Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d4dda8a-b9df-3463-8a2f-7023f31171e0.roa
File:                     1d4dda8a-b9df-3463-8a2f-7023f31171e0.roa (raw, json)
Hash identifier:          Ds40cwe5bWFHV91KSkTiEboXM7fxqIDx9V+ie9IVaKE=
Subject key identifier:   CD:F1:C7:B5:7A:BE:56:DA:3E:AD:FD:E7:5C:1A:1A:A8:F5:7E:E0:79
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD613B51E6A868C754D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d4dda8a-b9df-3463-8a2f-7023f31171e0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        68.207.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d6:13:b5:1e:6a:86:8c:75:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=be85b7fe-75fc-4f16-8321-44026bde05c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:0f:83:a1:9b:66:a5:ae:1f:e2:38:22:36:
                    5e:27:d5:97:29:51:48:db:f0:96:2c:bd:45:f5:f9:
                    5f:0c:30:1d:04:f5:eb:f9:23:17:68:90:0c:7a:40:
                    9c:98:47:96:6f:29:89:af:32:fe:11:5d:de:93:7e:
                    5c:bb:52:a8:66:89:76:0c:8c:66:ee:f1:8c:36:f5:
                    85:2c:3b:dd:ef:93:13:f6:af:02:c4:39:a5:5f:b5:
                    7c:8e:3c:1b:4b:45:e9:22:22:32:94:d5:50:71:f3:
                    2b:54:b0:d1:b6:30:2d:3a:33:f6:c1:09:e6:02:98:
                    61:ad:b3:16:ef:1d:c5:24:3b:c2:ec:79:5b:f8:8a:
                    ca:82:3c:27:ad:47:66:48:16:d6:9d:96:8c:19:ff:
                    c4:c4:e9:b5:d0:39:9c:f6:e3:77:a2:17:8c:36:38:
                    19:43:73:11:2d:f3:ed:14:95:c7:48:68:9c:6a:b3:
                    88:7d:5f:aa:17:0c:39:b2:0b:ff:9f:87:95:c9:bb:
                    65:35:2f:b8:b3:64:d1:71:2e:fc:17:09:23:3f:bd:
                    6e:15:87:1b:ef:a7:92:e2:c2:2a:88:a6:bf:c6:b2:
                    af:33:87:8c:1e:54:9b:6d:57:15:d9:07:04:c0:cd:
                    3c:e1:ec:b8:e0:32:92:69:2a:76:2c:26:2b:aa:da:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F1:C7:B5:7A:BE:56:DA:3E:AD:FD:E7:5C:1A:1A:A8:F5:7E:E0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d4dda8a-b9df-3463-8a2f-7023f31171e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:74:a1:14:c6:39:25:9c:c2:cb:eb:b8:c9:7b:f1:e5:bc:
         62:73:93:44:4d:db:d6:92:89:28:ca:27:8b:d3:fc:75:64:8e:
         bf:85:07:ea:bc:04:27:69:39:46:c1:ae:c2:a5:c4:81:5e:1c:
         0f:8a:be:a4:b0:b4:fb:02:9e:28:2c:b7:2c:1d:21:fa:cd:d7:
         51:52:d8:d1:3c:13:78:10:22:9e:be:7a:10:4c:95:86:71:33:
         f4:06:b1:47:60:68:a7:b4:40:3f:f3:01:d2:e7:f0:70:13:2a:
         29:e1:b2:52:9c:a6:3b:1f:2e:33:4a:3a:50:5b:10:56:e7:d7:
         4b:ab:67:39:b2:9b:ba:57:8f:e5:0c:a8:74:24:e9:b3:59:cf:
         aa:c6:e2:aa:64:61:95:68:32:6f:8c:7b:4b:93:5a:64:fe:7d:
         67:c9:f5:f4:c8:b7:4d:67:ba:0e:9d:4a:31:ca:b9:20:0e:56:
         93:ec:6d:43:41:c1:18:03:b9:b1:87:6f:fd:82:e4:ee:f5:db:
         3d:6b:97:b2:ce:66:e5:19:53:70:0b:47:82:cd:9b:d9:10:f9:
         66:70:3c:d4:f3:da:e3:25:ac:6b:59:78:4b:3a:b3:aa:32:5a:
         da:66:79:38:77:83:50:e0:6f:f6:b8:46:66:ee:86:5b:09:02:
         9b:55:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:38 2025 by rpki-client