Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
File:                     d4270aa3-b47c-3342-a435-e6733dda251f.roa (raw, json)
Hash identifier:          0ZDRYDBBRbxZrk8CcftxkX7EXDM2z1jYnNExwWcl7UA=
Subject key identifier:   2E:71:D8:90:8D:D8:79:91:DD:AC:5F:01:9F:4A:D6:F7:A6:86:A9:6F
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BAC898B78331D51A002B00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        172.102.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c8:98:b7:83:31:d5:1a:00:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6e7cfcd0-3537-4c55-87d2-7eb246689e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:8b:17:86:47:cb:22:53:e2:1d:05:c9:4c:
                    38:69:73:ec:e0:48:5f:65:32:da:b8:ba:54:15:71:
                    fd:42:b9:28:4d:7a:01:c0:b5:e2:e2:19:f0:8b:3d:
                    d0:49:9f:55:63:ee:2d:f0:c1:82:e7:5c:91:8c:49:
                    e5:81:43:17:41:05:60:99:64:3e:e0:61:52:53:97:
                    76:df:32:f8:34:f7:fa:ab:b3:41:a8:fc:6c:08:92:
                    b1:59:79:59:4b:90:81:a8:fe:90:fc:9e:e1:62:38:
                    05:0a:85:97:ef:36:6b:af:a2:5e:4f:5f:71:02:d8:
                    00:e1:dc:9f:ac:84:65:53:96:eb:8f:f2:52:4d:63:
                    ff:b3:40:93:ca:29:11:4b:ce:42:6c:4d:df:a2:0a:
                    60:42:04:97:e6:44:c4:07:86:c2:b2:28:2c:3b:f0:
                    89:13:a5:c9:ca:54:c7:8d:54:c6:28:3c:2e:37:0e:
                    e7:a3:90:98:fc:51:4c:37:cf:b0:b1:e1:00:73:4d:
                    e8:e4:3e:26:b3:84:6a:15:4c:66:87:c8:7a:2c:39:
                    b0:47:c0:fc:a6:df:c6:14:8e:47:e7:74:18:0b:4d:
                    8a:2e:c7:61:38:c1:a7:d2:9d:24:86:25:ac:89:7b:
                    78:82:09:7a:9c:98:10:34:3a:06:48:ec:92:20:6d:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:D8:90:8D:D8:79:91:DD:AC:5F:01:9F:4A:D6:F7:A6:86:A9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:45:6b:3f:e8:d2:fb:f7:98:7e:f6:c5:b0:7e:89:d2:99:e0:
         08:a9:ff:86:68:91:a7:34:59:ce:c3:7e:e7:26:9a:eb:96:15:
         f9:38:59:8f:7c:ac:79:a5:6e:1c:9a:33:3d:86:2e:8f:ed:88:
         f5:ba:db:28:49:1c:d5:e1:5b:93:07:4d:f0:e9:55:bc:0b:fc:
         0b:4f:76:c5:32:7b:34:5d:ea:a2:37:6e:c2:f9:14:33:fc:6c:
         98:87:01:60:e9:08:8f:58:24:d1:b5:36:96:a2:a5:05:04:0a:
         23:8e:0e:c2:58:3c:d9:f1:e6:64:08:bf:85:77:bd:f4:54:b8:
         40:4e:77:5a:26:45:a8:68:4a:93:02:fc:84:3c:09:4d:3c:31:
         f4:93:2c:cd:49:65:86:7a:23:2d:04:73:c1:4a:d9:e6:5b:6a:
         18:65:a1:9e:46:2b:78:1a:24:50:1d:9d:83:ad:8c:61:04:e0:
         42:d1:21:db:db:65:07:41:af:69:f2:cf:e9:a1:2d:39:23:df:
         31:1e:b2:dc:e5:0d:42:92:dc:b7:82:ec:3e:c6:dc:12:e3:5d:
         09:a1:f2:85:8f:fe:03:c2:7c:73:b2:2f:7c:47:32:5f:a9:d1:
         84:80:4a:4e:16:c3:60:39:55:19:7b:0f:3f:90:74:e5:5f:c9:
         bc:f3:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:26:41 2025 by rpki-client