Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8454d6cb-4921-37ac-bd36-cca7f75c5fac.roa
File:                     8454d6cb-4921-37ac-bd36-cca7f75c5fac.roa (raw, json)
Hash identifier:          hXAeZMyQYnwIzA/UmqMuzdU3gWgB4/CU0KtPLO7PCYw=
Subject key identifier:   BB:DF:6E:07:8E:B9:74:84:D7:D6:32:B5:70:5B:7E:44:87:41:AF:97
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE0C18657591F5EC6A180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8454d6cb-4921-37ac-bd36-cca7f75c5fac.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        172.88.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e0:c1:86:57:59:1f:5e:c6:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=6640ed2e-1fc1-432e-aa29-f1ac6ec3fef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:6a:ed:a5:f3:82:7b:56:1a:92:66:c4:dd:
                    1c:90:1b:ef:2b:9d:43:5c:f5:6a:50:eb:e6:e6:ac:
                    d8:e7:1e:15:d2:92:e5:d5:d8:7a:02:d2:8f:c5:c3:
                    c1:86:16:7d:88:68:0b:e3:12:4a:0c:d4:39:21:06:
                    d1:a3:ce:8e:b7:8d:a9:57:d3:76:cf:c6:ed:f7:a3:
                    09:aa:da:b9:bb:de:39:e9:4c:fe:3b:4f:43:a6:33:
                    55:00:f6:3b:0b:f2:01:65:c6:9b:df:04:aa:ef:4f:
                    f2:ae:ab:d1:36:11:3b:15:70:9d:1f:6f:81:c6:1c:
                    f2:7c:13:8b:87:4b:50:62:e8:22:ed:92:77:47:96:
                    a5:27:b1:5a:41:1f:54:1f:18:32:b2:d6:57:d7:fd:
                    59:8e:d4:9d:98:aa:f5:7e:69:f7:08:0d:6c:0b:80:
                    2e:8d:8c:d8:35:15:95:bf:e6:4a:72:55:c4:b8:23:
                    46:cb:4b:cd:70:48:f5:ad:31:71:35:f0:72:65:06:
                    f6:9a:41:de:25:13:27:d0:ea:04:f1:ca:3f:5a:87:
                    94:0b:a2:12:a0:a4:3a:bd:b6:56:2a:23:a4:36:ec:
                    90:cc:c5:94:02:00:6d:22:2e:de:4e:fb:1e:f4:ca:
                    d1:d2:39:80:c2:a1:bb:07:99:bc:ef:06:52:57:97:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DF:6E:07:8E:B9:74:84:D7:D6:32:B5:70:5B:7E:44:87:41:AF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8454d6cb-4921-37ac-bd36-cca7f75c5fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.88.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:84:ee:8a:f5:88:65:72:af:60:3b:a7:ec:9f:af:51:24:31:
         31:d3:72:b8:c8:98:c3:a7:2a:bf:16:72:7a:3e:de:6a:80:eb:
         0c:6a:9b:35:22:27:5f:f5:90:53:de:0d:1d:dc:2d:07:0a:24:
         7d:81:df:7f:91:c7:a4:76:53:50:39:86:07:48:f1:6b:4a:ee:
         b0:94:7d:44:83:f1:ff:17:d9:c8:6a:bc:14:87:94:82:7c:de:
         d4:10:ac:ab:64:e9:88:23:66:e2:63:01:12:8a:43:d1:81:39:
         e4:dd:c9:d7:5e:af:db:b6:76:69:ec:2d:e2:c6:0b:78:7a:02:
         94:07:97:e2:a1:19:6c:9c:69:18:5f:54:ee:12:ed:e0:9c:7a:
         b5:d6:d9:61:ec:8c:58:6e:22:59:52:96:33:07:fc:d2:d4:fd:
         51:4c:c6:5c:07:5d:13:e2:b5:90:cb:14:80:a8:81:40:b1:30:
         d3:db:e9:23:c9:fa:7a:5c:a2:0a:fe:0a:c6:0c:da:e1:ae:c0:
         88:a5:48:a0:9a:df:2c:c9:36:6c:b4:f3:d5:ad:ca:c1:0f:ae:
         f4:84:42:b4:5a:d8:96:f0:40:74:32:12:82:78:e7:4f:f5:14:
         0f:5c:63:36:ba:8b:b8:f0:ae:06:08:4d:ca:f6:b3:1c:48:ef:
         34:40:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:17:29 2025 by rpki-client