Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25f2378e-5e6e-361d-bb31-8f10807acb70.roa
File:                     25f2378e-5e6e-361d-bb31-8f10807acb70.roa (raw, json)
Hash identifier:          y0CB9TsU2UnJ3U/NY6e7aIKtMAdE2DFvadCCkfwnhQ0=
Subject key identifier:   85:9D:9E:1A:84:B8:DD:EA:CE:1F:44:29:E0:8F:FE:58:0D:F7:29:03
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A495839089A7267F87A40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25f2378e-5e6e-361d-bb31-8f10807acb70.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        67.53.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:49:58:39:08:9a:72:67:f8:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=07d6c213-79e2-42fd-8307-f10f1c342e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:06:3d:f7:52:af:17:09:02:a8:9e:fb:aa:
                    e2:1d:35:63:ce:7f:0f:8b:34:27:b9:d8:54:39:f4:
                    4b:7d:f2:fe:28:f3:92:c5:d9:1b:8f:cb:21:82:d9:
                    c9:4e:eb:c1:56:aa:4f:60:f5:87:31:b5:0a:5d:41:
                    b2:47:8e:06:62:29:b3:35:17:7f:6a:a2:74:2a:4d:
                    08:fe:f8:cd:80:62:f5:7a:f6:e5:b5:5c:97:b5:d5:
                    73:74:3c:b3:1f:bf:dc:2f:fe:2d:c1:ce:76:09:aa:
                    38:10:3d:ef:5e:ce:43:40:f4:99:c0:2d:c8:01:61:
                    75:15:7c:03:a3:7e:2e:73:39:6d:0d:d3:9c:c4:fa:
                    bd:cb:6b:39:b4:93:f9:e1:7a:6e:e3:71:34:7c:28:
                    38:9a:e7:f3:6a:24:32:7c:f2:54:81:94:92:b3:ef:
                    a6:1e:c9:99:95:49:c3:94:f1:59:49:12:38:23:39:
                    46:2e:3f:d2:18:0f:c0:35:48:f1:c4:7f:95:1d:17:
                    c7:46:98:db:1d:17:83:2f:a5:18:c7:16:6b:9f:8f:
                    fe:0d:f6:7b:b7:a2:41:c1:01:48:c2:ef:f0:11:2e:
                    b3:d7:39:68:9a:66:39:d9:9a:45:97:ae:17:23:19:
                    49:02:74:a5:37:45:28:d7:a0:03:6b:70:76:ed:02:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:9E:1A:84:B8:DD:EA:CE:1F:44:29:E0:8F:FE:58:0D:F7:29:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25f2378e-5e6e-361d-bb31-8f10807acb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:b2:28:87:eb:25:32:f9:c4:c3:1d:4d:c2:e6:15:b0:86:
         18:e7:11:75:16:03:87:f2:77:06:7b:b6:53:22:2f:02:1d:dd:
         f8:e9:d0:18:b7:d7:ae:c2:b9:c6:5e:c7:60:e6:72:29:5c:51:
         0e:8e:42:ea:0f:41:e0:0c:13:03:c8:f4:58:4b:68:c8:a0:a5:
         2e:e6:5f:98:50:2f:29:6c:03:7f:6d:f3:ed:e3:c9:9a:a0:bf:
         a0:67:6c:82:38:22:67:d7:40:1b:7f:8d:06:20:dc:49:cf:fc:
         ea:06:26:d5:87:30:1f:44:04:91:e5:dc:56:ed:19:fb:e5:ff:
         7b:89:5e:df:03:cc:fc:8f:8b:76:c0:f2:b0:61:0f:3b:b6:c2:
         08:b5:92:db:5f:de:e3:be:c1:15:b0:75:c5:3f:13:9b:53:ea:
         c0:63:dc:63:c8:cb:5f:5e:01:98:c2:d0:d0:a9:cb:35:70:a2:
         af:50:95:06:fb:32:6a:0b:89:91:20:06:64:81:04:cd:d5:99:
         73:fa:af:ba:af:6e:a4:d1:1e:ce:f7:04:42:ed:63:fa:c2:84:
         0c:bb:7a:0a:9c:61:d2:71:ed:f5:f5:0a:22:49:22:fd:f8:cb:
         89:dd:21:62:cf:55:e3:81:8f:2c:01:4c:e5:a8:06:c1:3a:2c:
         16:56:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:21:10 2025 by rpki-client