Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a169bbe-41fa-3c5f-8e42-a5ad8ccccbe2.roa
File:                     8a169bbe-41fa-3c5f-8e42-a5ad8ccccbe2.roa (raw, json)
Hash identifier:          RQNqzoLnNXhgt2hd2s3QCuJAu3/DCijtM6HzPdW0Wrw=
Subject key identifier:   03:F5:53:CC:EC:2C:FB:AB:13:FE:21:A6:E8:59:AB:C6:B7:D5:99:03
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ABB6991F288C4921F1760
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a169bbe-41fa-3c5f-8e42-a5ad8ccccbe2.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7843
IP address blocks:        107.8.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:bb:69:91:f2:88:c4:92:1f:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4c757458-1b7c-4281-be64-3f6186d85144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:db:07:86:85:9a:7a:14:16:90:eb:04:15:
                    5d:a7:8a:f9:29:e2:99:f6:2d:2c:d4:a6:b6:b2:7a:
                    a9:4d:3c:75:c4:0f:52:ad:2d:a0:5d:f9:27:76:a0:
                    c5:83:43:4b:e1:a5:1f:bf:8a:35:8b:28:ac:39:28:
                    01:2f:b2:c3:ae:14:ee:85:b7:eb:19:03:f3:b1:fa:
                    53:cd:46:91:a4:b6:bb:29:1d:12:37:3c:7f:c1:e7:
                    45:01:79:20:71:05:26:6d:4c:fe:8f:8c:ca:ef:4f:
                    78:8a:62:33:53:39:d8:5d:5b:aa:5f:a3:5b:75:e8:
                    a9:2d:d8:8f:db:08:27:ec:5d:57:56:4b:db:e9:35:
                    04:f8:cb:84:35:5e:d7:7a:c7:07:4f:ad:a9:88:02:
                    ca:96:5e:d9:82:46:05:7e:bd:47:1b:2e:5a:82:9d:
                    ad:06:71:48:48:3e:8a:31:2a:0e:82:f4:99:77:1c:
                    92:36:92:f8:0a:2a:0b:03:12:b2:99:97:cd:7f:88:
                    d0:04:7d:56:e9:c0:14:d0:fc:66:65:a7:e5:a5:11:
                    aa:bd:ca:69:62:d0:ba:86:86:1d:c9:7e:c1:b3:e7:
                    b2:0a:78:bc:eb:b6:ae:86:70:ff:e7:e4:41:b3:5f:
                    9b:44:29:46:74:9d:53:5a:1b:51:98:14:3b:ad:e7:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:53:CC:EC:2C:FB:AB:13:FE:21:A6:E8:59:AB:C6:B7:D5:99:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a169bbe-41fa-3c5f-8e42-a5ad8ccccbe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.8.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:e9:b5:df:b0:d1:18:48:79:92:df:c8:3c:c3:df:76:28:
         16:fb:ab:55:f4:68:ee:5f:49:70:e8:a5:01:03:c3:41:c2:7c:
         1f:15:c8:94:19:0e:50:21:80:72:e6:6b:03:2c:56:bf:85:52:
         60:3d:34:ff:79:43:24:a6:19:79:98:d2:16:f6:70:30:f1:a3:
         2f:83:17:83:f7:0f:0c:3d:f4:07:41:48:80:85:82:a1:cd:a8:
         37:c3:5d:46:14:7e:57:a9:b2:e2:8b:25:a3:41:3f:d7:f9:2e:
         14:22:fb:5e:e2:fd:23:fe:9c:d2:3a:85:41:39:5c:37:e2:5b:
         91:4c:00:d0:19:27:fc:99:ec:2c:47:68:b6:2f:d9:5c:cf:e8:
         b8:c2:39:20:aa:c6:7a:7f:f4:f2:1f:7e:98:0c:40:7f:05:bf:
         e6:11:97:c0:71:47:9a:85:ca:4b:b8:88:10:f3:72:4a:9c:78:
         0f:3c:e4:f8:52:16:f6:b7:90:c5:33:6f:6f:bd:2e:da:87:da:
         17:70:cd:f1:09:21:bb:48:ec:bd:15:25:12:7b:a6:38:02:3a:
         ba:a8:e1:c2:a1:ac:93:75:13:83:de:c9:24:ce:7e:38:ab:0c:
         4f:86:7a:4d:4e:d2:92:8f:a7:50:c8:da:3c:a7:f8:6d:e8:f4:
         eb:c1:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:39:37 2025 by rpki-client