Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4f5f9885-c37f-3e9b-8de7-00fac659bf95.roa
File:                     4f5f9885-c37f-3e9b-8de7-00fac659bf95.roa (raw, json)
Hash identifier:          N9P+GnEuHN313tTtoQchGn5um4xxZfbswazgAIpOTKo=
Subject key identifier:   19:76:8F:E9:D3:43:AF:21:E3:E0:97:71:80:16:A5:DA:DA:7B:CC:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F97BCDF92C9FF6E199C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4f5f9885-c37f-3e9b-8de7-00fac659bf95.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.44.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:97:bc:df:92:c9:ff:6e:19:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5588b335-03d3-4213-a0c9-fabcbe988001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:c4:09:ee:dd:c1:2a:f4:10:d4:cb:10:79:
                    9c:88:c2:af:a6:12:e4:34:e1:51:d3:1e:ac:7e:ef:
                    b2:a1:05:2d:e3:d2:e7:c1:11:66:bb:90:09:7d:78:
                    10:3c:5b:98:cb:e4:d8:d8:43:42:fe:8e:a2:72:b5:
                    a6:f5:2e:22:11:71:4d:f4:72:a2:3b:ad:24:40:13:
                    28:09:87:77:85:18:be:fb:2f:80:be:c7:12:af:8f:
                    70:8a:b6:06:ff:40:6c:ae:70:88:23:33:ec:2f:22:
                    45:01:70:a4:22:3a:75:e8:02:96:79:0a:c4:ff:76:
                    ac:eb:24:82:de:10:68:03:9a:02:70:09:a3:17:26:
                    da:00:50:44:1a:18:b2:b5:d7:63:7d:72:49:c6:2a:
                    62:c7:19:6f:47:98:df:e1:7e:44:97:b5:e0:c5:de:
                    b3:50:30:ef:4a:d5:df:51:d9:7d:fa:02:c9:d5:5c:
                    d9:fb:c7:53:eb:f9:85:49:8b:68:9e:7e:53:65:98:
                    a4:61:1d:1a:20:c5:32:00:80:5f:8b:5f:e0:3b:eb:
                    7d:58:72:2f:81:40:19:c1:7a:96:80:f1:10:06:34:
                    fd:c9:ed:d7:ab:dd:97:43:e2:60:79:16:53:a5:7f:
                    98:69:ab:d9:d7:d1:fe:8a:d5:1b:98:1d:3d:3c:71:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:8F:E9:D3:43:AF:21:E3:E0:97:71:80:16:A5:DA:DA:7B:CC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4f5f9885-c37f-3e9b-8de7-00fac659bf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:2f:df:68:b7:10:ba:b5:62:92:e2:0e:8e:e1:f3:b6:54:
         f5:87:da:1c:6c:b2:fc:b3:56:b8:e2:85:ff:16:be:ae:90:62:
         18:b2:84:c9:97:c5:7c:0e:42:9e:4c:42:ea:be:94:e5:51:12:
         14:c1:e1:34:a9:72:5c:a3:12:af:55:7e:6f:b7:89:aa:77:42:
         98:70:be:a1:06:f3:00:17:ee:df:be:c4:93:d8:8b:5b:1f:f8:
         f6:6e:a9:5f:35:45:cc:97:17:3c:f6:47:6e:75:32:f6:ef:a0:
         70:1c:40:44:e7:e4:ff:3d:0d:0d:ea:24:e0:2f:92:82:c0:f5:
         a4:94:80:0b:e4:dd:72:2f:4b:d6:e5:f7:da:8f:31:c9:8b:20:
         72:70:d2:21:b4:df:c3:c3:be:11:70:cf:11:ff:c5:62:09:4e:
         25:55:41:b9:61:60:4c:45:7d:ed:11:19:59:85:7e:a0:53:47:
         c9:0a:3b:c0:bf:47:80:13:fc:31:fe:d3:4b:11:56:6f:e7:8a:
         2d:02:7c:12:9f:a1:f4:d1:36:28:fb:33:55:84:0e:b1:55:55:
         3f:29:eb:ee:d3:d9:ce:0d:cf:44:aa:40:23:cd:76:27:41:41:
         89:2d:41:b5:01:2e:35:2e:4b:15:eb:e0:4f:be:62:ac:78:bd:
         63:b8:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:02:08 2025 by rpki-client