Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2a1a0be-81da-38b9-a9b5-f87dd6895d33.roa
File:                     a2a1a0be-81da-38b9-a9b5-f87dd6895d33.roa (raw, json)
Hash identifier:          c0ggfudHeYzvSq9BievP9gPEYiGzWvxH2zTCnnRnuHg=
Subject key identifier:   C5:2D:CA:0F:FF:03:9A:38:A7:54:2D:75:A6:E7:10:93:23:D0:53:00
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A264C754DC057B2ADD240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2a1a0be-81da-38b9-a9b5-f87dd6895d33.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7843
IP address blocks:        209.18.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:26:4c:75:4d:c0:57:b2:ad:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fe43cbc5-6f8f-48e1-8776-da99333517d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:3f:ca:5a:6a:f3:a4:ea:05:dd:a0:d5:90:
                    b8:14:ae:8a:47:89:a8:42:98:89:91:98:94:92:b1:
                    95:d2:dd:b9:c3:e4:3c:fc:89:ff:36:db:86:63:6a:
                    0d:00:90:39:b3:69:bf:d1:cf:e4:f2:22:89:ec:83:
                    11:55:94:6c:eb:64:e0:65:5a:9a:7b:92:f1:3a:8f:
                    12:1a:cd:23:3c:90:6c:2b:f2:2d:b5:b0:2e:00:fb:
                    9a:44:0b:de:50:96:63:ca:c0:9d:3c:f8:64:7b:81:
                    65:07:87:47:62:d4:e1:96:1f:85:1e:92:4d:5a:78:
                    b6:70:3a:24:30:d2:6f:e2:23:c6:28:32:6f:ba:6d:
                    5c:06:9a:b0:d1:09:91:02:0c:c7:11:d7:c7:7c:46:
                    3b:16:0d:15:f2:8b:3a:49:12:2a:43:af:4a:2e:7b:
                    75:d5:42:fb:01:4c:17:ec:b6:49:fa:8e:21:46:5f:
                    3c:2a:a3:db:5e:eb:7e:12:77:96:3e:95:e7:e1:32:
                    36:79:87:f8:11:9e:66:57:1e:2f:64:51:21:42:c5:
                    b4:19:68:0a:09:d7:e5:19:7c:8a:59:d0:bb:93:9a:
                    aa:f7:99:97:82:16:8e:21:ef:f4:d8:db:33:bd:30:
                    6f:27:5c:57:5d:bb:f2:46:1f:dc:50:90:8b:eb:5f:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2D:CA:0F:FF:03:9A:38:A7:54:2D:75:A6:E7:10:93:23:D0:53:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2a1a0be-81da-38b9-a9b5-f87dd6895d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.18.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:93:f6:d7:6c:aa:76:53:70:41:fa:8b:91:22:25:5d:1a:
         91:92:ca:1b:d7:46:72:34:bb:4e:82:f5:f0:e5:79:ef:2f:3b:
         cf:48:03:63:8d:4e:fe:e4:47:69:5c:b9:22:b2:4c:ee:4d:3f:
         b0:7c:25:32:ad:25:66:99:4d:9e:31:cb:ab:0b:7f:b9:ad:83:
         43:57:46:c5:85:5e:2c:a1:45:5c:82:ad:5c:bd:89:5c:d7:77:
         d1:01:b9:77:22:34:0b:7f:4c:17:02:d6:2b:e8:19:bb:67:85:
         45:92:c4:10:f4:87:14:f3:81:f0:f7:3c:fd:1d:09:02:1d:83:
         07:e2:fe:56:d1:99:cf:f0:15:e1:f4:41:ae:12:ef:65:8b:31:
         6c:d8:24:fb:1e:bc:11:63:ab:0f:d9:29:92:fe:a2:5e:3c:32:
         c3:f2:5a:76:fa:9c:c1:32:10:f7:d8:12:e2:fd:5f:16:27:58:
         bf:8f:eb:f2:32:3a:4d:df:d5:cd:06:28:99:c6:2e:f0:12:bf:
         cf:9b:91:97:51:20:65:bb:c1:3f:00:8b:27:e4:54:18:3a:91:
         df:78:87:56:2f:25:27:6d:12:cb:b6:c8:a2:12:f7:dd:9e:71:
         ba:7b:f1:a8:42:b7:85:17:b1:2b:38:32:97:4a:9c:a7:c0:83:
         4e:6e:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:04:47 2025 by rpki-client