Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa
File:                     86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa (raw, json)
Hash identifier:          ufRunRLn6NNrJ+/zAyxV6tKV4zamg+ZIZgAWNJOhgMc=
Subject key identifier:   6E:5B:15:07:DC:5D:0D:FD:41:10:21:DD:BE:2E:96:A4:1B:5C:01:BC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A50CF264AF9242A4DC500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14065
IP address blocks:        68.168.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:50:cf:26:4a:f9:24:2a:4d:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c5b94f57-5b41-43ab-a952-d6a9111cc2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:98:51:03:c7:cd:05:6b:6f:8c:43:92:4e:7d:
                    ca:ba:20:f0:ec:a0:37:0d:5a:31:90:fa:30:32:c2:
                    f3:92:30:a1:0b:f8:20:72:26:46:d8:98:a8:9c:16:
                    d1:f4:d8:a8:c3:62:a3:0e:3b:ef:c6:ea:11:b9:e1:
                    51:a9:2e:e6:12:8e:59:49:de:42:a1:a6:48:ea:71:
                    07:18:99:ac:16:1a:26:69:ae:9a:ae:30:90:cc:04:
                    03:4c:95:67:c0:33:fd:ce:c9:08:38:99:99:5b:40:
                    ad:91:b6:8a:66:be:5c:7c:cf:6e:56:58:a1:9e:af:
                    54:b9:e0:51:f7:33:6f:b1:fa:97:d3:8d:83:d0:7a:
                    a8:9e:09:be:86:6e:7e:d6:c6:1d:36:dd:3b:e4:d1:
                    34:a5:31:92:9f:c1:ed:e5:3e:11:99:59:ad:2d:eb:
                    07:5d:40:f5:70:41:3a:75:f1:db:68:0c:d1:db:9b:
                    87:d2:00:57:59:07:d6:a3:f6:82:60:5c:40:21:17:
                    0d:59:a7:91:d0:44:98:24:4b:7b:6a:64:70:98:94:
                    6e:a4:bf:6e:f3:c1:8c:60:b4:2c:4a:02:ee:18:9d:
                    2c:ac:0f:48:7c:09:99:f5:c1:7c:d6:2b:09:46:f4:
                    45:02:32:35:c0:fd:50:76:22:3f:28:2a:fd:55:bb:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:15:07:DC:5D:0D:FD:41:10:21:DD:BE:2E:96:A4:1B:5C:01:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:a1:50:b5:bd:dd:31:83:b6:52:28:37:61:00:2e:e1:8e:
         24:63:ac:24:d3:6e:aa:c6:e9:ab:ac:97:4e:84:7f:a2:1f:e7:
         a6:32:6c:1b:9a:ac:62:6a:6d:9e:be:b9:4a:ac:ca:11:10:38:
         3a:58:f2:02:58:8b:18:2f:92:a7:7e:97:ec:6a:17:dc:f7:7d:
         eb:49:23:c8:ee:a6:34:6d:d5:52:f5:dd:35:bb:6b:c7:2e:e7:
         ed:0e:29:ee:95:b8:8f:9c:75:a0:a3:de:ea:6e:1d:ac:0b:8c:
         9e:8d:a3:9b:e9:46:f5:98:2f:17:93:2f:bc:48:c7:b2:8b:5d:
         c4:3a:54:9f:71:eb:ae:97:01:80:01:bc:ea:c3:d3:5d:2d:f9:
         e7:de:85:12:49:46:a6:41:8f:67:b1:a4:3a:55:41:89:8e:8a:
         60:70:33:19:be:66:6b:2b:b8:8f:0b:fb:3b:a7:7b:0c:48:e2:
         02:97:3d:b0:a9:37:85:0c:4d:79:00:ea:f2:d9:05:6f:ec:79:
         b0:f8:3c:6e:8d:c1:90:4f:fa:14:66:dd:13:45:e3:d2:25:50:
         42:1e:1a:5d:b5:20:96:49:6e:9c:ee:23:73:ab:00:e0:8b:2c:
         f6:48:63:9e:94:3f:3d:08:a0:62:7e:56:9f:66:b4:72:98:08:
         1b:d0:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:05:05 2025 by rpki-client