b7:1b:63:69:70:8f:aa:c6:c1:4f:45:
         d1:5b:2d:4f:07:9b:a7:d6:40:68:d2:8d:c0:6b:86:5e:09:b3:
         f4:f2:5d:78:84:f9:19:3a:f0:b4:c9:22:78:59:0e:e3:ef:5a:
         cb:f1:90:11:b8:93:3b:84:41:ed:13:a6:37:17:73:1e:6d:33:
         ae:35:1d:dc:85:97:5d:db:2b:1b:d3:72:dd:cb:0c:d2:35:ad:
         5f:a4:c2:86:c4:35:46:2e:5e:78:04:b4:4c:24:a1:2a:bd:90:
         92:14:87:c6:cb:72:01:ac:49:32:43:76:49:91:c0:c7:b8:3e:
         d2:88:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:38 2025 by rpki-client