Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f97679b-8bb8-3519-9500-a30d0f946e52.roa
File:                     9f97679b-8bb8-3519-9500-a30d0f946e52.roa (raw, json)
Hash identifier:          RYfOX0lhPBjUZJmVvb0q8CgpkWXTuccl6YD3bqqxsN8=
Subject key identifier:   CC:98:1E:84:63:F1:18:4E:F5:46:ED:BD:4C:B1:CF:C8:21:3C:7B:C8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4F0142A463FF10C44100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f97679b-8bb8-3519-9500-a30d0f946e52.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        172.254.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4f:01:42:a4:63:ff:10:c4:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3eda5d42-89fd-4f64-b877-70f5d9407926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:b4:1d:bc:cc:a4:1d:ad:60:5e:e7:2d:f2:
                    29:08:e4:78:a9:dd:0e:82:f8:ac:9d:41:ea:20:2a:
                    d1:2f:ef:8e:da:5a:1d:3f:58:64:48:e8:6a:5b:2e:
                    4d:5d:17:a9:dd:f0:af:ea:28:40:58:74:8a:c6:4a:
                    1f:21:b9:ed:02:34:88:04:53:3f:33:46:8f:b7:4e:
                    4b:f2:f0:ce:86:6d:2a:61:b0:12:c2:d9:ef:5b:38:
                    f4:32:d2:19:e8:45:aa:88:d8:9b:fd:25:2b:a1:d7:
                    0f:d1:5a:35:25:42:34:45:01:7f:87:b1:11:d6:b2:
                    ca:10:95:ce:95:4a:1a:0e:4a:d1:66:76:a7:86:9b:
                    a9:ab:15:e9:2d:ac:a3:b8:78:b0:7f:b4:06:6c:49:
                    be:7b:6d:f4:aa:e7:23:19:8e:67:d8:a9:96:bf:c6:
                    01:6a:84:70:24:d7:86:34:95:6b:6c:47:ca:8b:37:
                    96:46:22:c3:88:f2:53:51:9c:f7:42:e9:20:4c:b5:
                    ce:f6:9b:d4:0e:ad:a5:1a:95:15:d7:64:6b:b7:41:
                    66:a9:f6:c8:63:73:b8:d8:20:97:bb:56:f4:e6:9a:
                    14:95:d8:a8:f3:cb:3c:47:b3:79:01:33:d7:45:27:
                    50:19:5e:a8:95:5a:82:9e:5c:be:24:b2:64:98:d5:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:1E:84:63:F1:18:4E:F5:46:ED:BD:4C:B1:CF:C8:21:3C:7B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9f97679b-8bb8-3519-9500-a30d0f946e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:bb:c1:e5:fd:9e:90:88:fa:dd:e1:07:f1:4d:3d:f9:98:
         c8:1e:39:88:68:52:0c:c0:d8:fa:48:0c:0d:18:59:79:51:24:
         ae:03:dc:b4:5b:91:31:59:c5:19:44:5f:ca:2c:4d:74:aa:b1:
         1d:b2:a1:96:cd:b1:27:be:0d:d0:75:99:c6:8a:55:bf:8b:ce:
         5b:65:3f:51:e7:57:3b:d7:c4:ac:18:da:9f:b1:25:16:ed:65:
         79:38:df:65:43:77:c0:bc:82:38:e7:5a:6f:f4:2f:91:59:e3:
         ce:f0:03:de:b2:33:50:4b:4a:1f:79:9d:94:0c:23:61:69:12:
         73:fe:04:d2:47:2c:c5:10:10:b3:af:d3:c7:f4:54:9b:ce:ab:
         42:95:d8:36:98:7f:d8:6a:a6:26:51:92:58:9a:0c:13:90:af:
         39:08:28:41:c4:3a:ca:f3:de:37:da:36:cd:ab:b7:cb:b0:0d:
         fe:50:72:b2:d5:44:b4:87:f9:1f:ff:02:96:e9:d1:28:2e:6b:
         ee:28:a1:a3:f2:b2:16:2b:f2:ec:9d:35:d7:92:f4:35:93:ed:
         86:63:a8:ca:a0:4a:9b:01:e2:ac:9d:f5:38:3d:61:12:d0:88:
         79:54:92:fc:c5:d9:0d:12:ff:24:f2:2b:fe:e9:27:21:52:6e:
         ba:b2:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:08 2025 by rpki-client