Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/d7160767-ff19-3541-a41a-6d1b640dc040.roa
File:                     d7160767-ff19-3541-a41a-6d1b640dc040.roa (raw, json)
Hash identifier:          lVQ1o3jX8ZqmH88j1XTd0N4qjFMVH9pGN0v4idNYRyQ=
Subject key identifier:   FD:54:8D:01:BE:22:13:E5:C9:22:A8:2C:AA:C9:F4:76:5E:14:DF:79
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F43285849C20A1DC22F5A86D1BC3F9080
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/d7160767-ff19-3541-a41a-6d1b640dc040.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22418
IP address blocks:        206.71.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1d:c2:2f:5a:86:d1:bc:3f:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0b30fb3c-4fbd-40a7-bab7-32c619f337b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:53:7a:a9:4a:ca:81:21:61:d0:53:de:af:
                    f0:53:4e:1f:97:d7:96:ea:c3:d1:f1:32:05:f9:8a:
                    08:69:6c:95:ba:8f:4f:8c:db:98:e8:b7:d3:8b:a5:
                    9e:dd:58:8c:8d:e0:e7:32:eb:ba:61:f6:f0:82:b8:
                    b0:e4:4f:f5:40:3f:3a:94:7e:96:15:82:cc:76:22:
                    39:d5:06:9f:39:9e:75:29:50:3f:ed:b5:cd:e8:60:
                    db:b3:49:0c:c0:ee:df:31:bb:a8:ae:6a:e7:05:52:
                    86:cf:fe:ba:cf:25:64:b9:ea:1a:f4:28:50:70:8e:
                    28:35:0c:e5:c5:9a:f1:1d:19:1c:a1:7b:aa:78:bf:
                    2f:9e:8e:44:f2:02:90:9d:7b:e5:ac:1a:8b:e5:21:
                    35:96:45:59:2e:44:11:38:4e:36:40:d3:87:02:96:
                    e8:66:ba:f2:92:b6:ef:e5:95:25:58:3c:47:39:92:
                    5e:e5:e3:74:96:2c:ce:df:1f:cb:66:12:84:ee:50:
                    09:5a:61:81:ff:d4:7b:09:13:8a:f8:27:b8:ca:87:
                    c4:1d:43:60:35:10:fc:90:f5:82:fe:dd:bd:0c:d0:
                    10:e6:7f:39:91:e3:0a:47:c9:5d:8d:1e:27:93:33:
                    51:a1:0c:ad:59:fc:27:9f:71:d0:8f:a5:4b:e5:d1:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:54:8D:01:BE:22:13:E5:C9:22:A8:2C:AA:C9:F4:76:5E:14:DF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/d7160767-ff19-3541-a41a-6d1b640dc040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bd:88:ed:48:10:eb:77:ea:fd:b3:37:10:32:39:9d:63:66:
         ac:40:d0:08:b1:96:53:68:d3:e7:a2:ff:e2:12:23:e5:d5:67:
         e4:9a:f1:b7:a9:88:a4:1b:07:1c:70:0a:3d:bf:c0:f5:23:66:
         f1:41:e1:7b:25:18:a7:c6:39:68:48:24:b3:c0:0e:69:9c:7f:
         d7:db:9c:d2:68:62:3c:50:60:cb:e0:27:c8:bb:26:02:6a:0a:
         77:95:75:bc:30:74:34:70:f9:dc:4d:0c:05:5b:81:b7:8d:1b:
         5c:89:86:eb:6f:1f:1f:1f:20:b1:92:7e:ab:ae:d4:0e:0e:6a:
         00:92:cf:f5:43:3d:2b:68:81:af:d5:37:c5:71:aa:71:5a:d7:
         33:d1:eb:15:5a:d1:11:24:6b:aa:30:97:d2:78:dd:40:ba:b3:
         03:72:40:a2:c4:4a:17:20:ed:0f:c2:cd:10:90:9a:82:2f:21:
         30:50:08:fc:71:f0:a8:b0:ba:07:63:b2:fe:c0:ef:95:d2:29:
         a3:c4:82:bf:2a:15:fd:a4:3a:d0:8b:56:66:ea:bb:98:e0:67:
         d9:ed:84:13:8b:52:ab:54:fd:4c:0e:fd:63:2a:70:79:e5:81:
         ce:85:81:31:c4:7f:c8:25:7b:31:d3:e1:a6:7e:20:ea:a8:e2:
         a3:25:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:09:49 2025 by rpki-client