Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa
File:                     7c65a23e-58ec-359f-9580-5b320652aa9d.roa (raw, json)
Hash identifier:          vWm40aS1lsErNeUp0e+7mZ7K1d1okBZXBav6mUsFsHs=
Subject key identifier:   79:43:C6:C0:03:3D:E3:E8:7E:71:8E:27:A3:62:5F:48:5A:7C:92:D3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4749D85C1A2402B33580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        24.166.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:47:49:d8:5c:1a:24:02:b3:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=12f6e0d0-2497-4365-a21f-41ca533fe89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:73:9d:b8:09:a0:53:ee:f5:e1:93:77:f0:
                    59:50:92:d2:8d:4a:01:1d:61:3f:12:db:42:5b:25:
                    01:bd:9c:c2:e2:00:30:cc:2e:b1:77:6b:06:05:13:
                    e1:81:b7:86:05:5c:e4:0f:ba:f9:fc:8b:99:12:0b:
                    26:b2:41:9c:0d:43:24:0a:a6:21:d2:e8:87:47:07:
                    49:c9:df:05:bb:20:0c:4a:10:29:45:68:ed:89:6a:
                    35:57:c4:58:fd:64:05:86:95:df:1e:11:a7:45:79:
                    07:4c:20:66:01:cf:55:b3:0d:68:2c:8d:72:6b:ed:
                    06:39:e9:39:d8:bd:fa:21:11:8d:bc:41:f7:82:65:
                    5e:1b:1b:f3:71:45:28:41:5c:40:94:a2:5c:a1:af:
                    8f:be:14:95:2a:e0:b5:cb:a6:91:3a:93:ba:ba:de:
                    02:94:45:89:7c:9e:3f:81:5b:b8:89:e5:0c:12:2f:
                    35:fc:d5:ae:8a:bd:cd:3f:68:b2:c9:ee:a7:60:64:
                    2b:37:18:27:0f:b4:cb:e3:24:74:a9:6c:77:4f:ec:
                    7e:66:3a:d1:a2:68:2c:e3:05:b9:c3:22:02:6c:d3:
                    af:ef:48:a3:93:74:d3:54:58:bc:00:49:c0:39:74:
                    59:5d:78:84:00:d4:9a:7d:32:61:ff:7f:7b:09:ae:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:C6:C0:03:3D:E3:E8:7E:71:8E:27:A3:62:5F:48:5A:7C:92:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7c65a23e-58ec-359f-9580-5b320652aa9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:de:2f:e4:8f:62:46:f5:0d:3f:b1:37:0a:24:d7:c5:34:4b:
         ef:45:40:87:cf:ae:e3:a4:bc:bd:dd:8a:a4:07:33:21:8c:e1:
         53:b8:e9:46:3b:18:c8:13:44:80:62:4e:e3:34:63:24:00:4b:
         e6:c3:ba:7c:e9:84:1f:04:0c:a5:46:c0:0b:72:8e:c9:7a:06:
         7e:7e:2f:ca:90:98:90:d8:23:7c:d5:c5:51:e5:ed:6b:f1:60:
         0d:50:bb:05:29:73:7e:d6:be:61:f8:3e:43:31:90:85:44:62:
         95:95:ef:3b:80:d5:69:ab:ee:37:20:06:70:3a:a8:7b:d2:62:
         e7:ce:09:05:33:17:03:68:b4:59:ef:2f:df:04:96:a3:ad:dc:
         f3:d7:47:fd:cf:c6:6c:68:d9:0c:07:1e:9d:fb:95:fe:57:cf:
         5f:15:d9:4b:0a:df:42:9d:dd:57:1e:cc:00:d8:7a:c9:76:28:
         47:4d:62:b5:30:ec:ed:7f:ea:7b:78:68:e3:fc:56:78:b2:94:
         76:bb:20:07:80:be:dd:13:78:85:69:02:3d:bf:3e:27:af:04:
         56:36:49:06:8f:f8:fb:b5:eb:a3:1f:bf:e5:53:2c:e2:8a:f3:
         be:87:d0:f1:20:0b:ad:81:3f:60:9f:44:a8:5b:2a:f5:da:19:
         76:03:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:34 2025 by rpki-client