Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/824b436a-9c1c-37f3-9476-b3f17c9b135a.roa
File:                     824b436a-9c1c-37f3-9476-b3f17c9b135a.roa (raw, json)
Hash identifier:          wH223Cg9fPyvAiI3fLsYhPPv+hmPFp6x9lHZYdzqGT4=
Subject key identifier:   AA:7C:AA:D1:87:02:DB:32:FD:A3:9E:F7:39:2F:39:38:34:7A:E6:CE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ADFA60798EDC117690900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/824b436a-9c1c-37f3-9476-b3f17c9b135a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16787
IP address blocks:        24.24.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:df:a6:07:98:ed:c1:17:69:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=946720e1-f74d-4537-8b5f-115d621de3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:44:3e:53:a5:41:82:46:ce:55:95:13:cd:
                    65:9b:92:da:83:d3:f6:8a:3c:7f:43:99:bd:ca:27:
                    86:5d:12:7a:cc:39:ad:e2:dc:98:4a:dd:f1:85:02:
                    be:b3:b3:ee:b9:1d:b0:b6:15:e3:d8:c7:7f:1f:ae:
                    a8:58:8c:95:eb:40:04:18:63:b0:ff:f7:25:fd:f9:
                    00:32:8b:5c:80:94:c6:5c:df:c1:07:dd:38:02:0c:
                    ea:ba:d8:80:e4:60:df:39:3c:fc:14:e2:62:ae:a8:
                    cf:4e:c8:fc:45:03:58:66:e9:06:27:ba:a0:4b:aa:
                    9e:4e:e1:fc:27:da:64:94:16:4b:fa:c3:db:7f:78:
                    f2:ab:f5:e0:bb:82:7f:4f:69:39:41:18:cd:2e:51:
                    76:14:4a:bb:2a:27:5f:53:04:52:62:f9:b0:59:0b:
                    c9:5b:d8:26:78:37:27:c4:b0:26:35:5d:7d:9f:57:
                    91:7d:8a:c8:0f:c0:53:8c:13:0a:c1:b6:5f:cf:8a:
                    3d:56:b0:d7:ca:aa:11:10:f8:d1:f1:50:b2:a9:17:
                    00:7d:26:d5:7f:de:d4:96:6c:33:68:09:4c:c3:97:
                    fd:83:a7:6f:76:7f:05:11:20:e2:44:7a:50:21:3d:
                    e6:f3:b7:da:62:12:52:76:99:a7:33:91:b1:3a:56:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:AA:D1:87:02:DB:32:FD:A3:9E:F7:39:2F:39:38:34:7A:E6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/824b436a-9c1c-37f3-9476-b3f17c9b135a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.24.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:fe:96:f7:46:c4:76:4d:ad:df:f5:5b:ef:7b:4b:9c:a3:
         51:d0:cc:ca:3f:c3:d6:f0:99:f8:c2:75:13:ab:44:75:51:94:
         72:ae:03:be:72:52:b3:9c:12:df:b8:a5:e2:6f:d3:dc:2a:2a:
         1c:e6:d2:07:d1:59:01:05:08:50:5a:f0:97:af:4e:53:61:0f:
         8e:62:fb:01:a8:39:04:dd:8e:5c:63:c4:88:9b:9e:5f:75:dc:
         48:df:7f:74:f2:52:e2:22:5f:33:6c:c0:b8:88:bc:61:ff:c1:
         8f:cc:f8:ad:ba:f7:ea:36:f4:0f:a3:3f:dc:de:72:e9:94:75:
         16:f1:e2:1f:ac:30:6e:3c:d1:f3:99:9a:a5:54:09:3e:94:6c:
         bd:66:11:ec:e0:a8:b3:49:44:fd:e9:ec:c9:12:9d:81:0f:3f:
         58:32:a1:9e:22:0b:01:44:e9:47:6a:08:59:bc:6d:e0:0b:56:
         90:af:39:dc:34:16:9d:cd:2a:dc:5d:72:a2:3b:50:e1:ed:9f:
         0f:3f:2f:5d:0b:ea:26:20:38:65:15:c0:1d:69:9f:7e:71:55:
         f4:cc:0d:84:0f:06:b7:3d:85:ab:a3:ee:cf:b8:93:3d:01:5f:
         9c:5f:aa:bb:7b:9d:17:7c:20:36:87:33:11:b8:85:4b:1e:a6:
         34:98:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:38:32 2025 by rpki-client