Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/71eb7775-e5e1-3447-b918-128d2048fd81.roa
File:                     71eb7775-e5e1-3447-b918-128d2048fd81.roa (raw, json)
Hash identifier:          I+93vDe75slcFWjAU+DS4T30x9rbH8jPHB0O7yIt7iU=
Subject key identifier:   27:AC:F2:44:04:76:47:33:97:7D:35:32:47:FC:C6:81:FD:FC:E9:DE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE37C5054BEA35ADAB080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/71eb7775-e5e1-3447-b918-128d2048fd81.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        76.80.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e3:7c:50:54:be:a3:5a:da:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e76e52cf-d8aa-4fea-835f-da499d81b704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:83:57:6c:58:72:69:0e:25:78:5d:a4:34:
                    7a:04:54:91:10:db:b5:05:ed:2e:26:f3:4e:91:25:
                    6f:df:a0:27:a8:6b:d5:66:a2:25:1f:42:f4:25:82:
                    b4:d0:9c:89:32:3c:51:94:ed:49:6b:c9:ea:4c:ab:
                    12:d5:e9:92:b1:c8:e7:49:cf:97:a2:24:a8:a2:25:
                    8a:c0:e7:dc:a3:1e:ee:3e:ae:f7:25:c3:42:57:c6:
                    d5:26:5f:16:72:a1:f0:5b:5b:bf:f5:c1:e0:b1:3b:
                    de:3b:b0:0d:d4:8d:b1:98:bc:9e:e8:b9:15:58:9a:
                    55:21:54:e7:4c:87:fa:64:c9:ea:58:22:0a:cd:27:
                    ed:e8:52:ac:66:d3:45:cc:ad:37:e9:f7:44:b9:3e:
                    d2:2c:05:92:96:d3:4e:ca:35:fc:2a:76:fe:31:a3:
                    a6:90:4a:1a:b2:d2:2c:c3:97:a5:f5:5e:6c:e5:7a:
                    fd:32:bf:c9:21:9f:82:70:6b:86:d2:91:75:36:a9:
                    a2:4e:34:de:7a:3b:a4:01:ef:f6:17:be:38:1e:88:
                    0a:4c:0c:91:7f:f9:c9:80:36:8e:8a:62:83:ac:4f:
                    af:4c:ef:3f:11:8e:c2:1a:99:9f:c3:90:6c:d6:4d:
                    9a:94:b1:dc:aa:09:85:73:7c:d1:13:8d:d9:66:cf:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AC:F2:44:04:76:47:33:97:7D:35:32:47:FC:C6:81:FD:FC:E9:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/71eb7775-e5e1-3447-b918-128d2048fd81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.80.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:60:af:e0:7f:7a:0b:55:84:4b:04:92:73:fc:2d:52:8e:
         fa:a4:44:88:6c:9f:57:e6:77:99:4a:7d:46:e8:cb:d0:72:b5:
         a5:f6:5b:f2:21:5f:64:ab:ca:c7:2b:9d:96:fc:10:32:69:80:
         89:20:c0:5e:91:26:13:83:3f:a1:81:23:fe:3b:39:61:fb:2c:
         a2:47:7a:1a:79:ad:84:37:31:52:af:2a:49:23:4d:38:d3:ac:
         97:ec:df:8a:d5:ff:ad:c0:38:bf:46:19:1a:76:bb:1e:ea:53:
         05:15:f1:d8:ef:e7:82:01:4e:e5:39:0a:61:01:03:e3:9a:eb:
         b2:a2:9f:24:e7:20:cb:5d:cb:bc:08:7d:28:5d:0a:a0:ec:6c:
         b8:59:6a:05:7d:63:93:8f:12:c6:2c:24:9b:b2:49:dc:8b:09:
         b1:7c:c6:b1:4a:1c:51:d0:0c:0d:ba:e6:29:bd:c3:a6:9f:a9:
         c9:fd:00:36:67:3a:73:27:53:6e:12:6a:11:bc:c4:2a:27:1a:
         06:4d:26:f5:17:09:27:44:7e:4f:48:fb:29:e3:8e:a5:4b:65:
         9f:ab:3a:81:d1:be:8a:37:f9:a2:9c:f9:ca:fc:e8:b8:aa:df:
         29:8d:7d:b0:f7:fe:f9:37:b7:11:a7:7b:7b:ef:c5:ff:ff:f3:
         30:30:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:12:33 2025 by rpki-client