Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa
File:                     7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa (raw, json)
Hash identifier:          IXSyBssrnSIl/PJoGB+ocaa23kKfpLewLmoEUgCDtwk=
Subject key identifier:   3F:45:CC:37:4D:94:86:95:D4:7A:8E:C9:7B:34:1E:B9:C4:0E:AC:3D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A52AC2C321F0744789EC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     19115
IP address blocks:        66.56.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:52:ac:2c:32:1f:07:44:78:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d669a2d5-1637-4951-9794-aff8e26fffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:75:36:cf:12:ca:4e:d3:79:11:18:b5:85:
                    b6:31:0d:96:78:16:95:a3:cd:2a:4d:e1:45:87:ea:
                    85:b6:1d:8d:41:c6:25:2a:07:22:e8:1e:d4:4d:43:
                    c5:44:b9:bd:ca:a4:db:57:eb:ea:75:9f:1d:b9:f8:
                    48:3e:1b:36:a8:5e:15:64:f0:69:ee:ea:36:1a:2b:
                    a9:c7:3a:9e:75:b6:2e:04:2a:d3:14:58:38:f3:a8:
                    5d:51:1a:f3:b0:02:49:6b:fa:71:c4:08:71:71:01:
                    be:00:40:b8:a8:e0:dd:8a:c0:0a:92:df:12:81:34:
                    b7:e3:5d:4f:af:5a:fb:81:c2:42:f6:7f:f1:b8:ba:
                    e5:e8:4e:93:d4:03:ae:97:50:90:1c:03:e3:fa:ef:
                    3b:f5:ea:63:eb:72:6f:30:30:2d:61:f0:38:34:9d:
                    1b:bd:81:38:57:64:4d:05:e9:5b:fa:65:41:b9:6a:
                    d7:46:55:80:80:ff:01:fc:3c:32:a8:c2:64:d3:e6:
                    23:ea:06:ab:00:c8:02:dd:1e:d0:a6:a0:d0:c6:d3:
                    79:d5:d5:25:7b:e1:33:4e:57:06:ff:d0:a0:22:5f:
                    e4:06:43:dd:9d:6a:e4:7f:b6:a7:da:17:c5:96:0c:
                    41:b9:84:b0:82:9b:61:90:bc:d5:0c:9d:1f:b6:dc:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:45:CC:37:4D:94:86:95:D4:7A:8E:C9:7B:34:1E:B9:C4:0E:AC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7bb6567e-fdbb-3a0e-be4f-f4c98c13fe7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.56.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:67:71:34:ee:a5:b1:19:e4:5b:ac:53:b0:28:49:18:1c:d9:
         d0:44:27:4f:95:05:3c:6a:e6:ec:5c:85:ca:ad:ab:2f:4b:dc:
         42:e0:ed:22:c4:07:2c:d1:a3:0e:de:fb:cd:19:f5:6a:8c:ce:
         f4:d3:97:31:9b:17:c1:52:f6:98:0f:16:dd:d7:51:67:38:51:
         68:b6:83:ec:c1:01:28:4f:1e:a6:11:3b:7b:66:ec:92:71:4f:
         47:26:35:10:9b:77:f0:bf:a3:85:ae:dd:4f:03:13:ee:05:01:
         5a:0a:02:31:f7:57:83:8c:5d:b9:7b:86:87:2c:90:4c:03:da:
         09:ea:16:a5:26:2b:49:3d:a8:37:5d:08:3d:e4:53:51:5d:3c:
         1e:70:70:a0:41:2e:08:40:b6:ff:dd:e5:16:aa:78:3f:66:95:
         44:b7:bf:56:34:5f:4f:e1:dc:fb:19:f7:8a:9b:13:7b:e9:c2:
         0f:2b:f8:6d:7c:88:80:df:27:38:7b:28:fc:0f:a0:87:4d:14:
         c3:08:51:80:1a:d5:47:80:79:c7:ab:a4:74:fc:c7:a2:f5:fc:
         c9:82:cf:d9:8d:21:73:77:6e:c3:6f:27:e7:c8:b5:87:a1:4b:
         0a:4e:42:84:f8:80:0b:9b:11:08:7e:6d:01:6f:33:a1:3a:bc:
         20:48:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:52:51 2025 by rpki-client