Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64d88895-c2ec-31b6-b6ec-866a5b4d84e7.roa
File:                     64d88895-c2ec-31b6-b6ec-866a5b4d84e7.roa (raw, json)
Hash identifier:          TlCR2I1rc8f0e+XBQMl2mv8jfg3KwEdVdPWuG/c82NQ=
Subject key identifier:   52:F6:79:21:E7:70:22:87:77:A3:F0:B9:BB:D8:FB:67:6A:35:CD:25
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4717FAA21AC61193BB00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64d88895-c2ec-31b6-b6ec-866a5b4d84e7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        68.201.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:47:17:fa:a2:1a:c6:11:93:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=f31a2212-b0e3-4deb-8d81-98e9b32a06c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:81:0c:a8:77:71:b0:40:71:29:7c:03:1d:
                    51:3e:c6:de:58:ee:aa:44:db:a7:12:d0:ab:7d:e9:
                    d0:b1:ba:12:a8:89:7a:e7:9d:63:22:ee:35:06:a0:
                    05:de:47:ec:f6:bd:89:e8:7f:e2:8a:b9:56:23:5d:
                    98:a6:ae:34:a0:25:22:36:c7:64:4b:c1:82:16:99:
                    1f:78:da:44:27:aa:21:fc:18:c9:e8:5d:79:59:82:
                    bf:0a:b5:53:fe:a2:8b:ac:f9:55:a8:a4:f5:23:59:
                    bf:96:cb:3a:02:05:fb:d1:c7:04:af:ba:24:9c:8e:
                    8f:bb:c9:33:8e:f9:4f:d3:f5:01:f3:78:cf:66:2a:
                    10:46:2e:7b:76:c3:3e:c8:8c:f4:39:d6:a3:7a:77:
                    6d:b9:b4:2b:38:f9:77:53:36:8c:cd:df:5a:19:fa:
                    7c:79:99:31:48:48:e9:05:1a:ed:96:01:17:9f:d4:
                    8d:9e:94:32:e2:54:a7:83:28:fd:59:c9:d4:95:54:
                    b8:45:17:33:99:80:81:72:36:57:ed:64:ad:c9:b4:
                    9f:1c:d1:65:0b:5b:fd:34:52:45:8d:68:bf:d9:18:
                    72:a0:19:fb:57:cc:d3:3c:5b:9a:49:3e:3c:e5:f5:
                    ee:2e:28:63:b1:17:8a:80:08:3a:dd:e9:1b:87:76:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:79:21:E7:70:22:87:77:A3:F0:B9:BB:D8:FB:67:6A:35:CD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64d88895-c2ec-31b6-b6ec-866a5b4d84e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.201.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:1b:c0:4b:e2:c6:a9:57:d9:8d:c6:28:df:95:e8:e0:f1:
         54:26:a7:bd:9a:a8:e1:5c:c0:34:dc:96:d2:d2:5e:66:78:ce:
         04:0b:b4:65:be:76:c3:52:3b:0a:e2:c5:80:cb:d8:22:32:63:
         e5:bc:d4:db:c6:01:49:7d:58:de:cc:3a:18:ad:9e:64:5c:7a:
         bc:d4:0f:ee:ee:82:28:df:20:c2:2e:f1:06:97:a3:f9:56:36:
         c2:12:ae:a6:46:88:92:34:76:26:69:fc:e1:d7:c0:22:d0:0f:
         3e:f2:8a:f8:e0:69:0a:e6:62:91:59:23:96:b9:c6:71:5f:23:
         61:30:4a:12:d9:c6:66:17:9d:bf:35:6c:9e:1b:25:cc:d0:a7:
         9e:91:d0:f5:5d:d7:e1:98:75:c5:76:e6:9f:c4:e5:6f:d8:c7:
         74:37:62:0d:e3:84:ce:15:24:af:78:c7:bd:2d:3c:b1:c8:3b:
         a1:75:9a:ca:8a:00:24:bc:c2:f0:f5:b2:12:c5:a2:27:69:cf:
         42:d1:46:6f:2e:c5:f6:eb:df:6c:d3:46:08:9f:40:33:64:06:
         52:16:e0:79:da:98:da:7c:9a:8e:03:47:a7:3e:5b:cc:e2:df:
         3a:cc:03:d4:ec:b0:83:d1:20:8b:a4:fa:e1:7d:76:ad:78:be:
         39:6a:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:01:32 2025 by rpki-client