Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89c73584-8a52-39f7-bc87-489eb01ed9fd.roa
File:                     89c73584-8a52-39f7-bc87-489eb01ed9fd.roa (raw, json)
Hash identifier:          zNLMO0WPpmYrPaRAbdsKT6aM7rxsBVJLBqnUKeLy1w8=
Subject key identifier:   F4:D4:D1:DC:CB:BA:84:46:BE:4B:E6:AE:62:AD:70:EC:DD:08:1C:98
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD346899BC04CF247C280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89c73584-8a52-39f7-bc87-489eb01ed9fd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        24.171.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d3:46:89:9b:c0:4c:f2:47:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=7fa3db0f-1d38-47ae-ac74-ff4e4a5da336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:38:d6:93:3c:a9:4d:6e:44:4c:13:00:9b:
                    74:4f:25:d1:4d:2e:6a:de:2c:c4:68:bf:88:36:7c:
                    01:67:7d:16:35:23:5c:0c:ea:d6:f6:46:28:d9:d8:
                    97:53:40:1d:67:e8:1e:8d:c8:76:e1:ec:cd:f4:4b:
                    df:af:cc:1c:be:dc:4e:21:82:99:47:ab:a8:bc:6d:
                    ea:7a:8e:67:a4:2f:8c:9d:0e:d7:9a:42:06:c8:d9:
                    e0:92:17:3b:55:a3:3d:3f:17:c7:74:ad:99:86:46:
                    65:b6:41:f4:75:42:fb:16:a6:65:88:10:8d:54:6c:
                    c1:04:0b:0b:4e:b7:c6:5a:2b:2c:74:ee:3c:4c:87:
                    cf:47:6e:0e:95:c8:2f:e1:d9:5c:34:48:0b:d0:74:
                    1d:ec:81:4f:b9:5b:72:67:e5:37:24:c5:d9:ec:27:
                    e6:44:f3:7b:ff:3f:3f:3a:8d:60:1f:39:13:a8:76:
                    12:b3:1c:a9:f7:84:fc:8b:9c:00:e4:40:cb:ba:f8:
                    28:87:07:c2:97:01:55:fb:f9:ec:45:00:fd:0a:a7:
                    f6:dc:3c:b3:00:62:7d:c3:9a:e8:f6:9c:c4:6d:5d:
                    df:52:70:32:98:b1:97:75:32:03:b0:9f:33:c1:45:
                    1c:4a:f3:8b:fb:7b:26:82:5b:e3:71:bd:bf:4b:47:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:D1:DC:CB:BA:84:46:BE:4B:E6:AE:62:AD:70:EC:DD:08:1C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89c73584-8a52-39f7-bc87-489eb01ed9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.171.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:50:31:c8:0c:4a:c0:6f:25:48:69:5a:9b:92:70:24:e0:
         99:06:ce:68:71:41:f1:2c:63:1c:6b:42:02:66:0c:1f:ca:b4:
         00:c6:fe:2a:a7:0c:4f:3e:76:88:51:44:3c:e5:4d:dd:ad:f1:
         cf:fd:c2:1f:b6:fe:f8:04:d8:70:15:9d:52:5a:03:05:40:66:
         ff:b9:1d:b7:c0:22:01:43:5e:72:8c:bc:f3:b6:ca:0c:f6:a2:
         b3:cd:43:4f:4f:c4:76:30:ae:22:0a:d7:a7:2e:d0:46:78:e1:
         8f:2b:bc:88:3f:37:70:3f:a7:9c:37:49:76:81:9e:f6:c0:99:
         04:37:2f:3c:8f:7a:d3:2d:8c:94:08:71:6d:90:e4:a9:92:d6:
         75:84:ed:cf:73:6d:29:a0:fb:12:4b:70:f9:5e:19:36:61:55:
         1d:b7:fd:d4:b8:3c:67:2d:87:ce:82:42:4c:39:7b:f8:55:e1:
         a4:61:8c:52:06:61:17:c3:0d:30:68:46:2d:16:0c:ef:da:3a:
         5f:fc:05:f4:00:2c:be:35:11:ce:69:39:64:c7:0c:27:f0:e5:
         0d:8d:53:9e:13:90:45:ee:ef:33:70:1a:ee:d1:db:38:9f:9c:
         5d:64:6f:b0:06:f0:06:97:70:91:a6:e7:48:f8:d9:a0:1c:72:
         75:cc:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:58:22 2025 by rpki-client