Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33bc6ea1-b811-3d41-9903-3c6986dedc5c.roa
File:                     33bc6ea1-b811-3d41-9903-3c6986dedc5c.roa (raw, json)
Hash identifier:          AonkxVxC2Qp6B+gpY4512v7qQ2W5Y0wS0MSmqZz7AFc=
Subject key identifier:   27:36:02:3B:CA:02:6E:02:9D:1F:DC:AF:6C:17:FC:23:96:28:F6:88
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD4A0F438153A82844480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33bc6ea1-b811-3d41-9903-3c6986dedc5c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        76.38.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d4:a0:f4:38:15:3a:82:84:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1cdeef3c-3801-4a5e-aeec-da52abba736b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:78:8a:65:96:64:dc:6b:b6:77:bb:24:c8:fa:
                    13:3f:de:86:7f:20:f5:86:84:3a:05:32:8d:dc:83:
                    db:40:da:29:25:4e:73:14:c9:34:81:27:24:89:b3:
                    e0:f7:e0:4a:93:23:b9:f7:5f:ec:60:1b:3b:82:30:
                    eb:09:a6:7a:b1:ec:12:9c:fc:f1:00:62:af:9e:3c:
                    2c:b6:41:a8:d3:a6:84:c6:44:59:5f:0e:70:cf:58:
                    a7:54:1c:9c:18:4f:e0:14:70:bb:9c:00:75:ec:3d:
                    e8:99:ad:b9:10:5c:e5:3a:54:95:60:c0:d9:a1:be:
                    0d:9e:8e:64:a0:f5:10:80:f0:bc:46:71:90:ac:b9:
                    13:4e:c5:84:f7:fc:b6:21:0d:da:64:bd:38:ce:dc:
                    1f:cf:87:3d:44:ef:48:d1:10:67:93:61:ab:fd:ce:
                    ff:6a:e9:19:db:7f:2f:d3:13:e5:05:52:23:34:ac:
                    8f:56:65:6d:ee:9f:c5:7b:b6:26:a1:c5:ab:5a:59:
                    68:9e:26:cc:dc:50:e5:f6:e3:eb:d2:40:cc:6f:56:
                    37:d3:99:25:ea:e7:3c:a9:80:33:9d:44:df:f8:f3:
                    40:e2:a1:d0:b0:8b:c2:df:ff:ec:20:34:e0:8c:1a:
                    16:72:e2:21:93:cf:8a:3b:ae:2f:e1:3b:ac:b2:f4:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:02:3B:CA:02:6E:02:9D:1F:DC:AF:6C:17:FC:23:96:28:F6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/33bc6ea1-b811-3d41-9903-3c6986dedc5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.38.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e7:e2:52:4d:93:9d:fd:5a:f7:54:b6:83:64:af:ae:c7:dd:
         fa:54:80:8d:78:d3:b2:ba:14:0b:d9:e7:50:63:c3:84:2e:3f:
         a4:83:bc:b2:4c:03:1e:a7:ab:37:0b:a4:1a:da:fd:f0:a1:88:
         7d:0a:bc:ee:c3:11:59:d2:ab:ec:cf:1b:1c:57:8a:ed:29:4d:
         e2:ab:08:ee:48:f2:cc:c2:f2:8c:5f:ef:fc:b2:dd:b0:72:73:
         dc:ab:5b:05:0e:46:8e:56:f4:51:42:11:eb:41:48:91:3f:4c:
         19:66:fc:95:6f:27:74:52:ea:ed:f2:4b:52:fc:57:c3:f9:01:
         13:d2:c8:94:c9:49:35:1f:47:d5:2e:0a:b1:00:46:a8:9a:82:
         cf:b1:8e:3b:f2:e9:a7:f6:e0:50:69:94:a4:85:23:17:5d:e6:
         6a:c6:8e:97:72:16:f7:c6:93:d0:98:30:49:1b:be:e3:3b:79:
         8b:1e:30:90:4b:df:b6:ba:9b:9f:42:81:b8:9b:c9:50:23:f9:
         d5:66:d2:20:f1:4a:2b:44:1b:e6:6e:78:68:bf:aa:25:60:f9:
         53:6c:f5:47:a7:2f:91:b0:4f:ef:92:ef:c1:8c:3f:52:09:37:
         c8:55:71:71:19:34:b1:54:98:91:1a:36:72:af:95:20:15:9d:
         21:31:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:27:35 2025 by rpki-client