Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36f1fce8-f05c-33a5-a458-c7c01056317e.roa
File:                     36f1fce8-f05c-33a5-a458-c7c01056317e.roa (raw, json)
Hash identifier:          hHBFjotNqgGHmgVeFLj6jsiQ28RrV6558ZyFY9ENeJE=
Subject key identifier:   68:D7:CA:76:9C:C6:6B:A1:6E:28:45:D0:F4:7C:ED:BA:93:D0:61:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A2FFA646DD81FF8C9A500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36f1fce8-f05c-33a5-a458-c7c01056317e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        71.67.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:2f:fa:64:6d:d8:1f:f8:c9:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=744844b8-9872-466c-912c-362820b3e441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:2e:a3:89:c8:ea:f7:f5:91:d2:0f:1b:77:
                    01:e3:16:08:7e:e4:d0:42:37:a8:bd:21:03:8d:74:
                    11:17:8e:bd:f1:ad:f1:1e:5c:a3:06:c1:5e:be:3a:
                    e4:9e:d3:bd:cc:6b:01:2a:6c:11:a2:1a:24:7c:76:
                    a6:c1:c9:d2:5e:bf:bc:49:91:aa:a0:e0:c2:84:8d:
                    70:3b:89:42:6b:39:0f:14:56:e6:a1:47:21:36:2d:
                    a4:04:41:9c:e7:90:ff:47:8e:39:c7:20:37:cf:be:
                    56:74:30:95:c3:5a:09:e9:fe:42:70:0e:5b:ff:03:
                    ec:59:51:11:ec:9c:59:66:03:3f:f0:f9:e7:8b:59:
                    80:83:ca:a8:5d:70:f7:1b:d1:24:0d:63:d0:93:d5:
                    55:7e:1a:61:02:dd:3e:f9:9a:4f:84:72:d0:32:bb:
                    62:fa:38:57:a9:10:ab:e0:0a:41:59:49:e4:ea:27:
                    78:7c:a4:60:7e:a6:f6:fe:a8:80:56:3c:4f:bd:1a:
                    c1:65:f8:5c:59:87:c4:2e:91:d9:2f:13:be:79:96:
                    a2:17:cb:b2:f2:c8:e9:50:f9:f4:7d:bd:c2:b3:7c:
                    1c:36:51:55:92:bb:74:1d:77:62:b5:d4:a8:be:3d:
                    7b:65:e5:ee:c4:65:66:e6:60:be:76:4c:1a:12:56:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D7:CA:76:9C:C6:6B:A1:6E:28:45:D0:F4:7C:ED:BA:93:D0:61:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36f1fce8-f05c-33a5-a458-c7c01056317e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.67.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:df:b5:01:da:de:ef:3f:95:71:03:b0:f7:1d:7e:df:4a:
         df:2d:07:06:5e:a9:ad:1c:52:f1:f1:f7:14:f1:85:d5:3a:1f:
         84:d0:15:3c:5a:ea:ad:0f:04:cf:bd:b3:b6:f4:be:8c:3d:83:
         54:f3:c6:ce:c0:e7:4e:35:46:dc:0e:43:66:c3:0a:6b:62:5d:
         55:6d:1d:22:14:f8:4f:bc:eb:a8:2c:34:8a:d1:9f:91:ce:64:
         b5:e6:98:89:d2:0a:74:5d:80:69:dd:16:4e:7f:b0:2a:c4:db:
         0d:02:e1:df:ae:0c:0a:87:58:72:e3:d4:11:32:46:27:18:33:
         03:4a:2b:e0:73:7c:c7:f4:5c:72:0f:5b:c5:67:af:02:e5:d2:
         af:04:2f:d6:e5:3c:b7:5c:8d:78:a3:03:15:0f:1f:1e:47:79:
         47:c3:c5:ba:44:43:fc:1c:56:1f:31:d8:ef:7d:8e:59:5c:83:
         05:df:77:12:7a:07:90:10:92:c5:ec:d0:aa:e1:12:73:6b:ed:
         da:9d:2e:93:50:85:18:79:d8:f8:e5:e2:5f:01:76:75:8a:9a:
         d5:64:37:21:b3:e7:a6:17:56:f4:42:3c:1c:97:da:e2:66:e7:
         15:50:81:bc:5e:3f:14:b1:6e:9b:d1:fd:5f:38:c4:f7:61:8b:
         8b:ea:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:02:06 2025 by rpki-client