Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acbe18af-25a5-3a04-9e1c-ceb636bc3747.roa
File:                     acbe18af-25a5-3a04-9e1c-ceb636bc3747.roa (raw, json)
Hash identifier:          gXak1PaiyZrPOGAmlFxPdMlb1N4fkbxfU2OepBI8iRM=
Subject key identifier:   C1:14:61:C0:8D:2B:2E:AD:B0:2B:AA:AB:23:B5:0D:EA:9B:CD:26:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD4F60EC6C88EF5DA8F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acbe18af-25a5-3a04-9e1c-ceb636bc3747.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        69.23.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d4:f6:0e:c6:c8:8e:f5:da:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8970e040-88dd-47fd-bbd4-0ccfd126b1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:f9:b2:db:1f:5f:89:c9:79:bf:04:6b:fa:
                    f0:cc:42:f8:6a:b1:ab:48:9f:2b:b9:19:d1:0f:3c:
                    81:28:d5:ea:80:19:1d:64:93:ee:0e:ca:15:48:c3:
                    a9:a1:e1:66:b6:8f:23:82:e6:ab:d3:57:95:ca:8b:
                    50:7e:6f:23:71:c2:f1:b7:82:e8:46:8a:9a:a2:0f:
                    69:57:88:42:7a:f3:2f:d1:e2:55:43:51:77:d1:0a:
                    0a:20:09:ca:0f:bd:e2:3c:0b:32:46:b7:59:ff:0a:
                    fc:41:a6:f9:f3:c2:94:53:30:75:0f:60:e5:e2:cd:
                    c6:9f:38:8d:b4:43:7b:79:e4:d5:97:ab:b8:4e:80:
                    93:25:af:ed:11:32:f0:91:34:65:59:f8:bc:40:57:
                    5b:22:a9:91:49:bf:ef:83:5d:5b:58:b0:ad:5b:04:
                    cc:9f:1e:d4:80:dc:50:c3:93:cd:ea:c5:b0:83:68:
                    64:8c:41:c1:80:35:b2:2f:c0:39:02:4e:b0:6a:ad:
                    ff:fd:5c:0b:53:02:97:f8:ed:5d:31:cb:55:66:74:
                    18:dc:fe:99:55:d6:03:9e:f6:db:1b:73:39:df:bc:
                    b4:d1:e4:0b:5a:0c:7b:ea:f6:e7:c3:9b:cb:59:88:
                    70:2a:2d:95:09:61:14:b1:60:01:e4:d6:9f:1d:f9:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:61:C0:8D:2B:2E:AD:B0:2B:AA:AB:23:B5:0D:EA:9B:CD:26:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/acbe18af-25a5-3a04-9e1c-ceb636bc3747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.23.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:93:35:b8:ef:84:e5:21:d7:c9:72:46:ef:fa:be:f4:d8:a0:
         56:a2:b2:da:33:32:ea:20:ef:e1:9a:76:47:ac:9a:68:20:9e:
         ad:e3:3b:53:b7:e9:ce:3d:97:37:ae:50:d5:44:c4:a3:aa:8d:
         9e:81:68:c2:22:91:51:e5:30:23:66:37:57:4c:7c:dc:b7:ef:
         9e:f9:1f:a4:2e:a2:cd:5a:1b:33:15:fb:10:53:92:38:7e:46:
         a7:c4:45:aa:18:c3:91:c1:23:6e:92:8f:99:7e:94:a4:e0:9e:
         51:a5:34:b3:dc:99:cc:19:e2:59:05:2a:8d:c0:c2:93:7b:36:
         1e:70:d2:61:cb:57:f9:b7:45:90:d4:8d:92:09:63:04:52:63:
         5a:3c:52:be:25:a3:02:a3:b4:36:a5:cb:0e:d9:f2:21:2c:c2:
         fc:5a:d4:88:64:a4:41:a4:ed:1e:0c:39:1e:e7:40:13:55:79:
         fb:b2:e5:b5:60:50:33:2d:16:21:70:f0:41:80:50:8f:6f:52:
         ac:c7:5c:76:93:ee:30:f2:73:42:20:f9:9a:c0:c3:ee:70:5b:
         74:06:ff:12:d5:e2:b3:0c:50:f8:e0:e4:05:7d:78:99:48:77:
         d6:b7:4e:ae:cb:be:25:25:e4:d6:7a:77:dd:3c:ef:c1:58:f5:
         e2:7e:a0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:18:54 2025 by rpki-client