Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb9df6e3-e3c0-3790-86b0-833f603edffd.roa
File:                     bb9df6e3-e3c0-3790-86b0-833f603edffd.roa (raw, json)
Hash identifier:          hd2EJankEg5vcqLRUE8VAK23Mu2YDKe7msILo9pbbKI=
Subject key identifier:   55:40:6E:A6:A4:D2:EE:3D:39:3C:B4:BB:5B:26:EE:19:2A:CF:9F:DB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A6415E53090EF70A79B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb9df6e3-e3c0-3790-86b0-833f603edffd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        24.227.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:64:15:e5:30:90:ef:70:a7:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9e1380bb-5031-4fc7-92c4-a70fdcc40c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:59:11:1e:4b:7c:3a:d2:25:ca:1d:c8:bc:
                    f3:0f:1f:ce:06:d5:fb:50:20:85:b8:44:8c:ac:d8:
                    11:1b:c5:a1:5f:0e:26:6b:92:ab:b2:5e:fd:1a:d0:
                    07:85:e7:2a:06:d8:58:00:0b:01:dd:32:c1:dc:af:
                    d9:03:97:1f:f2:8a:5f:08:35:d4:fa:53:0e:22:e6:
                    e8:36:49:77:68:97:1d:c4:0b:9a:14:15:af:94:dc:
                    9f:5e:17:21:a7:10:04:a4:12:7c:33:8b:f2:06:75:
                    1a:e6:34:40:00:6b:5e:4c:0d:2e:82:6d:a1:84:fd:
                    59:6b:70:34:81:3d:d6:7e:3b:18:5f:bb:91:af:7c:
                    8f:7b:4a:cf:84:3f:bb:26:54:4c:0f:58:9c:77:6b:
                    aa:ab:da:a5:64:1e:d4:4d:4e:4e:75:42:75:84:a3:
                    80:6c:7f:9a:e2:03:e0:24:4e:89:f0:86:b0:68:7a:
                    ce:58:10:e6:a6:ba:cd:ed:c5:27:a2:61:e8:08:de:
                    4a:93:36:cc:73:c4:83:28:01:c0:17:d4:b9:9e:9e:
                    d9:73:b6:d3:45:a8:22:f8:08:dd:18:bd:30:da:b5:
                    82:d7:b1:af:87:87:67:b7:8f:2e:71:a6:4b:f2:81:
                    8d:35:3f:e6:13:21:1d:fb:30:d4:71:29:73:17:41:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:6E:A6:A4:D2:EE:3D:39:3C:B4:BB:5B:26:EE:19:2A:CF:9F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bb9df6e3-e3c0-3790-86b0-833f603edffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:57:72:79:d9:c2:80:f9:2c:df:a0:71:48:0e:0c:c8:7a:df:
         89:53:ce:2a:04:73:58:11:0b:09:29:a5:a8:c5:df:c4:f9:4b:
         dc:ea:44:2d:ba:dd:f6:94:5c:f5:43:56:6e:59:0f:24:0c:b6:
         3a:1a:19:b3:3b:23:8f:8b:05:9e:dc:66:dd:ad:e0:1e:1e:77:
         30:8d:72:9d:b1:62:e3:fe:13:2a:5c:14:34:21:b2:c2:3c:47:
         8a:08:37:bd:11:c3:83:fe:26:d2:2a:a6:13:fe:c4:39:4d:6d:
         aa:36:56:2c:77:eb:ac:0e:5f:67:6d:63:c4:37:79:06:6c:95:
         60:9e:47:50:87:a9:b0:7b:ae:e1:2b:81:99:2e:98:dc:94:b2:
         dc:13:39:bf:76:15:af:92:6e:4f:ae:22:0e:58:62:89:76:82:
         91:4a:bf:29:f3:b6:98:50:3f:5c:0f:77:88:6b:f7:83:f1:ca:
         f3:4f:2f:32:d2:e4:98:d5:73:64:88:8a:32:09:0d:3b:18:36:
         f0:a5:63:66:0d:e2:3c:e7:0d:92:6c:0c:b4:54:29:b2:16:c0:
         64:17:f1:c3:00:ff:cf:da:b7:77:74:14:a1:1b:6a:9e:fb:f7:
         1c:a1:c9:cc:66:20:ab:2d:5c:ab:ad:8e:80:6f:f0:19:f7:4b:
         e2:48:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:04:19 2025 by rpki-client