Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f8b7476-9967-30ee-b11b-f008a0bf4978.roa
File:                     9f8b7476-9967-30ee-b11b-f008a0bf4978.roa (raw, json)
Hash identifier:          kA5lUKLkV6gAFjbTKZLwBaGGhU5nYMFCN/I8mta3nAM=
Subject key identifier:   44:7C:B4:6C:35:C2:7F:44:2A:DA:80:F2:53:29:12:03:2E:47:7F:5A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD6F9095606EC293E7040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f8b7476-9967-30ee-b11b-f008a0bf4978.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        65.26.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d6:f9:09:56:06:ec:29:3e:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8cd2d42f-6bcf-4332-9b05-19e19756e3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:9f:3a:93:93:58:5b:4e:21:ab:8c:20:c0:
                    a1:3d:81:94:02:ce:e7:21:a3:82:7f:b0:83:fa:18:
                    2e:85:d9:98:3c:e4:6e:39:12:87:c9:9b:e2:ac:2f:
                    9c:00:66:e6:78:f0:21:fa:64:69:5c:f8:40:57:cb:
                    9b:08:8b:97:b6:75:f8:f8:6f:ec:e4:eb:7f:57:e8:
                    dc:2d:f4:2a:93:01:77:61:9c:e9:78:ab:4e:b6:46:
                    cb:83:8d:17:b6:85:9a:fe:c9:ad:4d:7d:01:8b:09:
                    5b:19:66:94:b5:69:26:4b:ff:5c:46:d6:e3:4e:20:
                    85:bd:a7:ef:da:8b:e1:a3:7b:81:64:42:4d:e4:74:
                    4c:f5:89:22:2b:9e:07:74:0b:9a:c8:4d:0f:e3:aa:
                    95:22:43:89:c9:72:fd:ce:86:ff:c1:f7:32:a1:f0:
                    c7:54:bb:43:3c:a2:b0:eb:6a:a9:1e:7c:53:df:76:
                    ab:7b:e7:8c:f2:62:23:5c:37:cf:d4:69:00:3a:a0:
                    d8:63:0b:a0:91:8e:74:9f:dc:75:34:63:67:ac:af:
                    3e:db:ce:e4:56:fc:d4:33:17:a8:e5:b0:0f:a4:12:
                    45:5c:c0:26:b3:a7:93:9d:f8:f3:ac:18:f0:5e:fb:
                    45:ac:db:ad:25:85:6f:1a:fb:2d:6f:ad:33:ca:33:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:B4:6C:35:C2:7F:44:2A:DA:80:F2:53:29:12:03:2E:47:7F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f8b7476-9967-30ee-b11b-f008a0bf4978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.26.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:38:d7:e4:de:ed:44:f7:49:2e:cd:e0:75:1b:9c:06:43:2f:
         11:2d:36:b3:87:18:da:45:7b:4a:7f:98:ce:da:4a:8a:a8:5d:
         25:fe:75:8b:40:a2:c7:e7:04:20:e6:2c:e1:e2:73:d2:f0:e4:
         33:3b:e2:70:0f:14:bb:a8:80:53:a3:de:92:5e:b2:a8:ae:c6:
         d4:48:37:71:1e:cd:18:33:b6:ef:b8:76:69:2a:e9:03:8f:22:
         11:8e:89:d3:60:cf:33:d1:28:d2:02:84:24:ea:77:5b:95:6e:
         79:23:45:f0:26:f7:c8:a6:db:91:c9:70:f5:a8:70:e9:cb:f9:
         53:99:08:1f:1b:01:79:47:06:3b:4c:88:f0:c0:e8:cd:67:3c:
         51:59:43:41:fa:21:7b:ef:dc:6a:f9:cc:5b:22:9b:8c:af:e7:
         f6:34:c8:f8:c0:02:19:8c:45:ac:eb:bb:0d:f5:7a:3b:5c:58:
         02:27:06:50:55:06:87:df:c4:bd:ee:25:c7:a7:8a:de:aa:46:
         ec:70:52:41:01:17:71:5e:f6:31:a3:48:06:07:fe:8f:aa:20:
         40:b0:08:c9:12:aa:e7:e0:68:1f:79:b0:2b:a3:45:5f:52:31:
         24:24:03:c2:c0:ff:bd:89:6f:3a:fc:c5:f8:ff:82:f4:3e:58:
         29:56:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:43:40 2025 by rpki-client