Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76ee5f7d-7aca-3723-826a-8296c5c75045.roa
File:                     76ee5f7d-7aca-3723-826a-8296c5c75045.roa (raw, json)
Hash identifier:          zyHvClHKsdHKi87rvNQXXN4xSKTeoMycWNH3YOBFoLQ=
Subject key identifier:   D9:11:DF:0A:38:6E:62:12:31:96:36:34:87:BE:0B:05:42:EE:9C:2D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4F1FA54042F3D79F9D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76ee5f7d-7aca-3723-826a-8296c5c75045.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        24.39.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4f:1f:a5:40:42:f3:d7:9f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4f3ac825-51f1-46eb-bc56-c2eed46922b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:27:40:4c:02:c8:da:26:dc:59:ff:58:b0:
                    cb:89:c7:68:d1:ca:d1:9f:58:32:ca:ac:01:cb:ee:
                    b3:02:7e:3d:5b:eb:27:93:f4:5b:88:0a:d3:1e:d5:
                    58:da:af:f5:c8:e5:3f:9a:96:70:a0:e4:5a:51:0e:
                    00:26:8e:81:48:63:b9:67:17:e6:c9:93:05:62:71:
                    32:8b:c1:fe:87:06:f1:ed:b7:df:36:df:94:81:77:
                    17:97:71:cf:ec:8c:58:f0:4b:35:f1:31:d4:87:17:
                    b8:ec:f1:65:ab:fe:84:d1:8f:61:4e:57:f4:a3:7d:
                    05:90:d0:cb:7d:7b:c4:eb:14:e7:c4:f4:3a:69:d9:
                    ec:c8:f3:25:ed:0b:b1:cb:5b:65:3b:07:ce:85:8f:
                    24:8f:57:2b:30:fa:16:6a:eb:53:d5:32:d6:bf:26:
                    76:01:c0:9e:b1:29:4f:c8:a2:d5:0b:6a:ca:6d:fd:
                    97:a1:fc:a2:c3:0e:95:78:03:d0:fe:af:2e:6b:1f:
                    5c:02:74:6f:9a:7b:c5:0d:45:ae:f8:da:a9:32:2b:
                    0e:d5:3d:9c:dd:57:e2:32:d4:d0:48:94:a7:d8:a1:
                    bf:c3:76:7d:ea:bd:4a:d6:e2:35:c8:81:b1:9e:a7:
                    50:d1:7d:45:99:4a:24:2e:fa:3d:b8:22:83:99:28:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:11:DF:0A:38:6E:62:12:31:96:36:34:87:BE:0B:05:42:EE:9C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76ee5f7d-7aca-3723-826a-8296c5c75045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.39.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:8a:ef:70:8f:06:55:f7:62:96:c0:30:bc:4a:da:d8:48:
         09:fd:ad:42:10:e9:62:b5:67:7e:17:fa:49:e7:d3:65:ba:0c:
         04:a5:50:bf:9e:bf:35:f0:75:70:0d:34:ea:e9:e5:3e:54:bd:
         78:43:ad:ac:ff:47:75:85:d8:e8:bd:e7:64:ed:e8:64:75:c6:
         d3:02:43:2b:9a:4a:79:58:1f:8b:c5:17:bb:0d:de:ef:18:a3:
         07:6a:99:0c:dd:92:4a:6a:db:12:e7:d5:1a:a1:d9:27:d6:ee:
         c5:fc:3a:06:aa:10:c3:6e:3d:ee:c2:f1:bf:d2:78:fc:de:1a:
         17:fd:8e:ff:2b:b2:94:42:27:13:14:66:db:3a:80:4a:e6:ab:
         45:81:5e:b6:d0:68:d5:08:5f:53:a2:07:36:92:93:f2:e6:19:
         dd:54:92:a4:df:aa:13:89:e6:fb:a1:67:93:64:ff:f7:6e:b5:
         17:3d:a6:50:b4:db:5d:28:90:5d:33:93:5e:89:83:06:b1:0d:
         7a:04:c5:35:ef:47:62:d2:fc:4b:3c:2b:be:e8:23:83:cb:9f:
         08:6e:63:74:a2:db:2e:cb:f6:05:19:df:43:4d:e4:0d:4d:0b:
         54:75:d9:ed:fd:25:6a:3a:76:b9:c8:b2:88:ad:2e:98:70:3a:
         e3:ea:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:32:06 2025 by rpki-client