Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa
File:                     4a06d743-e932-3714-b564-6de15185a11a.roa (raw, json)
Hash identifier:          kh9aA+l7B7zEZMuAskECdsCJ6a3unOSXnOinu8Rl1I8=
Subject key identifier:   AD:C3:B1:5D:7F:E2:41:B3:A2:3A:89:79:DA:8B:50:1A:F5:05:DF:50
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A540723DA6F105FEC7580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        76.166.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:54:07:23:da:6f:10:5f:ec:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f0a84ee0-4285-46b4-aec1-fbd0c1798aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:86:e0:05:c6:5d:76:0e:42:f9:24:44:83:
                    63:13:f4:86:37:16:8c:f0:7b:7e:7c:d2:fd:33:1d:
                    cf:f4:62:8a:f0:b2:4f:4a:2c:e4:86:31:57:04:84:
                    b7:db:dc:e3:09:8e:7b:e0:ab:72:43:b6:b4:66:07:
                    f4:ba:58:8b:ff:8d:60:26:f0:76:e2:de:43:b2:bb:
                    20:f1:c8:c5:d8:29:0e:e7:6e:00:10:fe:76:5d:ec:
                    68:e2:2f:b2:d6:79:a8:81:ac:d2:cd:b4:2f:ac:75:
                    c7:f8:85:94:6b:b7:c0:de:a8:ef:a7:f6:fd:9e:54:
                    74:d7:41:9b:e8:70:9c:16:8b:f0:26:07:98:ce:c9:
                    f7:1b:58:66:1e:45:03:9b:e8:f5:0a:cb:be:ca:83:
                    9f:d1:c6:02:77:ac:be:29:82:fe:10:16:04:d4:1c:
                    db:df:c7:8a:16:ae:0d:e0:4e:2c:8b:ec:3c:55:39:
                    2e:e6:0f:2d:c9:c2:a1:3f:d4:21:1a:9a:3f:7d:c5:
                    a1:f8:91:1f:5f:fd:df:76:97:56:2e:c5:56:b2:91:
                    3e:e2:cd:eb:19:09:2d:64:39:da:9a:55:6c:76:1b:
                    86:04:4a:6d:34:15:aa:a7:c4:4c:b6:13:73:49:ae:
                    d1:97:a6:37:6f:64:9b:97:c0:86:85:b4:46:18:da:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:B1:5D:7F:E2:41:B3:A2:3A:89:79:DA:8B:50:1A:F5:05:DF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4a06d743-e932-3714-b564-6de15185a11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.166.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:d7:08:e3:6b:06:d6:49:b1:45:34:1a:87:91:f8:75:3e:
         6c:00:c4:69:1e:8e:62:9f:fa:b5:cf:1f:e4:67:3a:80:98:85:
         e0:83:83:24:5b:da:dd:55:8a:3f:e8:2e:37:61:d2:14:05:f7:
         f9:73:85:e8:db:c7:1b:7e:0e:e2:66:f4:c3:58:ab:ed:af:74:
         ca:65:f5:5f:3b:a9:7b:4e:26:ff:75:86:79:e1:ad:ca:ff:c9:
         33:f3:72:a8:4d:92:ae:69:3a:42:f3:b1:7b:b6:c5:cb:f5:d6:
         95:ed:76:47:7d:bd:70:80:ab:a2:39:d5:46:a5:3d:23:41:c3:
         97:2d:ed:0d:bb:c3:10:16:a6:51:9f:66:33:40:e8:6a:f6:9d:
         db:aa:82:66:e1:2f:a6:4d:06:96:6a:b9:89:c1:49:61:7f:09:
         f7:2b:08:c1:da:e2:95:c2:e2:f8:49:26:e6:7c:3e:a9:49:14:
         bf:96:42:84:3e:08:e0:c3:51:12:ea:99:07:71:c0:4d:d8:b2:
         39:7c:50:cd:57:65:6f:45:12:21:44:a7:93:f8:a5:74:3c:ee:
         af:a1:d3:bb:37:e9:4f:64:d2:c7:19:44:df:f5:51:7a:c9:39:
         ab:bb:3e:39:c1:d3:f2:74:80:58:e1:24:46:de:a5:c4:87:94:
         62:39:99:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:47:45 2025 by rpki-client