Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa
File:                     83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa (raw, json)
Hash identifier:          SlAdhkCSLV80NrUKvgEXm6bLBIiA3S+kLpZapmHd8IY=
Subject key identifier:   A3:65:C4:12:B7:58:6B:50:53:DF:6F:B9:E4:0E:45:ED:CD:BE:BC:6C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A334B55640C96AA01D5C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.123.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:33:4b:55:64:0c:96:aa:01:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3ed02bcf-ad02-4ff3-a03c-0c326818897e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:8f:f4:ef:15:0a:b6:86:30:cf:e1:e0:ca:
                    50:ed:cb:71:a4:63:31:3b:50:ac:10:d9:68:d7:07:
                    aa:f2:8b:5d:44:3c:67:08:6b:17:ad:d7:98:d8:ca:
                    86:fa:0d:ce:3f:ef:07:d9:48:4a:9e:b3:98:04:40:
                    9a:96:e1:ae:3f:3e:a1:eb:ec:cd:2b:89:9d:93:79:
                    52:05:00:d5:7a:ee:7d:1c:2f:d4:1e:dd:de:86:1d:
                    02:a1:d8:02:b9:d4:db:99:40:ae:0a:0c:ea:ae:c5:
                    d5:78:7a:85:a0:6a:cc:38:3d:ba:ad:ab:33:af:7d:
                    e2:9f:aa:0b:3e:8d:3d:f3:46:ee:e7:0f:1d:a4:c3:
                    5d:89:2c:f7:38:51:b6:29:24:b0:20:81:cf:bd:57:
                    32:3d:2d:f3:ca:ad:47:c7:e8:0f:45:4c:bd:37:20:
                    d0:31:7e:f9:74:df:1c:74:df:f1:fe:c6:a6:c9:a5:
                    7d:ed:5b:67:ef:68:5a:8d:45:17:e5:2c:39:b5:6a:
                    d8:f2:43:6e:a2:df:07:54:4c:aa:93:59:67:85:e6:
                    30:4e:c4:2c:68:e3:8a:cb:4d:7b:4e:bd:27:ca:13:
                    65:e2:11:cf:ba:6b:32:91:e2:23:a9:93:67:c1:18:
                    63:d0:f9:1a:b7:36:dd:2b:13:68:3e:22:bb:ad:cc:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:65:C4:12:B7:58:6B:50:53:DF:6F:B9:E4:0E:45:ED:CD:BE:BC:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:8f:d6:d6:e3:a8:0c:3f:51:46:72:b4:e4:a3:94:e6:32:
         31:a3:21:fc:40:b9:a8:0e:b0:61:e4:b1:e2:ae:29:22:31:71:
         f2:fe:8c:94:3f:b0:4b:5b:b1:90:79:f2:52:ca:39:d0:43:d8:
         ab:f4:d6:ac:7a:c2:65:20:b5:31:03:87:e0:62:d9:9f:9a:04:
         85:40:7b:c5:a1:7c:28:0f:0d:c6:d3:23:c1:e6:88:e6:39:a2:
         af:c4:e7:4d:af:ba:b7:c0:fe:7a:7f:ba:f6:29:30:12:4b:64:
         00:70:2a:d2:c5:79:95:46:b1:ea:a0:9f:34:61:9c:a4:c8:15:
         11:9b:d1:dc:d8:20:43:6f:c4:d3:8b:38:c8:3c:97:65:b5:bf:
         27:03:af:92:03:12:7c:a1:d6:69:57:f2:44:be:d6:fe:b7:09:
         3a:5b:2b:4f:9c:0e:b7:e2:c6:3f:12:c9:c5:18:fd:0c:56:7f:
         73:65:06:a6:84:15:a8:5c:c7:b9:41:a0:cd:0d:81:c9:0e:a8:
         c4:56:5a:f6:bc:46:80:b3:c6:e0:09:dd:2c:93:eb:0e:c9:ee:
         ad:06:33:c0:5e:f9:c8:45:a6:67:dc:7d:fc:6b:18:db:d1:ed:
         3b:79:f5:ea:ee:95:77:9f:f7:00:2f:46:51:e5:ef:73:ba:bd:
         9c:c7:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:09:16 2025 by rpki-client