Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
File:                     95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa (raw, json)
Hash identifier:          S0YePTi1+vXzuZ1TBYuzyGt7jocCgRop10iBmd2BaOA=
Subject key identifier:   59:F4:FE:C3:56:0E:A4:D8:99:E8:20:1C:05:90:39:54:52:D7:9E:45
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849AD1A0B68FFD6BB1512642ED8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     12271
IP address blocks:        24.90.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0b:68:ff:d6:bb:15:12:64:2e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=0f28ef53-c4e3-461c-a8f4-2683a665b376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:d7:75:de:ca:f7:3e:a6:c0:11:a3:2c:b0:
                    43:b7:92:06:fb:97:0c:7c:bf:92:7e:78:4d:ca:b8:
                    35:a3:3a:20:9f:f5:04:e2:42:1e:59:f2:b1:37:c6:
                    ff:7d:98:b1:57:fb:1b:bf:cc:f8:78:53:19:4d:29:
                    a5:80:f6:b8:03:fb:d4:2c:2a:45:be:58:56:d0:e3:
                    1a:6c:ce:9a:a3:4a:1c:f3:db:a4:d2:81:f0:d0:84:
                    2d:7a:89:f0:5d:bf:d4:02:3c:5e:2c:d4:42:17:6c:
                    57:5d:0a:48:db:6c:16:52:42:99:11:87:3b:a5:4a:
                    f1:36:a6:c6:7c:41:d7:fc:3f:ed:d8:b1:78:48:30:
                    c6:b5:4d:db:36:19:12:2b:43:d4:0e:3a:2d:d7:02:
                    c2:51:75:d9:2a:42:70:6f:88:5b:9c:64:0d:ec:9c:
                    f3:fd:92:af:5c:78:4f:04:3d:1c:25:5d:33:6d:56:
                    a2:59:b0:66:1a:a9:df:13:80:b0:bf:e1:40:5c:fb:
                    2a:f2:02:e5:86:ea:fd:fe:40:0d:75:60:57:40:5f:
                    9c:38:85:f2:88:2e:92:9d:41:c2:8d:26:a0:fb:2c:
                    e0:c7:0e:53:03:c2:71:d9:90:39:c2:c7:fe:5c:e8:
                    38:16:22:c1:58:50:c3:17:7f:21:8a:ed:f2:da:48:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:FE:C3:56:0E:A4:D8:99:E8:20:1C:05:90:39:54:52:D7:9E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/95c38fc2-cc4e-3d33-bd4c-9cc2b224452b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:de:63:b8:e9:42:f6:78:e1:d3:3b:f0:ae:6c:0e:8a:bc:
         10:b4:b0:3f:19:3c:be:1f:a7:78:a6:40:0e:82:d0:98:b7:aa:
         0f:80:01:e7:b7:cb:be:66:b0:7b:24:e0:e3:8c:e5:06:fe:55:
         64:23:b8:01:4f:47:11:45:ad:9f:a9:ac:9c:ee:1e:05:cf:aa:
         2f:db:bf:c8:21:30:da:32:9f:f0:f4:6c:73:05:3d:8b:cd:00:
         5a:5d:29:7e:90:36:31:fb:86:cd:f8:8b:39:e2:c9:72:e4:3d:
         b1:ea:2b:6f:b9:f6:1a:fb:80:2c:05:33:ce:f4:33:72:5d:7a:
         1b:04:01:ba:c8:77:08:67:25:e5:f6:43:c5:07:ea:da:3b:6e:
         d8:52:ff:c5:d2:f3:6d:23:cf:bd:1b:e1:fe:94:c3:be:d8:b0:
         b5:0d:c3:fc:16:c5:97:49:58:32:bb:97:31:73:03:c7:90:83:
         cd:79:df:fc:6e:3e:59:ef:69:18:cc:f9:40:13:67:10:29:ee:
         02:dd:2d:20:3b:d7:a4:28:00:a0:2b:58:19:bd:84:f0:ba:64:
         7f:fa:2a:e7:13:11:9e:b3:fa:cc:e7:bb:c2:bc:80:3a:24:af:
         cb:e2:c3:b8:f3:de:f9:df:f4:0a:47:26:8b:c3:7e:03:8d:ec:
         fb:1e:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:29:16 2025 by rpki-client