Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
File:                     1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa (raw, json)
Hash identifier:          wwKDXclKeo8yvFFN/quwfhNo0GvX2Wz/19h3eLUt6Hs=
Subject key identifier:   23:0D:04:A8:A4:BE:95:D8:81:C6:FF:DD:D5:F1:54:7B:D7:00:82:0A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE2AC1EFF4E164D11DA20
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        64.183.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e2:ac:1e:ff:4e:16:4d:11:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=27c60ecd-a2de-477e-ab4b-44d8718fdae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:97:12:6e:e5:bb:60:82:41:7a:2f:5c:82:
                    72:94:9a:2b:45:d8:86:31:98:00:d7:5a:5d:60:d9:
                    b9:84:18:be:6d:41:88:a1:b3:57:b6:cc:e5:31:10:
                    4f:fb:8f:2f:72:8f:02:75:91:d8:2e:92:c6:41:0d:
                    16:4d:46:bb:2d:56:16:89:76:ce:a8:36:ee:88:76:
                    f5:63:98:cd:25:95:c7:ae:31:de:26:f8:16:1e:61:
                    7a:0a:be:28:23:3b:c8:71:24:a2:c6:10:59:74:93:
                    62:66:1d:89:6b:45:7f:07:33:6e:29:0a:72:c8:74:
                    9b:b3:8a:bb:f2:b6:0e:c9:d7:2d:44:fd:78:23:9c:
                    3d:7b:27:c1:4d:8d:13:46:65:0c:4b:bb:3c:6c:dd:
                    37:97:70:11:41:aa:bf:27:15:d7:fd:8d:ec:6f:2a:
                    91:bc:81:74:1b:05:06:56:5e:31:21:cd:db:af:c8:
                    3d:1a:37:12:d1:63:ae:fe:03:d7:42:0a:02:ba:3c:
                    64:58:d5:fe:3a:90:2f:77:1f:a9:65:16:76:2c:59:
                    48:33:a6:30:3f:a1:5c:e6:bc:07:08:d3:8a:5b:0c:
                    fa:00:ca:51:eb:ff:0c:b4:77:d4:92:18:51:3e:4e:
                    23:51:8b:24:3d:0c:90:d2:25:f7:dd:d6:d6:c9:7d:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0D:04:A8:A4:BE:95:D8:81:C6:FF:DD:D5:F1:54:7B:D7:00:82:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e9:60:10:be:ce:9d:e6:fc:d8:e4:04:21:3c:40:c8:23:27:
         2e:d3:e1:02:e7:60:80:b3:5a:75:6b:45:51:93:48:43:ce:a6:
         71:86:1f:7f:e9:66:a6:91:35:5d:a5:23:4d:ae:bf:d5:2a:9b:
         28:05:5c:cb:fe:4f:72:37:93:86:42:1b:df:3d:50:d6:cb:a7:
         a7:14:5b:5d:af:3c:cc:c8:c7:7b:97:a5:ec:e8:38:12:a6:b6:
         4a:df:0d:0f:ba:82:6e:d3:e4:d9:55:b0:77:26:cd:e8:a3:aa:
         37:09:4b:00:3c:59:ac:3d:97:81:d4:07:bd:a1:8a:ce:ef:e6:
         61:80:72:32:74:9b:5a:c8:4a:6e:f7:7d:a6:c4:76:66:e6:d0:
         0b:c6:82:00:e1:d1:4c:8b:d8:b3:d4:c9:68:19:55:1c:42:9b:
         05:ac:eb:ff:90:ce:bc:a6:e4:e2:7d:7b:81:d1:be:e8:c6:fe:
         17:51:90:e9:1a:51:d9:e9:57:8e:27:f7:13:1f:6b:8b:ae:ca:
         16:4a:0d:31:40:e2:14:fe:c6:5f:10:68:f5:09:fa:ee:dd:7e:
         5f:72:2b:74:e0:aa:fc:bb:10:44:c4:ec:14:90:12:75:cd:06:
         30:38:54:e0:19:8f:9d:46:ff:4b:03:20:a9:e1:e4:fa:58:33:
         9e:2d:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:14:11 2025 by rpki-client