Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa
File:                     7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa (raw, json)
Hash identifier:          nWfwT7Jo/gnBqwIXbrWYR3FCWO4xZ/hL90Jj3C9WH6U=
Subject key identifier:   C6:50:E6:CE:C4:72:25:48:3A:B4:CA:01:93:91:BC:B8:5E:3A:16:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F967091AF85E4179EA480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.46.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:96:70:91:af:85:e4:17:9e:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=32d08f39-a442-416f-a103-17d11faf0dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7f:1b:7e:78:c1:98:73:c8:71:80:7b:b0:03:
                    06:45:f1:85:a6:7f:d6:d1:b6:34:a7:2b:55:29:26:
                    a3:0c:bc:c1:b7:d7:82:0d:1b:19:dd:36:96:dd:eb:
                    e2:18:bf:fe:bb:9b:e5:38:02:6c:9b:a9:cd:56:67:
                    5c:2a:b2:cd:f1:3f:e2:e8:e8:17:5b:0c:2f:7c:2b:
                    33:de:90:77:6c:ee:d6:09:ce:de:fe:4b:ee:19:74:
                    91:8c:64:6d:c2:fe:cc:f7:be:1b:8f:ec:40:17:7a:
                    90:b9:7d:3c:dd:ba:78:ef:00:21:00:5f:5f:a8:05:
                    a7:5d:a4:32:9d:e4:ac:48:f2:c9:2e:cf:8e:9d:f0:
                    3a:f0:44:36:c5:59:b2:93:45:6b:22:ad:cb:15:10:
                    ca:bd:cc:78:ef:d8:68:6d:59:43:e5:5f:45:49:20:
                    6c:54:b9:d4:42:2e:d7:8b:74:8e:ef:76:68:b1:c1:
                    6e:8b:47:19:72:78:56:58:29:76:f1:30:d2:cc:58:
                    f5:54:fc:3a:5e:89:69:b3:a3:dc:13:14:9c:59:f6:
                    e0:43:55:2f:65:5a:ad:b2:39:f3:67:80:2b:61:88:
                    59:0c:98:d4:59:4a:76:9c:64:d2:f2:7e:f5:37:71:
                    ed:67:8f:8b:ef:40:9e:c3:a5:2b:6d:a6:2b:84:1a:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:E6:CE:C4:72:25:48:3A:B4:CA:01:93:91:BC:B8:5E:3A:16:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7dc104ef-82c4-3743-8f26-acd3d1e5c76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:32:af:89:99:80:39:40:9f:b0:de:56:de:25:e5:f1:60:
         99:9b:92:f7:a5:f2:23:6a:34:cb:0d:72:4f:43:7d:2e:7d:ac:
         ad:20:f5:6b:71:7a:ad:ba:d7:8a:6b:f3:eb:f3:31:38:11:71:
         71:68:1e:53:c4:4a:51:f1:bb:8f:2a:e6:82:9b:a8:c5:10:5a:
         2c:9b:7e:59:79:97:f5:0f:ed:26:7b:99:5d:ae:4c:7b:f0:0f:
         7c:fe:dd:6e:b7:69:6f:f0:2e:e2:3a:ff:82:0b:ad:68:bd:44:
         99:70:97:c6:b6:38:0e:8a:48:1b:12:68:c0:fc:d2:81:7d:c2:
         a3:29:34:6b:ca:e6:6a:90:8a:6e:d8:b6:fc:89:6e:39:3e:8e:
         5e:da:02:38:35:6a:fb:c8:41:8d:bf:82:33:ec:c6:26:e9:63:
         73:46:0f:19:b3:71:4a:07:db:8b:6e:34:70:d7:0e:45:0a:22:
         33:f9:95:de:4f:46:3d:f7:6a:a4:13:ba:43:48:d9:95:5f:bf:
         0a:5e:c3:73:bc:1b:3f:81:92:bc:af:ea:6f:c3:1a:75:d4:a7:
         45:de:11:0f:d1:92:cb:8c:00:27:11:41:9e:70:2c:d0:81:57:
         c0:f7:b4:ee:86:0b:93:44:f6:9b:03:a1:07:60:9b:14:4e:8b:
         82:c5:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:22:17 2025 by rpki-client