Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9db9f1a8-ef62-3ef1-b86f-229687b325e7.roa
File:                     9db9f1a8-ef62-3ef1-b86f-229687b325e7.roa (raw, json)
Hash identifier:          o2q2NiN+Kn36c3+BZ32Xi3/dlf5vJQYFDYX9sj4+4rI=
Subject key identifier:   90:0C:D8:0E:2A:27:DD:54:03:F6:94:B3:8C:9B:CF:C2:FB:24:11:7F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4534F8E7407C0CE70200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9db9f1a8-ef62-3ef1-b86f-229687b325e7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        24.172.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:45:34:f8:e7:40:7c:0c:e7:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9402edcb-3047-4928-be46-936d8fc24460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:66:5c:38:f8:32:e3:10:07:fa:97:4c:89:
                    eb:d7:89:58:e6:93:16:c4:bd:19:63:94:41:61:81:
                    78:92:db:52:39:70:da:25:80:5a:31:5e:8b:45:86:
                    e2:3b:1b:c6:35:72:a7:be:e7:b8:ab:5f:04:33:1a:
                    e1:91:a6:b0:65:f3:0c:3a:96:7d:76:7f:62:20:51:
                    51:4f:4e:56:81:ea:4d:97:51:0f:5f:53:d0:fd:1f:
                    3e:bb:05:64:13:ad:06:29:4c:40:66:da:11:6b:3a:
                    32:2f:84:8c:7f:e9:27:e9:1f:f8:60:40:5d:e6:29:
                    2f:8d:74:65:ee:2f:fe:cc:f9:a8:53:26:a7:38:5f:
                    03:f8:31:95:8d:13:92:82:80:9e:d5:4f:8a:20:0d:
                    3f:8a:59:8d:10:95:fb:34:b7:8b:f9:40:42:97:f3:
                    3a:db:3e:aa:a8:d9:69:a9:81:00:58:89:29:6a:77:
                    59:e2:f7:f2:9a:d6:9d:2c:d0:d4:2d:d6:b6:a0:97:
                    15:1e:97:ad:0f:b6:62:27:54:5d:38:d2:74:f1:f1:
                    0d:19:7d:61:a4:7c:ed:f2:36:72:f6:65:6b:0c:7f:
                    2d:08:3b:6e:01:31:25:18:30:45:98:3c:03:ac:df:
                    16:56:bb:14:6f:9f:ef:3b:28:52:48:cb:17:8b:60:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0C:D8:0E:2A:27:DD:54:03:F6:94:B3:8C:9B:CF:C2:FB:24:11:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9db9f1a8-ef62-3ef1-b86f-229687b325e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:57:ad:4f:bf:44:98:a0:a1:97:6a:86:8a:48:d2:3d:7c:37:
         df:a0:97:f9:4b:42:cd:2a:20:e5:2a:da:a9:06:69:53:6a:6e:
         26:51:28:bc:d1:60:a7:64:eb:61:3f:51:84:1e:a8:ba:9e:5f:
         9d:01:20:d3:ea:bb:26:5b:17:25:7e:18:11:a2:37:25:ee:63:
         ee:8e:4f:1d:26:97:62:ef:9b:72:a9:6e:66:63:8f:1e:0c:bc:
         b7:2b:cc:47:96:a4:55:84:21:ee:86:bc:71:31:15:c8:a7:af:
         24:b8:17:2e:3c:1c:22:c7:c2:bf:bb:37:d8:55:80:7c:7e:5b:
         77:d1:17:66:3e:7a:f8:c3:f7:6c:ac:13:1d:1d:8b:69:29:bc:
         ed:38:5a:89:4a:35:e1:cd:9e:36:8e:f2:1f:11:e3:c3:f7:cf:
         53:fd:da:fa:5c:00:ff:6e:c0:ba:c9:b1:da:4a:6a:07:28:4c:
         bc:06:56:f0:11:c1:88:91:c1:ad:68:d0:d1:60:c2:d0:0c:7e:
         00:fc:a7:20:ec:cd:07:b8:a5:92:a5:2b:75:98:1d:c4:b1:8c:
         3d:d0:b4:c4:fc:98:e1:ce:9c:06:31:c9:17:bc:34:ae:1d:e7:
         ce:84:be:a2:0f:d8:b5:7a:95:39:8d:07:48:ee:9a:17:e5:2e:
         0d:49:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:53:45 2025 by rpki-client