Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5b590c01-8a39-3dfc-a985-43197c6e98c9.roa
File:                     5b590c01-8a39-3dfc-a985-43197c6e98c9.roa (raw, json)
Hash identifier:          pGTB6BbdmkWFxu0lgQ3BW9765wsS2enA1VxhcjJWELQ=
Subject key identifier:   AA:3F:A4:19:ED:E8:89:AE:2E:E4:D7:04:3F:BA:C0:96:F2:8E:EE:D1
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829D6E2EFD13E64776B9A80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5b590c01-8a39-3dfc-a985-43197c6e98c9.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     11032
IP address blocks:        207.162.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d6:e2:ef:d1:3e:64:77:6b:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0ef80c4b-95af-4b13-9697-15b20aa0b8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:13:f9:5b:7b:80:2f:ef:7f:9e:00:93:c7:
                    60:3b:70:30:40:85:74:d0:ff:c9:4a:bd:0d:6e:df:
                    d8:c7:ec:cd:68:66:dd:34:7e:c3:71:b5:e5:7d:55:
                    3d:06:da:ad:e5:68:61:09:0a:ce:ad:26:0d:ee:d0:
                    6c:b1:69:2a:0c:b1:ab:b7:41:00:7e:dc:0c:3d:6e:
                    df:af:e7:4f:63:aa:bc:be:1e:93:07:23:40:f0:b6:
                    e5:8c:ad:8f:e6:5d:2b:6d:b8:a4:91:8f:72:20:76:
                    bf:3f:d5:1e:22:ef:30:4d:d7:1b:03:46:bb:79:26:
                    23:b3:cd:f4:80:cd:0c:08:2d:a8:e5:b5:b2:f8:85:
                    b0:e2:57:2b:3a:f5:61:7b:2f:62:26:88:8a:13:53:
                    52:c6:0e:3f:43:56:be:9f:ca:cc:67:c1:70:c2:18:
                    e8:44:1b:1b:d8:03:0e:13:90:7d:bd:3c:b7:fd:eb:
                    db:33:4c:c8:2c:32:ad:e2:36:36:4e:7c:ac:8b:fc:
                    f8:7f:6c:37:bc:92:55:5f:75:70:2c:76:0a:3c:aa:
                    33:57:69:03:f3:fd:f9:17:f4:f8:7f:f4:a9:5f:d9:
                    ad:53:c6:36:09:8e:09:db:b7:b9:6a:05:77:f6:e1:
                    1d:45:9f:01:27:12:c0:10:04:c3:de:ed:4c:54:f3:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3F:A4:19:ED:E8:89:AE:2E:E4:D7:04:3F:BA:C0:96:F2:8E:EE:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5b590c01-8a39-3dfc-a985-43197c6e98c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:09:24:8c:55:28:e3:56:1d:67:d1:28:e7:4f:85:e4:91:
         c5:c5:61:af:73:07:2e:a2:ed:27:59:21:09:d1:cd:47:b4:e1:
         e0:5d:d4:14:be:1c:58:08:b6:0d:f0:65:42:e9:e5:e5:18:fb:
         4d:21:62:db:f6:9b:86:00:fa:a8:b3:ac:7f:44:2d:5c:65:19:
         d9:35:a6:30:f5:cc:4c:03:31:5d:3e:b4:26:fe:63:ca:6c:01:
         cf:95:29:bc:16:38:aa:40:8b:34:8a:33:af:dd:ed:6c:93:a7:
         f8:6c:4e:d0:56:49:cb:d8:7c:1e:f4:4d:67:c7:b1:0f:59:46:
         70:f6:88:75:b2:42:60:43:75:db:27:f9:33:e1:18:96:5a:ce:
         df:e6:44:3e:80:84:4d:56:09:ae:19:b2:7a:91:91:dd:74:18:
         b4:06:04:04:c1:a4:fa:3a:4b:a9:1a:6c:ba:3f:50:1a:b3:11:
         45:d4:cc:19:cf:f8:01:0e:fe:3f:83:d5:5b:77:1e:33:c6:2c:
         4d:4d:e1:1e:13:4d:4f:d0:30:ec:3d:c4:00:20:08:80:ad:0f:
         fa:7a:c4:c1:31:40:6b:6f:48:ed:83:6b:54:7f:fe:b2:bb:45:
         73:ab:47:60:32:84:6c:e3:1e:83:a1:97:1f:03:bb:16:47:a9:
         a5:46:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:11:16 2025 by rpki-client