Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa
File:                     3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa (raw, json)
Hash identifier:          KJ2U55QabWO0J+XQW1kv57/Synw2jbTwBUQB6NjVDiQ=
Subject key identifier:   F5:62:A2:B1:AD:6B:AC:16:90:9B:54:79:A0:AD:46:C9:56:97:EC:83
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AED6D779C60861F7ACA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     40354
IP address blocks:        173.198.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ed:6d:77:9c:60:86:1f:7a:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=0ede3772-a351-4feb-a299-ce3550d1c162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:ab:47:54:28:bd:08:a7:4d:6f:8d:cc:e0:
                    3e:89:f6:bb:59:e3:91:29:4a:1f:22:c9:42:69:05:
                    23:ed:bf:11:87:86:94:97:12:c6:6d:3f:fb:d7:ec:
                    35:55:6a:72:97:4c:30:48:45:5c:33:86:7d:a2:67:
                    57:14:0e:24:b0:38:79:ed:fa:f9:bb:eb:20:bc:0e:
                    86:40:a4:bb:e0:17:44:67:bb:7e:39:80:c8:a1:cd:
                    f1:27:93:4d:e2:17:02:42:dd:84:4c:e5:77:29:8b:
                    fe:18:54:35:39:f7:92:1a:b4:ca:b0:47:8f:3c:47:
                    16:83:5c:91:2e:cd:32:9b:02:39:a4:c9:fb:af:d8:
                    f7:0c:96:95:9c:03:92:c8:82:1c:02:d2:79:17:34:
                    eb:a5:01:be:5e:f5:71:03:6a:5c:35:90:44:72:27:
                    fb:be:79:1a:72:39:73:06:a5:8f:02:30:5b:8e:4b:
                    ab:48:39:4f:1b:8b:0d:52:6d:3d:22:b1:07:5e:c5:
                    fb:46:ee:2d:e6:bf:1d:6d:47:d2:e5:f9:8f:43:4a:
                    b0:3e:5a:41:4e:10:e7:49:88:5b:97:67:a0:80:31:
                    50:42:24:94:e6:05:82:d1:58:79:7f:0c:24:86:01:
                    82:f3:95:c8:86:10:48:dd:6a:8b:a6:e1:b9:3d:0c:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:62:A2:B1:AD:6B:AC:16:90:9B:54:79:A0:AD:46:C9:56:97:EC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a09d4ee-01cb-3905-bdf7-bb034cbb9118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:ab:1a:2e:27:90:65:04:ea:24:8a:84:33:13:f4:3e:e6:
         8a:5f:3d:df:b0:b0:d3:a2:a7:8e:6f:68:ba:33:8f:ac:8c:7f:
         bf:0b:9a:10:db:1d:76:4b:02:43:2b:cb:b3:49:ef:8e:cf:fa:
         30:53:2e:53:44:1c:43:9b:bd:96:bb:23:a3:bd:1b:33:c5:42:
         72:5c:01:f8:94:28:0d:f9:d9:22:5c:a9:f4:9a:65:cd:93:86:
         7d:1b:03:30:68:ef:a8:65:84:04:45:c4:48:ce:2e:19:c1:11:
         df:00:42:a9:5a:5f:ee:1e:62:07:6f:0a:78:5d:97:26:a6:46:
         93:7f:88:10:b5:29:e7:84:e4:c6:82:3e:b7:7b:e1:b1:73:b9:
         79:20:51:80:c6:64:7f:51:a5:a7:5a:a2:a4:b7:cb:4e:ff:f5:
         b7:91:27:e7:76:9c:79:42:18:c5:0c:36:5b:7b:96:24:83:6d:
         3b:91:7e:a8:0f:5e:03:13:33:cd:9c:2c:55:8a:95:44:f1:37:
         a2:f9:f4:48:f8:e5:1b:2b:c3:0a:40:a5:ae:54:24:6e:31:76:
         dc:c9:58:66:d9:8f:0a:24:39:9e:9c:41:4f:1e:79:e3:d3:bb:
         40:1e:5c:3f:fd:61:0c:2e:4f:ce:49:d9:fa:07:e8:cd:bb:d9:
         4c:cf:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:03:59 2025 by rpki-client