Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
File:                     0a8fc802-9e58-3fa1-be39-940fa9664733.roa (raw, json)
Hash identifier:          SFjJ78FuOonsYe+Cc567oz3ej+NgMDRk/hzYL820CRM=
Subject key identifier:   7C:D5:FE:C2:C4:EA:38:88:21:8F:D1:6E:27:BC:C5:89:BF:E3:D1:27
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD5C26C58EBA4603C8100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        24.160.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d5:c2:6c:58:eb:a4:60:3c:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3190e3ba-4328-44ed-aff6-7f0c3a414571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:f7:25:57:0c:78:b3:fe:16:7b:42:0b:79:
                    67:cd:30:bc:8a:f0:1c:f1:08:4d:0b:b7:ba:42:9f:
                    b4:ce:67:e6:bc:dc:40:96:02:10:3a:eb:b0:45:26:
                    85:df:90:6b:1b:d3:40:02:1b:25:f2:24:b2:70:9b:
                    d7:99:40:9d:c0:65:63:51:7c:46:5f:ab:8e:a6:32:
                    c3:33:73:3a:ac:32:e9:7e:13:28:2f:6c:09:fa:9c:
                    fb:fc:87:1d:18:6f:95:4d:0f:0e:7d:79:44:b0:a0:
                    ae:87:8e:cf:d7:a0:d6:72:8c:12:93:c2:73:3a:e0:
                    16:e3:f4:83:cf:28:0e:6a:26:c4:6f:25:15:da:97:
                    6b:5f:63:ac:bb:44:e1:05:32:5a:82:c8:84:e0:4e:
                    e5:2a:d3:6d:b1:75:db:d6:be:98:4b:54:9b:4c:d8:
                    e8:df:a5:31:73:26:be:37:80:6b:29:61:37:d5:d5:
                    68:63:14:37:79:7a:f8:4e:ec:b3:cf:2f:55:6f:f1:
                    28:3e:15:4b:b2:18:46:5b:44:b9:0e:68:82:a0:93:
                    82:ab:44:ec:d0:8c:74:8b:38:f3:81:5f:e1:90:68:
                    2b:2a:29:87:57:3e:2f:f1:46:44:2e:0d:3e:43:d9:
                    6f:f2:38:36:9b:d9:d6:0b:2f:e9:08:52:62:9d:5e:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:FE:C2:C4:EA:38:88:21:8F:D1:6E:27:BC:C5:89:BF:E3:D1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a8fc802-9e58-3fa1-be39-940fa9664733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:c4:89:34:85:af:20:cc:8a:7c:19:72:94:10:da:65:b0:
         20:60:41:0f:28:03:dd:02:02:ca:28:69:1a:05:63:1b:2b:10:
         cb:75:8f:a4:77:51:7e:09:8e:90:5d:0d:33:f7:c8:5e:6f:76:
         1d:07:69:c9:10:e1:22:40:ae:42:86:f6:34:d5:d5:5c:97:61:
         7b:aa:d9:69:05:3d:08:05:1e:b8:de:6e:fa:ee:a3:d3:c4:93:
         de:c3:12:ac:e3:c3:e5:ee:b1:1e:e9:46:f1:d9:33:83:bb:28:
         28:aa:6b:84:9f:bc:f7:47:e0:9b:a2:cd:62:4d:4c:0a:71:9e:
         da:8d:96:a7:f2:a6:7c:c9:54:16:a4:fa:1f:0a:f2:78:f5:44:
         e9:c4:34:34:32:78:7c:55:6d:30:40:ac:33:13:b0:96:00:d0:
         9d:94:2a:82:e3:7f:51:c3:dd:a0:26:d1:7c:fb:80:4a:df:ee:
         8e:c8:65:fc:cb:c1:57:a6:92:4c:b4:78:63:be:c0:8e:d9:9e:
         fe:09:8a:27:37:01:f0:7b:27:ab:64:b7:4e:8a:6b:d8:32:73:
         83:24:a8:47:84:2c:8c:88:0e:b8:d6:ac:cc:e7:0e:d4:a9:52:
         fe:82:b4:fe:65:bc:1c:cd:19:64:93:e5:53:14:bd:f0:ad:f9:
         fe:7e:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:40:06 2025 by rpki-client