Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
File:                     3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa (raw, json)
Hash identifier:          6jddKkng2whVhAGik7n9R2DL1yy1z0R2kT2LwdDCwLs=
Subject key identifier:   3F:6D:E2:0D:F3:FA:F2:61:18:D3:1F:40:DC:B1:FF:61:4A:7F:FF:3A
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849AD1A0660FA6979271AD44A60
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     7862
IP address blocks:        146.23.8.0/22 maxlen: 24
                          146.23.16.0/22 maxlen: 24
                          146.23.20.0/22 maxlen: 24
                          146.23.28.0/22 maxlen: 24
                          146.23.62.0/23 maxlen: 24
                          146.23.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:06:60:fa:69:79:27:1a:d4:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=31db656d-44a9-4fcf-9c08-b7d4250fff9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:93:22:62:80:87:4a:7d:87:39:2b:69:df:ed:
                    48:23:68:d7:3a:11:92:cb:4c:dd:bd:e8:e6:3d:d4:
                    e0:e1:c8:1e:d5:ed:14:31:4c:79:8a:d2:96:a7:a7:
                    97:89:a1:0e:f2:fa:ce:21:12:7b:1a:76:0a:27:f4:
                    ae:eb:d4:c2:73:f8:ab:bc:55:c2:4c:59:d0:ac:68:
                    94:f2:3c:b0:81:34:44:c2:bc:51:48:67:8e:5a:16:
                    e9:46:ed:2a:e6:55:85:da:5a:f9:ef:b1:4a:2b:83:
                    55:f8:d8:84:27:2e:ce:4b:5d:7a:ad:b0:49:a0:64:
                    6a:3e:c4:91:72:af:77:33:49:89:7e:d3:e3:16:76:
                    92:94:a5:2c:83:cc:21:e5:0d:29:c2:70:15:d4:6a:
                    f5:21:a7:6e:5d:51:6c:75:64:6c:06:73:c0:cc:ce:
                    ee:29:2b:bf:4e:c1:78:be:89:f2:22:d3:54:65:bc:
                    18:7b:50:78:7c:1a:d5:5d:20:30:54:2d:5c:bf:6f:
                    c1:d2:32:03:6c:84:c9:1c:fb:07:ac:65:fd:5a:dc:
                    25:8b:1e:30:44:ca:97:4c:87:b6:d9:61:8c:85:cc:
                    62:5c:4c:87:57:f9:32:6a:64:2b:23:e1:19:2a:43:
                    5f:03:bf:27:7b:34:a8:ca:2f:10:63:1d:89:16:2a:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6D:E2:0D:F3:FA:F2:61:18:D3:1F:40:DC:B1:FF:61:4A:7F:FF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/3b718bd7-bd8e-3b91-bb03-82ac5b2f079d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.8.0/22
                  146.23.16.0/21
                  146.23.28.0/22
                  146.23.62.0/23
                  146.23.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:18:10:3d:b7:18:a3:42:96:8f:75:81:e5:2b:6c:0e:51:
         23:02:e2:34:c1:89:0f:7b:21:79:e9:4c:54:9e:76:1a:20:b0:
         04:9c:dc:5e:c6:10:ac:a7:78:35:ef:26:92:15:1c:0c:74:d7:
         03:a4:eb:79:d3:fc:a6:d5:ed:8e:32:24:49:e8:64:3a:28:c1:
         44:fb:5f:5e:13:f1:9a:64:2e:81:ff:3e:9e:a2:ef:e3:25:a3:
         da:e8:ff:52:08:ae:98:4a:ef:7e:96:0a:c7:1e:45:d1:4b:f8:
         ef:13:bc:ce:07:28:04:8d:d6:4a:3c:4e:e3:d7:a8:22:1c:07:
         8d:10:ff:8d:6c:f9:8c:2b:db:b2:f7:2f:a1:a1:15:a7:1c:90:
         95:e6:e9:3c:8b:93:96:07:4f:5e:7f:a8:e5:5c:dd:50:f3:8e:
         51:49:3d:5c:f9:5e:d5:46:bc:31:80:bc:e1:7d:e6:8f:37:d1:
         84:32:64:c4:1d:16:2c:a3:bb:ed:ec:cd:d4:a6:e2:98:5f:98:
         71:a7:98:63:b6:2a:0c:17:34:fa:dd:3b:8e:fd:64:a6:93:a4:
         9c:8d:f2:2a:58:48:1b:35:18:8a:df:e3:a8:92:2b:73:4d:e3:
         b0:0a:41:6f:9c:f2:35:48:82:93:df:21:a8:02:65:8f:b6:20:
         c7:71:88:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 12 11:05:03 2025 by rpki-client