Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8972c0d1-6d3c-35a3-ad72-b153f35f444e.roa
File:                     8972c0d1-6d3c-35a3-ad72-b153f35f444e.roa (raw, json)
Hash identifier:          T6NLm1fER4fuRxWYza7ZK5mOk3apuJNJ36c2+aiGk/s=
Subject key identifier:   01:E2:76:AA:36:E7:DE:3D:A6:B0:8C:AD:A2:FC:F9:4A:8D:F0:A4:EE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A5BEE3DC045D52BE19600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8972c0d1-6d3c-35a3-ad72-b153f35f444e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        76.166.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:5b:ee:3d:c0:45:d5:2b:e1:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=48602cf9-d40c-4ff3-b930-d741e43651ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:64:6d:38:c3:e5:25:cf:4c:ab:d5:f6:32:
                    0d:93:68:96:b8:1a:78:d6:91:ad:95:30:6c:e9:b9:
                    d4:33:21:82:4c:e0:de:e6:7d:8b:13:f4:ad:dc:a3:
                    c6:ba:83:44:f6:c1:0b:e6:c3:6e:7a:59:a4:b3:db:
                    9c:8b:7f:64:11:3a:52:9f:48:28:a3:9f:41:81:e6:
                    df:d6:1f:a5:ec:b9:de:73:f4:29:99:9d:40:19:b7:
                    29:aa:dc:7f:78:cc:3f:b6:f5:cf:74:a3:f3:58:8a:
                    51:32:3b:51:28:04:c6:8a:07:6a:2a:e7:bc:37:25:
                    d6:78:5d:5f:24:de:b8:66:4a:76:fd:3a:6f:0a:01:
                    6a:52:d2:82:ab:b9:72:09:83:63:bf:2a:5b:a5:3f:
                    97:66:1c:85:17:92:0d:68:a7:bc:a2:08:75:98:f7:
                    71:b4:c7:4e:3e:84:2f:84:b1:36:24:c3:4d:fd:42:
                    ea:75:51:b4:6d:b9:17:33:c7:a6:dd:17:a8:fa:08:
                    12:8a:26:da:0b:6c:46:70:fe:e0:0a:28:bc:7f:7b:
                    b7:62:d0:97:45:92:77:e1:25:3d:3e:39:c9:95:50:
                    e0:cc:74:b0:c9:ab:d2:f1:41:c7:3b:9c:ec:5d:da:
                    cf:a7:b0:b6:71:e5:d6:a0:75:c1:d1:6f:d5:57:4c:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E2:76:AA:36:E7:DE:3D:A6:B0:8C:AD:A2:FC:F9:4A:8D:F0:A4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8972c0d1-6d3c-35a3-ad72-b153f35f444e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.166.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:5c:83:6b:50:4f:1b:fd:8f:49:08:6e:10:cd:68:3e:42:
         23:ba:24:5b:b5:9f:4e:f8:d6:4c:fb:60:9d:3b:23:70:53:00:
         97:91:ad:d3:d6:11:80:5e:ff:bd:98:b9:84:ef:ac:7b:ba:2b:
         8b:a4:9d:90:1d:cf:3e:5b:cf:06:1b:c6:6e:0f:c7:8d:68:44:
         b6:10:a5:3c:7e:0c:9e:59:96:a2:77:8a:f4:45:ea:c8:ce:5f:
         02:53:ae:7b:26:d7:84:23:2b:eb:6a:00:e7:b5:47:05:8e:1d:
         86:df:9b:a7:1c:13:35:38:6e:f5:90:bf:8d:e9:0a:7f:c4:e7:
         2b:60:df:89:7b:07:1c:8a:22:2e:0e:cd:c5:3e:d1:f0:5c:4f:
         cc:07:e3:94:e1:e5:9a:07:da:c5:b6:2f:67:37:81:29:a4:5a:
         d1:29:79:f9:d3:84:a5:0e:dc:e7:b1:ce:76:f9:af:b2:84:3f:
         39:1a:e1:7a:33:20:ec:38:ae:ce:bc:59:31:42:fc:71:ec:91:
         09:40:f1:f6:4a:dc:06:0b:49:2a:76:33:6c:7d:80:45:95:ae:
         6a:ff:17:02:71:3f:d8:fd:9d:e3:fc:d4:1f:39:75:82:8a:5d:
         6f:5a:99:e3:f6:a1:11:7b:e6:da:da:8c:c2:22:6b:ee:2c:66:
         0e:54:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:00:38 2025 by rpki-client