Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3dcbe98-4a01-3d3d-a044-3d1d772c4eab.roa
File:                     f3dcbe98-4a01-3d3d-a044-3d1d772c4eab.roa (raw, json)
Hash identifier:          wGb3gWz2aAML8ZyiwaMKcIkxj9Yuuehnvl/RbOo14uo=
Subject key identifier:   D5:DB:6B:00:22:9E:83:F3:7C:2B:DE:CF:8F:5B:45:D1:13:AB:D2:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9004E7E0974781733E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3dcbe98-4a01-3d3d-a044-3d1d772c4eab.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     16787
IP address blocks:        71.44.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:90:04:e7:e0:97:47:81:73:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8175acb7-7b42-4717-8182-3cda3b7fdedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:e1:34:f7:39:f8:90:d0:c0:1a:d2:4d:e1:
                    f7:ed:d8:d6:9c:a7:85:86:a0:21:5f:83:a8:44:20:
                    e9:d8:59:f9:d5:23:ab:0e:82:db:d2:86:d5:1d:11:
                    6a:f4:ca:22:55:19:ab:65:c1:25:bf:06:16:9e:64:
                    97:65:a2:0c:06:fa:13:dd:53:cf:c0:4d:a5:7e:ec:
                    b4:97:ff:4f:cb:48:16:ab:54:12:b8:e0:f7:3f:cb:
                    ca:e8:a2:1f:83:40:62:6f:80:2f:88:e8:37:b1:ee:
                    f4:8a:a9:d4:fe:00:f6:c5:ef:05:c3:dd:7c:11:07:
                    13:ce:e5:b5:21:2f:3c:5f:57:91:45:42:10:26:4e:
                    89:39:01:b2:84:1a:28:9c:ee:06:f9:61:0e:46:b1:
                    ca:fa:1a:a8:a8:f3:32:cb:a2:29:0c:70:12:a4:a4:
                    13:5f:03:0f:ae:01:42:42:1a:34:68:c8:9b:e6:7d:
                    c0:3b:3d:4c:2f:61:c6:5f:1e:e2:66:cc:1b:1a:d5:
                    35:48:68:d0:5c:ca:78:0e:7b:bb:4a:3d:fd:56:c3:
                    23:97:1f:60:3c:6b:7b:30:b1:6e:75:9d:e3:6b:ff:
                    93:dc:19:ee:b2:66:bb:fb:1a:ed:6b:d3:4b:5c:f8:
                    95:4b:75:c0:ed:d0:ec:19:0e:9f:19:f4:4c:36:5a:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:6B:00:22:9E:83:F3:7C:2B:DE:CF:8F:5B:45:D1:13:AB:D2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3dcbe98-4a01-3d3d-a044-3d1d772c4eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:74:96:16:03:3a:05:24:b8:36:7c:ff:b4:d7:94:fc:b1:15:
         2e:56:d2:38:b3:65:b7:bb:1d:8c:2f:8d:2e:ca:4c:ed:7b:99:
         3b:9e:04:d9:20:56:aa:e9:35:b3:ed:b4:af:8b:d2:0a:a6:08:
         19:05:55:ab:ec:cf:ba:6d:75:05:b7:98:dc:02:2d:ea:d5:5f:
         78:92:62:aa:78:f3:97:33:f8:54:e9:7f:7d:86:98:7e:04:4b:
         71:2e:d3:02:33:2c:d0:8f:1d:7b:60:20:bc:b1:9a:10:83:ae:
         ab:7c:be:af:6a:b9:a1:0d:44:9e:ba:4d:69:70:11:bc:d3:21:
         b4:a8:58:d4:98:1b:12:34:b6:ae:51:fa:d9:e5:ec:92:a6:fa:
         e0:25:d1:71:44:28:a3:f6:a8:2a:62:97:99:cc:cd:96:62:24:
         a9:2d:2a:26:7c:ce:24:21:40:b5:8c:20:9f:c2:35:1d:97:03:
         56:b1:7e:93:e0:8b:b1:71:fc:ac:ac:d0:56:10:be:51:8d:ad:
         88:0a:43:f3:41:85:93:be:b1:50:cd:83:d5:87:f6:4d:9c:28:
         e5:d1:ec:79:7b:b9:37:de:1e:f9:38:85:1c:16:28:cc:79:47:
         fd:e0:e9:e5:17:a0:b3:d1:31:d3:42:4d:05:9b:c6:02:d1:c4:
         0c:5c:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:21:54 2025 by rpki-client