Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa
File:                     8fc3434c-d2ec-354d-b65b-901fe926927e.roa (raw, json)
Hash identifier:          8Gf0D/zKIu+O72isvBmjBxmonfVlOqaqS5ncN0HOpfc=
Subject key identifier:   23:38:68:61:21:99:F2:39:95:D8:C6:73:A1:00:6C:83:AE:42:79:2C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ADF77EC08C425E0F7F790
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16787
IP address blocks:        2001:1998:6f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:df:77:ec:08:c4:25:e0:f7:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a59bab6c-4d17-4ed6-94ac-37a62e8b825d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:e8:ef:f4:9d:ac:ed:1f:e8:ab:89:e9:66:
                    d8:12:f2:a3:af:c3:f5:f1:65:0f:7e:fe:ac:bf:dc:
                    e8:f5:6c:39:c7:47:c8:85:9d:f7:cb:f3:f4:e8:43:
                    40:fd:8e:a3:83:2b:a0:09:3c:d3:c1:7c:71:60:9c:
                    be:e5:21:56:a9:b3:34:64:bb:cd:5b:ce:d6:8b:a7:
                    2e:22:f2:ad:7e:2c:09:67:c3:ce:e0:2c:10:8e:de:
                    ba:4a:1c:99:75:77:76:62:d0:7c:5f:76:de:16:bb:
                    2b:e3:fc:4a:c2:d6:17:66:ff:3b:98:74:f6:fc:51:
                    1c:4d:2e:de:0b:80:f7:41:f6:7f:d4:72:9a:da:f7:
                    8e:9f:f8:87:b9:78:06:a4:af:15:63:5c:e4:12:4e:
                    d0:63:bf:e6:99:01:63:87:ea:99:98:7a:b8:e2:97:
                    12:cf:29:2e:f3:6b:14:cd:c1:1a:0c:2c:e0:a6:12:
                    61:e3:21:47:dc:57:e4:4a:fe:df:fe:7a:a6:8f:ba:
                    51:c5:82:92:78:0c:73:6d:59:c5:f0:86:b7:db:82:
                    58:d5:00:ea:06:88:81:97:3f:be:ff:a1:5f:ad:88:
                    ef:86:97:a0:49:ac:51:e8:48:07:0b:0d:3e:bc:5e:
                    18:df:84:01:bb:1c:4b:d0:f0:56:3e:98:df:54:ca:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:68:61:21:99:F2:39:95:D8:C6:73:A1:00:6C:83:AE:42:79:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:6f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:56:2d:c3:70:88:3f:65:77:3e:cd:4b:e5:0e:a0:72:0b:db:
         a6:78:43:4c:34:18:20:92:6e:00:24:a2:fb:4f:29:6f:d0:64:
         1a:2f:fa:bd:3f:ab:c0:d2:8d:3d:6f:77:56:dc:37:39:6a:ee:
         e5:c9:ac:6e:c1:00:54:62:96:26:f4:80:1c:b2:96:2f:17:76:
         d3:bc:a5:9b:4c:97:84:c1:4b:12:c3:a9:f5:4a:97:ce:35:e7:
         79:63:d0:52:c8:4b:d3:08:0f:88:7e:93:df:d0:73:13:2e:78:
         19:d1:39:43:eb:ed:af:36:2f:0f:0a:26:35:fa:85:1d:88:77:
         ef:27:e5:43:a7:36:b8:40:2b:28:8e:da:6f:01:60:18:b5:ed:
         77:25:6b:f9:ff:5e:f8:c1:df:7a:1a:ce:bc:f7:80:7b:02:8b:
         bd:c6:c2:15:28:0f:8a:6b:56:34:dd:06:2a:94:14:54:74:48:
         57:f9:76:ae:f8:ed:25:88:dc:b9:88:4c:e4:ea:80:a3:b3:7a:
         87:f8:c1:7d:71:9e:9c:39:1e:4e:50:6d:b2:5d:45:ce:53:74:
         bf:c9:f1:4f:d9:5a:e3:21:de:df:81:c4:2d:a3:dc:de:9d:cf:
         16:3b:00:89:eb:d1:ab:d6:b7:ee:c3:10:cb:8f:45:90:75:48:
         c1:1f:a8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:40 2025 by rpki-client