Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237301fb-69af-3b20-8ac0-9b32584f9400.roa
File:                     237301fb-69af-3b20-8ac0-9b32584f9400.roa (raw, json)
Hash identifier:          4BsuYq90gl2KJte+4JFxuDgfrLbm8Lfd+kGhmJQzSwI=
Subject key identifier:   AB:C6:98:FA:17:AD:9C:25:F4:C2:14:0A:BE:AE:E8:6B:FE:55:92:C8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A5DFED09EDB9BEBADCC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237301fb-69af-3b20-8ac0-9b32584f9400.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.169.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:5d:fe:d0:9e:db:9b:eb:ad:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f4a4b3a9-2a12-4130-a61b-824bfe0e727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:24:ca:43:a8:54:c5:7a:5a:3c:d8:0a:66:
                    3e:18:71:a3:0c:9d:eb:8a:36:8e:d7:40:89:40:be:
                    53:94:2d:e6:e7:17:ab:1a:c9:49:20:fa:c1:76:fb:
                    b0:48:ee:64:9c:e4:e0:d0:0b:a4:f5:43:75:d2:b9:
                    43:4f:7e:d6:b8:b3:d7:c3:29:43:9b:07:bf:55:b3:
                    29:36:7f:28:7a:f8:bc:f6:25:75:b2:1b:49:20:48:
                    76:4b:be:ed:d4:63:18:c7:33:f2:78:44:d7:a9:b6:
                    5c:83:1b:7a:17:50:85:3b:66:ce:12:93:90:8c:19:
                    bd:a4:cc:e7:dd:40:66:b7:71:fb:b0:7b:d7:bf:27:
                    34:53:6b:84:ef:6e:4b:1c:fa:b1:62:09:85:a0:65:
                    a9:cc:d7:58:d6:8a:52:a2:b4:0d:44:a5:f9:c1:d0:
                    c8:17:53:15:64:60:cd:0a:e3:e9:d0:de:39:f6:29:
                    b4:91:da:ed:45:b7:6e:16:1e:14:1b:e6:25:d1:5c:
                    a5:29:92:45:60:b6:5b:e7:a2:bf:4c:1d:11:4a:49:
                    7f:5a:fb:27:80:0e:6d:79:ac:ba:59:d6:a5:40:0a:
                    a6:86:73:b8:09:d4:59:a4:c7:d8:b6:da:a9:d8:23:
                    6f:15:5f:e6:04:c1:8d:24:c7:72:79:e9:bb:bc:a9:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:98:FA:17:AD:9C:25:F4:C2:14:0A:BE:AE:E8:6B:FE:55:92:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/237301fb-69af-3b20-8ac0-9b32584f9400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.169.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:92:ef:81:de:eb:ae:4f:c2:16:f5:f8:6d:71:d3:68:f2:b1:
         71:11:70:12:b2:29:f1:3a:b2:cc:26:30:b7:96:36:7a:28:de:
         d6:3a:bc:d8:68:6d:ba:8a:f5:15:17:f6:ae:95:34:03:b5:bf:
         a6:71:21:5f:52:5d:39:e9:d4:3a:65:a4:70:76:bc:b6:12:96:
         9a:f5:dc:a7:4b:0e:28:db:4f:43:f1:49:73:6b:0d:f2:60:ee:
         4e:2b:d5:fc:bb:2e:0b:9e:f7:87:79:43:26:65:dd:3e:02:ba:
         f4:32:ac:ca:5e:1a:be:10:02:29:31:cb:c8:ae:c2:7f:a9:5b:
         8a:99:03:92:68:c2:07:9e:34:fc:3f:e3:0e:db:3a:03:5f:a2:
         55:39:72:5c:ef:76:60:d4:1b:51:af:52:7c:94:a8:25:43:f7:
         12:d4:94:ac:d2:e2:90:3f:8f:56:ed:ac:0f:30:c2:0d:03:7c:
         c1:6b:72:e6:73:12:3a:6c:b8:c6:4a:fa:10:10:de:ab:6c:85:
         1f:32:71:15:66:e2:7c:11:8f:d0:e7:91:c0:aa:96:1b:25:39:
         33:83:36:90:5a:b3:16:2b:b9:73:55:6c:ce:54:38:d7:e3:d8:
         70:5f:37:59:e4:54:1d:7c:5c:2c:39:3e:b4:90:b4:f6:46:aa:
         e8:bb:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:17:45 2025 by rpki-client