Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa
File:                     ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa (raw, json)
Hash identifier:          HokYn9s+vUJqhqhhn+rLav5z6vLt8YQ2nVQdQvCZVPQ=
Subject key identifier:   5C:68:5C:E8:EB:4F:4E:89:35:30:B7:F7:B3:E1:B1:FA:FE:7A:B2:BC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A62A3A68BBBA3E35B2300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        24.173.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:62:a3:a6:8b:bb:a3:e3:5b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=eb4b94a4-621e-40ef-9f9d-1a33aa97d291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:9f:b8:1d:c0:49:f3:59:4c:0c:83:a5:82:
                    02:67:14:a4:9c:5d:66:d4:dd:51:1a:5b:d5:04:a8:
                    8c:64:1f:a3:ca:a5:45:e7:f5:2d:83:b1:d9:e8:b5:
                    bb:40:ce:6d:f8:98:60:63:9e:be:af:b8:2e:a3:10:
                    2f:e4:33:37:a6:be:de:45:9d:26:ab:95:ee:a4:df:
                    1a:51:9f:10:20:48:e6:c6:9b:90:40:69:a9:fd:2a:
                    d8:55:47:6e:11:a0:f4:48:04:b9:66:be:15:5e:e2:
                    65:7a:37:5b:5a:e6:f6:e9:94:07:e2:52:1a:b5:89:
                    ba:ef:8b:1d:59:2b:33:3d:f5:10:bc:d8:65:25:59:
                    cf:18:6c:8b:9f:ab:1b:09:2d:58:a4:f4:fb:74:49:
                    2c:ae:b2:cf:ea:91:6c:9c:59:e6:95:62:b8:31:fa:
                    1d:29:53:5f:6b:f5:37:23:d3:81:f9:ff:79:8c:36:
                    ad:4f:52:83:50:c8:39:06:8c:f2:76:6c:e8:24:53:
                    0e:d6:52:9c:57:12:85:5e:db:20:8d:ae:1a:88:32:
                    09:fc:9c:9d:7f:ba:47:3f:0d:cb:bb:eb:fa:0a:70:
                    ae:a3:8f:7c:68:66:79:96:4b:19:26:37:0b:ca:c3:
                    68:7c:e9:59:7c:24:bc:af:42:2c:a7:4f:52:88:4e:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:5C:E8:EB:4F:4E:89:35:30:B7:F7:B3:E1:B1:FA:FE:7A:B2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba25d8fd-f224-35e3-9ef2-33f03f41ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:83:c1:8c:9f:18:6a:7d:d5:c9:9f:11:8e:9b:7c:28:01:
         28:fa:df:ed:15:5b:42:e3:9d:6d:3b:60:ea:fa:fe:83:37:73:
         71:78:70:c9:03:06:72:98:76:ca:b6:f0:45:c7:36:9d:41:44:
         5a:5a:79:96:0b:db:31:65:82:10:aa:f6:3c:81:5b:8f:8c:6e:
         96:f9:53:2a:f0:0b:12:96:41:0b:cb:e7:8b:b6:e0:78:9e:c0:
         79:37:ee:aa:e3:d1:ff:0c:d8:c8:b4:41:a7:1f:53:34:47:c7:
         34:52:d2:51:73:c3:f0:96:a0:36:86:32:50:ed:4e:ec:b3:23:
         60:21:41:25:3d:2a:ac:dd:70:76:9f:f3:ca:fb:95:6b:49:44:
         3a:37:fd:47:a1:a8:28:6b:76:1f:14:ef:bc:63:48:38:04:44:
         9c:48:8d:bd:9f:87:20:07:64:5d:a3:29:b1:b8:79:48:25:52:
         ec:52:7d:aa:ea:76:df:72:ce:68:93:ad:68:89:9f:c3:0f:14:
         d0:52:aa:fc:46:c9:38:80:c6:17:d4:d3:dc:83:dc:1b:1c:ab:
         e1:c5:4e:60:2c:5b:47:f8:61:33:15:d3:ea:97:d8:44:95:f5:
         c0:d5:2c:69:e7:f8:d6:b0:f4:82:ff:3c:91:46:c2:d9:94:5b:
         1e:1c:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:12:57 2025 by rpki-client