Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
File:                     a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa (raw, json)
Hash identifier:          o2AAk3VNExoKXgc+UAwH4TY1A3OiYj3wENsfdvqkkDI=
Subject key identifier:   E7:F1:55:67:BA:F8:EE:83:D5:3A:5E:3F:76:76:36:7F:A8:A7:A4:E6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6DE095BB599A7DAB41BA
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        71.46.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6d:e0:95:bb:59:9a:7d:ab:41:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=f2bfd423-4729-4929-bd18-f8ca8a525a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:1b:0b:90:73:06:4c:6e:49:01:28:55:e6:
                    36:54:a4:4a:c4:b3:40:90:18:18:76:9a:c3:d3:85:
                    72:7c:51:6f:72:6f:ad:95:c6:8f:a1:09:df:92:86:
                    7a:61:42:cf:6c:33:96:74:03:6c:3a:fb:3d:26:5e:
                    6b:93:83:cf:70:ae:dc:44:25:e9:19:3c:7a:7c:e0:
                    8d:bb:16:6e:f7:f0:56:ea:19:bc:03:7a:34:4b:0a:
                    73:e8:8d:1c:ac:c5:f2:27:cb:72:90:a1:48:2b:89:
                    1a:e6:dd:41:29:75:9c:cd:ef:3b:b6:7b:8b:b3:04:
                    15:ea:c3:38:da:9b:c5:e8:4f:e4:82:7c:55:72:d3:
                    1b:c1:5f:b1:a9:99:3d:00:9e:58:60:f2:0e:b2:ac:
                    98:1f:90:28:20:90:6b:05:4e:df:08:6f:36:4b:bf:
                    2d:ab:57:2d:48:48:2e:e6:e2:09:da:53:d8:16:89:
                    33:6a:0d:86:fc:74:f2:6c:2d:ff:e9:85:7f:91:85:
                    8b:2f:4f:9f:13:d0:b4:11:c6:1d:7e:c8:f2:37:f3:
                    49:c9:69:b9:3e:ac:4a:43:1b:8c:4f:68:8b:db:7c:
                    fe:33:94:08:fe:b5:14:4f:da:a0:d2:14:57:b3:d6:
                    a2:85:f1:fa:a5:71:14:c1:cb:94:41:74:66:91:fe:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:55:67:BA:F8:EE:83:D5:3A:5E:3F:76:76:36:7F:A8:A7:A4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a8be6032-eb1c-39ee-8dc4-5cd47a2bc8c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:45:2f:e7:5d:c5:ca:66:a8:66:8b:e6:c6:bc:34:47:f4:99:
         c5:bc:46:8e:5e:22:a4:d1:b3:6b:72:e2:38:ce:f5:c2:39:78:
         6e:11:fa:b9:69:aa:78:07:a2:a6:f9:f4:45:5e:54:48:16:c0:
         e9:26:95:f2:8b:93:7a:b3:66:11:e6:02:e3:cc:75:12:cb:8d:
         cf:75:60:95:f8:f2:0f:c5:72:00:05:9e:48:71:96:fb:2b:a0:
         dd:6a:62:5a:47:53:f7:a9:4c:04:4b:02:17:f2:a9:71:0e:b5:
         86:4c:13:cd:f8:89:f5:db:86:d4:ba:8f:5a:43:a1:32:b0:b9:
         d8:5a:71:19:c9:3d:29:2e:d6:a5:75:8b:b3:5b:2b:56:19:77:
         f4:bc:e2:88:6e:93:73:34:11:6d:97:18:f7:39:b8:01:d5:c4:
         eb:45:2b:2e:79:4b:3e:e8:06:b7:09:c1:cd:aa:8a:94:16:d0:
         07:11:e7:6f:34:4f:78:9d:07:da:77:cb:db:95:d3:ff:09:0c:
         29:47:6f:b5:f7:5b:60:06:9b:7e:24:a7:18:f8:ad:67:7a:90:
         7a:93:5a:63:4c:b1:ac:74:97:26:93:36:60:49:bc:d1:71:fc:
         2d:a5:79:24:40:8d:4f:9c:03:f0:21:26:c5:21:ae:6d:e0:87:
         37:29:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:33:18 2025 by rpki-client