Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08f81490-b2fc-3fdd-8173-0fcc5b29ee30.roa
File:                     08f81490-b2fc-3fdd-8173-0fcc5b29ee30.roa (raw, json)
Hash identifier:          cyh1pKshVyI7AIJMhrk7rxxHzhGsySwydH/s5Ka1cUc=
Subject key identifier:   CE:DE:D3:8C:F5:0F:80:31:EC:9A:0F:3D:D3:33:96:E9:D0:CA:C2:5F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ACE15D16A5AE2CE9F71A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08f81490-b2fc-3fdd-8173-0fcc5b29ee30.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        104.228.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ce:15:d1:6a:5a:e2:ce:9f:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=66cd466b-e318-4746-b9c5-0d5471a004da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:05:29:05:61:f4:a1:d6:84:cf:2b:46:76:
                    d1:cd:fd:7b:0b:96:bd:74:23:e1:16:50:94:ad:51:
                    70:c0:e7:e9:89:c7:08:17:e8:f6:56:09:35:09:a9:
                    d6:4f:33:af:72:f2:2f:6d:c0:29:17:33:84:aa:31:
                    a0:b4:56:0a:f9:a0:57:c3:db:ce:58:d2:73:89:9f:
                    a0:0b:0b:a8:b8:39:1f:46:a6:09:32:cf:a5:f2:29:
                    d8:2a:c7:b1:15:70:61:36:bc:60:9a:35:c9:ce:ce:
                    91:ff:fc:b9:83:12:df:81:ba:9f:c9:e7:85:ea:69:
                    f1:5a:e4:43:fa:2a:17:d1:42:e2:62:c3:a4:59:aa:
                    9a:f9:d5:3f:fe:ee:98:32:e4:18:35:34:69:23:da:
                    40:74:74:77:1f:b3:a6:10:a1:a3:06:d9:7f:40:0f:
                    e9:0e:02:6e:86:9b:20:96:3f:86:36:ee:0a:97:d0:
                    63:97:2b:32:ae:ae:19:d7:be:d4:ae:c1:fb:6f:23:
                    ff:97:a3:66:01:3d:9d:ee:c7:0d:bc:07:ae:8d:4b:
                    6a:4f:d7:7b:79:c3:90:c7:22:4e:37:9f:45:bf:5b:
                    74:56:0c:c6:88:ac:08:aa:af:44:3c:28:d7:28:51:
                    b3:c9:4b:1e:b1:c6:8c:38:77:33:79:d1:de:9e:ec:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:D3:8C:F5:0F:80:31:EC:9A:0F:3D:D3:33:96:E9:D0:CA:C2:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08f81490-b2fc-3fdd-8173-0fcc5b29ee30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.228.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:8d:4b:b1:8a:9c:03:18:95:fd:d5:da:8b:ec:27:2f:06:
         ac:d5:dc:64:af:ab:bf:9e:7c:51:8d:55:6d:63:ea:d0:ca:12:
         0d:e9:63:3b:eb:fa:76:b4:38:f8:05:ad:e8:09:69:62:23:e5:
         ca:ce:90:98:b0:4b:2d:8a:c9:44:7b:0b:69:e8:26:9d:e9:87:
         c9:4f:d5:1f:59:b4:9d:ca:44:0d:b8:d8:d8:3b:e4:7b:d2:89:
         cb:cf:54:02:61:b5:da:b9:4e:09:09:93:2f:ed:89:d8:ee:0a:
         1c:e2:6a:b8:67:fb:b4:d4:df:7f:2a:28:5b:8b:44:e8:50:51:
         d6:5e:8c:6e:e1:4e:9b:44:3f:5c:ac:0c:07:b4:23:cd:8e:98:
         4f:9c:3b:23:21:b2:20:ea:81:cb:a1:c8:ec:44:39:18:9d:22:
         da:b8:81:9e:ec:6a:e0:21:0e:90:6d:70:fc:be:0d:51:7c:36:
         9c:a2:46:d7:2d:77:b7:51:cc:9c:83:be:7e:38:38:7e:57:df:
         ce:bc:3b:ac:a5:8d:bf:91:93:f2:c5:62:f0:d1:e5:9f:17:d7:
         c0:ae:0f:e2:b5:3a:a5:ee:54:18:72:2e:58:dc:03:e8:64:75:
         b1:32:a9:9a:92:d5:dc:87:38:33:cb:dd:dd:46:01:ef:00:1f:
         03:dc:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:52 2025 by rpki-client