Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a0c7d68-94ac-38c0-a5bd-e5a26a1e33a0.roa
File:                     7a0c7d68-94ac-38c0-a5bd-e5a26a1e33a0.roa (raw, json)
Hash identifier:          BHbtX2Hgodm1Lc5fRImnSRDH5bIoycuqwJzP7Vt7fLs=
Subject key identifier:   55:69:73:67:95:A0:63:73:84:DC:46:DD:79:0B:06:23:C8:F9:DF:3F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849B3A595869A9BB8B859B6F900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a0c7d68-94ac-38c0-a5bd-e5a26a1e33a0.roa
Signing time:             Wed 30 Apr 2025 21:17:09 +0000
ROA not before:           Wed 30 Apr 2025 21:17:09 +0000
ROA not after:            Tue 29 Jul 2025 21:17:09 +0000
asID:                     0
IP address blocks:        64.183.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:a5:95:86:9a:9b:b8:b8:59:b6:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 30 21:17:09 2025 GMT
            Not After : Jul 29 21:17:09 2025 GMT
        Subject: CN=b3fb5bbf-dab6-4620-b007-7dec0a1da3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:6c:f1:de:08:a6:e5:4e:40:b4:32:d4:18:
                    18:7b:be:88:17:2d:5b:e9:05:bf:f4:c9:4f:82:22:
                    75:87:9f:54:99:5f:1a:75:69:d8:b5:c2:f5:1a:d9:
                    f0:99:e3:d7:ec:1a:25:03:00:6c:13:17:e8:34:3e:
                    c5:c3:8a:ec:c2:d8:04:3e:87:9a:73:b7:7b:9a:53:
                    2d:26:41:79:29:fe:e3:28:15:ee:63:32:0f:45:65:
                    43:e0:b3:fd:48:e0:88:46:ab:a4:b9:f8:e8:42:20:
                    d6:bb:c9:37:e9:c0:73:9c:0a:1c:84:8c:93:82:e4:
                    a7:d7:df:59:27:56:e9:0a:c2:20:c3:9d:3b:61:bb:
                    a0:cc:a1:ad:e0:f2:65:6a:7c:36:1b:70:eb:2a:c1:
                    48:c7:ec:be:7a:32:53:68:8a:ba:a9:fa:05:67:fc:
                    a9:84:fa:37:91:21:3a:ba:a5:49:95:f5:d0:73:9e:
                    68:94:63:de:6b:c5:ef:d5:3a:d1:02:a8:2c:c9:28:
                    a9:e4:9c:8d:4c:e4:1a:08:8a:cb:35:e4:91:8c:89:
                    1b:da:22:b2:45:c4:55:ed:d8:e1:26:b1:af:dd:dc:
                    b8:6c:e9:ca:10:a9:73:b8:e2:c0:0d:1c:38:5f:7a:
                    43:db:45:46:ed:50:2c:c4:82:d6:c8:f3:a5:3d:89:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:69:73:67:95:A0:63:73:84:DC:46:DD:79:0B:06:23:C8:F9:DF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a0c7d68-94ac-38c0-a5bd-e5a26a1e33a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:16:26:2f:2d:72:b9:c8:00:da:fa:20:05:62:68:54:4a:19:
         99:9a:b6:40:2f:9e:d4:d4:b8:a6:58:45:13:40:49:7e:4d:1f:
         a5:e5:2a:60:61:74:55:b7:4d:aa:48:8c:b6:ce:96:a3:f8:37:
         78:95:8d:36:34:52:cd:b7:df:5e:70:30:cc:c2:86:8d:cd:31:
         c5:d7:18:29:79:3a:ec:57:3e:1b:b9:20:81:99:e3:10:0f:a1:
         00:31:9a:54:cd:f0:9c:6b:84:61:b7:22:fb:42:91:44:ce:74:
         c5:1c:38:96:9c:ea:43:a3:88:80:04:5f:e8:40:aa:fb:ce:fd:
         b0:b7:c7:52:28:6f:0a:71:84:6e:50:12:8e:da:c6:08:ac:f8:
         06:10:f8:bf:b0:5b:2e:1f:6a:00:cc:a4:6f:3c:19:a3:73:84:
         dc:91:01:60:e2:97:c6:21:1c:cf:c3:0a:f9:72:68:25:9e:44:
         9b:6d:75:e0:07:4d:ba:87:e5:56:30:c8:b4:71:72:d2:91:df:
         9f:ea:d5:f9:72:c2:5d:d0:66:13:f8:a9:05:b0:c4:d9:4a:0c:
         d9:e0:86:b1:78:e9:d1:77:92:cb:00:fe:68:16:8a:c1:d7:dd:
         4c:fc:05:64:bd:d2:91:60:d0:cb:f7:c9:0c:bf:83:57:cc:67:
         9b:1c:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:30:33 2025 by rpki-client