Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/751f0158-a768-3aa4-bc2f-4b15f0770c49.roa
File:                     751f0158-a768-3aa4-bc2f-4b15f0770c49.roa (raw, json)
Hash identifier:          2QsRUX5xIjow24Ojtf9AEIQL3dzuKwv43u4U34pv3d4=
Subject key identifier:   0B:59:2E:95:E1:39:CF:F5:2E:B4:A5:5C:2D:77:5D:BE:CC:54:3E:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A58342886FAFA92B6AE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/751f0158-a768-3aa4-bc2f-4b15f0770c49.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        66.74.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:58:34:28:86:fa:fa:92:b6:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d95c10fd-f380-4a53-988e-ab29ae2e335a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:71:30:b7:f0:04:41:7d:14:0b:c8:e5:1a:
                    e0:39:53:25:13:cc:ad:97:cc:cb:46:b5:28:d1:d1:
                    63:d8:48:1b:04:e8:1d:12:64:fe:87:ed:09:87:c2:
                    7f:74:2e:bb:64:59:78:f5:a4:1e:bc:32:90:ab:ce:
                    1f:b2:3d:fd:f9:33:ec:33:20:34:e2:8a:04:5d:4a:
                    be:f1:41:6f:f3:a0:b6:1c:15:c5:03:f8:50:28:f4:
                    61:e8:45:05:0b:b2:32:59:b7:03:73:50:18:2d:03:
                    c8:95:73:a2:fe:99:fe:b7:77:44:69:be:8d:61:39:
                    40:56:62:e9:72:b8:14:0e:37:1c:fb:dc:46:a6:19:
                    77:3d:d1:8f:e5:8d:c5:59:8f:88:bd:7e:2d:62:46:
                    12:d3:b1:56:55:0c:ec:f2:40:b0:85:86:58:b0:69:
                    40:a9:9c:8d:3e:8e:02:11:a8:09:44:c7:98:7c:10:
                    e9:6a:ac:b5:bc:cd:37:76:22:a1:8f:2f:37:5f:af:
                    7f:a2:87:50:07:77:d5:ff:1b:b6:e9:04:16:ef:79:
                    b3:c6:3d:93:2c:b5:b2:12:24:70:96:75:48:86:b8:
                    38:9a:85:15:50:f1:07:31:7a:23:92:b3:bd:b3:9f:
                    47:00:81:bf:8b:e4:c8:78:95:46:1f:15:70:ad:45:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:2E:95:E1:39:CF:F5:2E:B4:A5:5C:2D:77:5D:BE:CC:54:3E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/751f0158-a768-3aa4-bc2f-4b15f0770c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.74.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:78:fd:6b:d8:44:18:75:32:dd:59:f1:9c:59:16:aa:e1:3e:
         1d:5b:56:c6:3c:4f:ce:11:a4:34:ba:a7:3d:77:06:2c:7c:39:
         42:0b:1e:1a:f0:17:eb:78:04:19:60:e1:4d:91:b1:34:1d:3f:
         e0:35:f8:5c:44:da:c7:8f:d4:b6:fa:22:4c:b0:a8:7e:0c:1d:
         2e:f5:5b:db:b0:1f:e4:d4:39:2b:a3:06:ae:fe:8f:3c:8d:9a:
         0c:fb:43:84:b7:03:3f:72:25:6e:69:c8:5d:d5:8a:f8:89:26:
         ce:77:5e:8d:a3:5a:15:23:b9:cf:82:25:45:40:30:90:46:e4:
         2d:5c:8e:73:5f:88:9c:7d:ab:b1:d8:15:0c:30:b2:95:85:3f:
         69:f0:1a:a4:11:b3:60:bd:75:2a:15:a9:4b:e1:2a:f7:d9:a3:
         c7:26:99:30:e8:3b:19:ed:78:b1:a4:e3:dd:d6:e8:df:48:69:
         dc:e6:df:e7:c6:7a:b0:c2:c8:6b:c9:b1:70:55:7e:3c:1b:05:
         67:d2:05:56:36:e3:fa:b2:ff:96:80:d1:a3:38:c1:4b:5d:be:
         d1:6a:d9:1a:e1:82:1b:93:93:50:33:b3:a4:e5:ed:f4:2b:a1:
         9e:e0:85:3a:f0:8d:b7:94:b5:5b:68:6e:c4:9b:e8:8f:26:3e:
         06:6b:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:57:11 2025 by rpki-client