Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
File:                     b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa (raw, json)
Hash identifier:          wmeeId+CLDA7fGjA6J0V/hCTnnbnLMfPDLgLx/nMM6g=
Subject key identifier:   DE:10:AF:CD:1F:77:1E:99:DE:9B:DD:B5:B0:7E:67:20:99:A6:AB:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A5E6064BB0FF07F530E02F1C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     12271
IP address blocks:        74.68.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:64:bb:0f:f0:7f:53:0e:02:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=88b15e14-51d1-4c1a-9e20-6cb9edbf31b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:de:f7:22:c7:9d:e3:9e:91:e9:e4:22:1b:
                    61:51:db:53:b1:c2:15:5d:38:f9:5d:e6:6d:30:58:
                    23:31:42:d1:90:5b:c0:18:aa:12:33:dc:13:db:fd:
                    ea:44:3b:00:8d:ef:af:a5:38:3d:8b:4c:ab:84:4b:
                    c4:92:c3:6c:78:83:f9:f0:b1:2f:10:13:14:31:37:
                    96:fa:e5:12:93:27:dd:87:da:b5:93:f2:14:a9:b5:
                    5e:f4:d0:8d:22:5a:07:5d:22:ce:b2:f0:89:7a:61:
                    f2:db:38:6c:14:ac:16:9f:68:25:1c:79:35:d1:bf:
                    97:7d:44:07:1d:8d:d7:d5:37:a9:d6:28:86:ee:0f:
                    46:90:93:75:ea:6d:a3:07:2f:15:fe:cc:09:ea:b1:
                    c1:26:17:00:78:a6:e0:07:26:6d:9b:8b:e3:fc:99:
                    eb:58:aa:40:5d:f9:17:60:03:e7:32:7c:ff:01:50:
                    bf:4b:25:c1:5b:39:dd:36:72:fa:b3:d0:bb:1d:6a:
                    1d:7a:2e:0e:55:09:75:71:2c:b2:e4:9e:0f:57:d1:
                    d5:36:a0:67:3e:91:e8:e1:1e:1d:c4:e7:e2:d5:10:
                    dc:e6:32:73:26:6a:a2:40:69:00:b7:15:d8:0c:6e:
                    9d:df:2e:d1:6a:2f:39:69:0c:f8:07:45:10:02:0f:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:10:AF:CD:1F:77:1E:99:DE:9B:DD:B5:B0:7E:67:20:99:A6:AB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b65b6491-d543-3cb5-bcc8-0be903ed93fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:ef:8b:08:ad:43:53:32:bb:a7:53:90:25:64:f1:27:1a:
         bb:8d:42:0d:5b:42:73:13:d1:cf:6a:0e:b3:b0:5b:75:d1:20:
         57:05:a2:4e:74:d7:00:51:09:7a:68:b2:8e:d9:72:85:8e:91:
         ad:92:a9:45:89:b5:1e:0b:87:f3:83:11:33:2f:1b:dd:fe:68:
         39:da:9b:1a:b4:bb:52:9b:01:70:cd:9c:42:5a:a6:a9:6c:9c:
         36:1b:9b:33:a7:c9:98:31:de:96:75:74:ed:2a:79:51:21:e8:
         1f:5d:18:bc:6f:b4:75:02:c2:a3:7e:32:e3:c8:89:c3:93:1e:
         28:d5:39:1c:d1:fc:87:03:4c:12:b9:dd:e4:f7:cc:c8:eb:b0:
         5c:e6:8e:a4:02:b7:bf:b8:2a:d8:a2:5c:0f:08:84:d5:3a:a1:
         c6:e0:9d:1a:33:2d:52:d2:73:e3:51:00:dc:0f:0f:3e:c2:ad:
         04:8e:81:7d:6e:49:41:3f:0f:11:53:f5:02:11:c8:43:07:08:
         be:9a:c2:6f:ab:21:e6:0f:15:7c:80:ce:b1:ff:3f:ac:ea:31:
         18:9e:b8:c3:13:94:17:c1:c3:a9:10:03:e9:a1:a8:8e:d9:51:
         b6:12:45:eb:f1:be:2c:38:ac:48:33:10:cc:9f:7e:b9:f3:2e:
         01:ea:01:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:12:01 2025 by rpki-client