Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20b4871b-55e4-3187-9f85-59ce0defbc2f.roa
File:                     20b4871b-55e4-3187-9f85-59ce0defbc2f.roa (raw, json)
Hash identifier:          ciYJ89iNVo9cE8jfBPXmVuyycW/TGKWIjaaLTxzA9Rc=
Subject key identifier:   43:16:D3:A6:6B:8A:3A:97:71:6C:3B:C8:EF:DA:BD:74:27:5C:7B:B1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AE8914598884921A06829F680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20b4871b-55e4-3187-9f85-59ce0defbc2f.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     0
IP address blocks:        24.31.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:45:98:88:49:21:a0:68:29:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=2b6801fc-71c5-4677-82b5-f5d1c418ce26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:d3:5b:00:3b:eb:00:87:0e:34:66:e9:43:
                    8e:34:bd:03:11:c2:e8:fd:4c:17:2e:10:6d:f4:f6:
                    a8:3c:f2:7f:53:5c:c5:b5:86:02:74:e8:bc:83:f2:
                    e2:af:b7:cd:ee:a8:ca:5f:d8:90:2b:49:8a:82:1d:
                    e2:65:f2:1c:70:20:5b:fd:0e:bd:fe:29:e3:1c:e6:
                    da:a3:81:1d:2b:29:18:9d:e2:97:1c:08:f8:35:c4:
                    22:83:3a:97:e3:a3:00:e3:43:ae:5e:fe:c0:d7:1b:
                    2d:e3:4a:8b:26:04:4a:65:62:b1:7d:36:c0:c6:9f:
                    f5:68:79:08:6d:b4:1e:dd:4a:39:5b:72:27:9e:8b:
                    5e:0b:2b:b0:06:c6:53:a6:17:db:2b:e3:25:07:2d:
                    86:b2:95:d2:70:94:16:8b:7b:2c:8b:ae:24:28:c8:
                    2d:78:0d:b4:ca:ed:72:24:02:90:78:1a:a9:61:a4:
                    bb:9e:6f:5b:88:52:a3:4f:3b:39:d9:10:4e:47:e4:
                    62:25:cd:8f:39:49:2a:6c:f0:94:71:d1:bc:01:05:
                    08:11:60:07:26:71:3c:42:79:d7:3d:3e:ee:62:60:
                    de:08:9a:69:d8:5f:23:7c:9b:d2:a5:2c:6e:80:89:
                    a1:ad:04:9f:54:60:16:84:03:c2:eb:32:46:4c:12:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:D3:A6:6B:8A:3A:97:71:6C:3B:C8:EF:DA:BD:74:27:5C:7B:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20b4871b-55e4-3187-9f85-59ce0defbc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.31.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:63:4a:25:40:b3:15:36:ca:dc:18:df:17:05:99:1f:53:
         b0:d1:a7:9e:fa:00:cf:14:ff:04:c2:84:87:04:60:c7:cc:70:
         28:91:65:f2:04:47:d2:63:21:0b:a7:c4:cc:69:4c:9f:08:41:
         25:a8:c0:65:ed:5e:a4:b3:c7:60:a6:16:21:00:33:9e:31:70:
         46:be:ca:6b:58:be:fa:6e:01:46:b7:91:28:ae:75:1e:47:4e:
         5f:3d:cd:a9:78:42:ef:b9:fd:14:75:84:75:eb:23:29:b6:76:
         be:54:6b:43:6c:a3:fd:66:5a:a1:4d:27:ed:e2:00:10:40:b9:
         a1:b0:ef:45:7c:46:a7:5c:49:7c:b8:24:f5:30:cb:ce:9b:37:
         2e:c6:a1:4b:4e:04:1f:19:f8:20:bf:09:b7:fd:67:60:58:18:
         49:f5:b6:34:bd:b2:22:0e:62:5c:61:af:f7:07:2d:a1:d3:77:
         50:5d:8d:77:96:ed:ba:b6:c6:14:a7:db:3b:e4:38:c6:c9:ca:
         96:89:ab:e7:31:ac:ad:e6:08:fa:ab:12:ef:af:18:47:3b:07:
         7f:93:b3:23:c2:e1:dc:39:61:d1:14:1a:cb:61:24:da:52:7c:
         d7:44:60:f1:20:54:96:cd:3d:f9:2e:d5:05:90:11:49:d5:ab:
         26:de:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:27 2025 by rpki-client