Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19ab8cbe-b2a0-31d7-a333-83a1a0f80d55.roa
File:                     19ab8cbe-b2a0-31d7-a333-83a1a0f80d55.roa (raw, json)
Hash identifier:          n8cioM4n2Fk5rGzjhNtP6RwL0/xNX7st+kH/FDxpK/k=
Subject key identifier:   0B:82:06:CC:AB:2C:2B:32:E0:D1:A0:5A:D4:E4:EE:09:85:6D:8C:4F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ADA17909F8147EA549E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19ab8cbe-b2a0-31d7-a333-83a1a0f80d55.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        72.131.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:da:17:90:9f:81:47:ea:54:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e7984439-5e20-47e6-8192-c38144f426ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:54:3e:f9:18:87:04:7d:2b:46:6a:59:ae:
                    e8:f6:ee:64:e6:22:3c:5c:6c:0b:35:ff:cf:4e:f1:
                    1e:b9:0a:2e:87:24:18:80:a5:1f:7d:28:04:91:c3:
                    23:dd:aa:aa:7e:86:b8:10:e8:bf:77:14:08:6b:c4:
                    ac:8b:ba:aa:e6:6b:2c:49:4d:40:be:b3:4e:31:33:
                    23:a7:33:87:21:88:f7:c2:60:70:cf:98:91:b9:ee:
                    cf:79:5e:02:c0:34:a7:01:e6:03:00:6b:ae:f2:2f:
                    41:7e:f9:a6:85:86:6b:65:54:e0:55:a4:59:42:41:
                    96:b9:0e:64:00:40:02:63:87:ee:cc:66:0d:68:7f:
                    9e:75:7a:ae:37:c4:52:18:31:a8:3a:d1:16:c1:46:
                    ac:3b:9e:12:ea:28:26:3e:fc:81:7b:0e:49:6a:4e:
                    a6:5d:23:7b:47:82:bc:eb:01:e0:0f:d0:c7:66:75:
                    ea:9e:00:a5:10:96:c8:af:b4:06:d3:77:78:c3:cd:
                    61:62:73:da:da:9f:d0:2c:12:f6:7d:f4:62:4c:6c:
                    ca:2a:bf:68:71:de:c0:67:42:3c:ed:ed:ae:d1:db:
                    eb:6c:af:eb:de:24:24:6c:5e:85:d1:28:92:f0:eb:
                    1a:b2:b0:27:36:00:d3:f3:3f:3c:48:44:c8:fb:db:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:06:CC:AB:2C:2B:32:E0:D1:A0:5A:D4:E4:EE:09:85:6D:8C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19ab8cbe-b2a0-31d7-a333-83a1a0f80d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.131.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:ba:47:04:13:b1:9b:73:f2:98:39:0e:bd:5c:2c:f1:e3:
         7b:4a:83:ba:26:74:3b:09:54:5d:a5:9f:11:02:86:c8:41:09:
         48:b1:55:44:83:54:32:e1:a3:9a:a5:53:6b:37:58:2b:57:75:
         21:75:26:6f:2b:c0:a9:9b:8f:9b:2a:8f:44:15:1c:e3:78:f3:
         48:c9:a2:2b:0a:63:b7:07:6a:11:3d:ea:4f:a2:8b:fb:2c:bf:
         27:e6:e8:fe:de:78:a6:81:03:c3:27:1d:4e:db:aa:8b:9c:5e:
         f3:56:93:3c:45:69:91:7d:30:63:11:1c:8d:ca:cf:48:31:7e:
         e2:13:1f:6a:05:f9:b9:70:eb:33:eb:78:d1:00:be:b5:90:34:
         93:19:86:f5:98:8c:f4:46:40:12:32:08:57:bf:b3:b9:23:d9:
         69:c0:ec:e6:64:5c:7c:e2:4e:e5:23:2e:f2:4c:8e:a7:6f:a0:
         f6:b7:d4:15:b0:e8:b9:20:5d:46:00:bf:ba:5d:85:c2:45:28:
         be:e1:d0:b2:05:57:51:53:d7:6c:89:7e:ed:53:78:2e:d1:79:
         17:1b:3e:8a:bd:39:c4:5c:7b:c3:8a:0d:99:b6:1f:a5:b3:26:
         50:1a:d7:20:33:a8:75:94:15:d2:68:07:74:d3:8f:a1:d8:2f:
         ae:b3:05:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:35:28 2025 by rpki-client