Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64f5cf7a-a2e6-36ba-86e7-38d90956821b.roa
File:                     64f5cf7a-a2e6-36ba-86e7-38d90956821b.roa (raw, json)
Hash identifier:          jBj3/ntp1PRufSxZfIhUiEaTzsEgCh8rS66BQlTKEbM=
Subject key identifier:   B9:A1:ED:52:77:70:46:A4:F0:D8:D7:F8:A5:C6:6D:B5:55:E9:3C:04
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4065DB26DEB3D4A2C080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64f5cf7a-a2e6-36ba-86e7-38d90956821b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        24.30.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:40:65:db:26:de:b3:d4:a2:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8ab26393-f47e-4837-80db-752de363c809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:08:6a:22:e5:e4:7c:40:5a:6a:76:2e:67:
                    43:0e:63:6a:8f:82:7f:63:e7:d9:2a:c9:b3:40:eb:
                    0a:da:60:31:c3:9f:10:11:65:ca:98:77:0c:57:f6:
                    49:68:79:22:c1:44:68:32:bf:4e:2f:cc:71:77:5b:
                    55:8e:a3:db:70:09:d6:ab:3d:59:0d:f2:cd:cb:af:
                    dc:a5:93:6d:8d:8f:3b:9e:d9:88:48:cf:60:93:03:
                    66:51:76:a5:0e:f5:b8:2f:68:39:44:91:92:a3:85:
                    93:49:dd:aa:a7:ae:77:ff:d9:3f:69:6f:89:43:5e:
                    a3:21:80:9d:31:f3:73:ad:22:00:4a:b2:89:ea:77:
                    8a:7b:8a:fe:cf:ab:46:b8:31:4b:9a:1b:68:8d:4c:
                    be:d4:10:05:43:e0:d6:f0:2c:6a:a8:00:31:1e:ee:
                    a4:32:3d:65:0e:22:53:43:75:50:49:7f:d1:97:1e:
                    f5:97:74:3b:62:f3:e3:9f:ef:eb:db:c1:d5:2c:bb:
                    1e:b0:78:4b:06:aa:66:78:ac:7c:80:bc:03:48:4d:
                    d7:60:b3:6a:a3:98:95:52:02:47:4f:cc:0c:d6:16:
                    a0:88:50:16:3b:6a:25:9e:1f:47:de:62:8e:ba:ac:
                    2e:29:ed:42:37:dd:62:1c:a1:a3:5f:80:77:03:59:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A1:ED:52:77:70:46:A4:F0:D8:D7:F8:A5:C6:6D:B5:55:E9:3C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/64f5cf7a-a2e6-36ba-86e7-38d90956821b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:b7:e5:ce:8c:ee:fd:43:94:b7:b4:44:c8:65:e9:d9:d3:
         fb:c4:e4:91:05:bb:ad:52:0e:6b:f7:de:62:49:d9:d5:7b:62:
         ef:99:50:d8:f7:8a:22:cb:b6:5e:ce:67:e9:35:b1:95:62:6e:
         5d:aa:de:c6:fa:3d:c6:10:e3:5f:2d:fd:16:34:4e:0d:ce:7a:
         2b:84:f7:79:74:f8:60:12:2c:85:0f:7b:5a:01:ac:6d:82:d6:
         f1:5b:a1:55:62:d2:f0:cf:a9:34:34:9d:79:ba:3b:3d:21:22:
         9b:c6:b7:85:e3:74:bf:ee:a8:48:d7:d5:37:d1:34:9f:7a:8b:
         d0:f8:08:80:0c:74:e9:86:cb:ae:3b:ea:09:4e:6b:b3:84:97:
         eb:5b:55:c6:30:92:cb:9f:21:c8:b7:f1:ff:ee:43:94:79:21:
         d2:d4:68:5a:f9:91:0a:50:2a:43:cd:59:b9:65:22:1c:34:75:
         b7:e8:f5:f6:41:c7:19:70:fc:cd:cb:54:7e:e8:5e:eb:28:91:
         d6:ad:a0:16:73:58:03:e7:e8:38:07:8d:0c:0e:88:77:09:11:
         40:f3:36:69:e1:01:78:e7:fa:a7:f9:5e:a7:8b:07:a8:d5:64:
         68:a2:c1:ab:d8:40:bf:1b:6f:75:90:43:b1:74:2f:44:79:46:
         7b:95:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:20:46 2025 by rpki-client