Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
File:                     3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa (raw, json)
Hash identifier:          Mi8bPGF8U3p54byureXzIeMslHUsQrOeFWeXw25ljEs=
Subject key identifier:   EC:D8:BA:CF:28:6A:D2:2C:25:05:F3:6F:DE:0C:10:38:AF:83:EA:B1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A501BAC9CE0AB115F3508
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        24.213.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:50:1b:ac:9c:e0:ab:11:5f:35:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e784a0c4-8917-425e-afbe-843bf1d6f466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:65:a7:53:33:b6:10:35:79:a4:b4:30:b2:
                    65:82:91:cd:79:2e:dc:6a:a3:14:1d:c6:61:61:0a:
                    c4:41:fe:33:88:ee:7d:a8:69:de:d0:4d:47:61:2d:
                    9c:65:7d:95:63:ea:d1:dc:89:29:4f:d8:37:e0:3c:
                    40:73:66:b7:ac:0d:41:9f:ad:46:b5:f4:96:4c:50:
                    d7:38:d9:ad:fb:52:44:2f:e0:5e:6f:d9:ce:2d:36:
                    00:7a:cd:bb:9e:b3:ab:60:5f:3a:44:e7:fe:94:1c:
                    af:d5:d6:93:64:95:46:83:4a:b0:73:90:e8:26:bf:
                    ce:88:7c:33:26:7f:6a:5c:29:e7:23:0b:18:4b:9d:
                    f3:1e:97:ea:77:40:ee:61:86:57:d2:37:f5:f6:35:
                    c0:05:7e:84:fa:49:6b:a1:2e:ee:1c:31:a9:bd:30:
                    23:85:e3:29:ff:06:61:14:e4:e8:01:d8:c0:6b:5a:
                    96:71:36:c0:3c:ee:e3:57:c0:3f:a2:fd:f5:37:59:
                    1b:fd:9f:61:ba:47:40:08:de:91:51:0d:fe:ef:53:
                    c0:87:f4:80:62:27:cc:48:ac:08:d1:6e:28:71:09:
                    00:88:6c:8a:37:a4:55:50:33:63:f4:18:ae:e3:76:
                    ba:3a:5f:34:6f:0d:d0:19:7e:8b:fc:5f:ee:d1:d4:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:BA:CF:28:6A:D2:2C:25:05:F3:6F:DE:0C:10:38:AF:83:EA:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3b8e67ea-8b3a-3e31-b352-24420ae916ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.213.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:bf:39:57:65:6c:89:35:25:74:f0:70:0c:c0:a0:18:44:
         3b:ab:44:57:de:09:df:3c:b0:4b:6f:1d:36:c2:da:f7:f5:fa:
         38:92:3c:d0:a2:c9:04:a8:d4:b0:e5:7b:03:45:2e:8c:45:e4:
         89:97:27:ce:3d:4a:2c:b4:27:12:70:5b:25:37:e2:d8:c6:31:
         84:8b:5e:5f:09:ce:ca:41:5f:a6:7a:d3:d3:56:13:a2:b6:d3:
         79:c8:4b:df:30:af:18:e4:46:1e:b9:85:45:20:9b:f5:13:8c:
         c8:4c:1c:b0:3e:82:1c:1d:2a:24:50:91:d3:54:95:19:f9:24:
         81:b5:7e:31:73:56:86:60:fc:d9:6d:0e:d2:39:2f:c1:c2:d9:
         99:81:db:65:bf:52:aa:34:e9:89:66:b9:05:28:8f:61:f2:8c:
         e3:eb:ad:12:dc:01:cf:1f:59:02:ba:a9:f6:81:ca:fd:d5:0c:
         c3:d3:7e:9e:0a:ca:56:ce:13:60:c7:1c:13:2d:e6:2b:0d:65:
         13:1d:01:0c:63:40:49:11:f6:27:db:ec:04:4e:03:b2:88:5c:
         9b:e9:25:55:c9:54:bb:38:d4:d0:b6:34:32:6f:a9:7d:30:83:
         f0:f8:ff:7c:8e:97:4c:5c:a0:8e:24:28:43:40:db:91:9d:7a:
         7b:99:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:34 2025 by rpki-client