Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa
File:                     3e89b3bc-df17-308c-865d-409667599b0a.roa (raw, json)
Hash identifier:          nugd3EATkFRVTL9BfhtOFnAXcVrwCT+VXXz5H4JvnHw=
Subject key identifier:   30:13:C1:A3:9E:D6:FE:FB:06:9E:B8:A0:88:D8:E0:3F:0F:6C:AF:9E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD696EE9520A940429980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        72.129.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d6:96:ee:95:20:a9:40:42:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e67b5485-d12a-422d-851b-e8cb3fb34b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:9e:cb:09:d8:8f:80:44:dd:a2:9c:7d:c8:
                    c3:d6:61:10:f9:3f:e3:13:6a:1e:7b:ea:80:b2:5d:
                    74:35:ef:87:b1:1b:95:88:16:b1:b7:73:9b:f5:7a:
                    7d:33:f9:5e:49:c9:07:1a:09:7e:3b:86:52:fb:18:
                    08:67:ec:ed:96:21:32:41:ee:2a:06:81:61:b8:05:
                    75:68:67:fd:c2:e9:15:09:d4:30:41:e6:b1:2e:27:
                    a8:4a:89:cd:0c:d6:a9:85:62:7d:ae:ba:40:67:72:
                    d2:cb:f6:f7:7d:31:d2:a0:33:e6:7d:af:c5:22:fb:
                    b5:29:8b:15:1e:65:c3:c1:2c:48:8b:4c:dd:84:7c:
                    59:6d:93:fa:dd:63:39:b7:50:c0:af:38:51:7f:17:
                    e1:b0:1a:b1:3c:75:99:2f:03:d4:33:c8:64:8c:84:
                    4c:c2:6e:cb:cd:8a:d2:f4:04:6d:b3:c6:ac:92:a7:
                    0a:19:7e:54:ec:66:1f:59:1f:9e:6e:d9:1e:67:37:
                    f8:27:18:5d:50:f0:3d:f6:1c:4a:c1:11:25:24:63:
                    ea:71:58:bb:e5:8c:6a:10:9a:57:b9:bf:dc:ac:a5:
                    ba:2b:26:d9:5a:48:1e:be:91:80:9e:5d:19:a9:69:
                    46:cf:87:08:7f:29:54:e2:d2:87:24:1b:73:26:d9:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:C1:A3:9E:D6:FE:FB:06:9E:B8:A0:88:D8:E0:3F:0F:6C:AF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e89b3bc-df17-308c-865d-409667599b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.129.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:84:4e:ad:cb:c3:fc:50:e6:37:9f:08:b7:2e:bb:6a:36:e2:
         ae:c6:5e:7b:5a:b8:19:1f:43:4d:74:15:db:8b:c3:7e:af:fc:
         51:64:be:95:b7:ed:70:e6:9f:ef:d1:b7:8d:8d:33:7f:96:00:
         c0:c7:e0:f6:b9:ea:67:0d:9d:7a:6d:92:f8:74:72:c5:8d:5d:
         9f:81:b8:eb:5c:5a:18:bd:27:80:6f:13:cf:8b:a3:47:ab:01:
         25:89:68:28:ec:0d:64:21:a8:15:38:1d:5c:88:19:30:5f:56:
         f3:cb:3b:a9:6b:ef:bb:cd:81:97:42:d5:2f:62:e7:79:74:32:
         6e:25:97:90:7d:68:ff:2b:9f:e6:24:c4:d3:32:8c:63:32:6c:
         06:be:fd:3c:ff:e7:7c:38:80:a8:44:33:7a:e5:b3:dc:6c:2d:
         24:dd:56:29:21:4f:cc:11:40:68:17:45:33:3a:14:28:64:97:
         9a:36:d4:56:a2:e9:7c:56:da:ec:41:7d:0e:9c:3a:7b:34:b3:
         bb:97:1d:17:e8:b0:ea:17:06:1a:e6:80:96:27:07:9d:89:2f:
         bf:ef:d6:d1:2e:0a:1e:d0:47:a5:b2:98:02:85:1a:bf:c8:b7:
         e4:33:f0:ad:1d:dd:b2:ca:fb:ed:c3:32:a6:c4:a6:fb:07:38:
         eb:76:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:22:31 2025 by rpki-client