Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa
File:                     bc97ca2f-4623-38e0-876a-9fea9455f67d.roa (raw, json)
Hash identifier:          9XmqSSwoJLb1iZYYXVRW7ET9/GVui/i6pmxWi/hOncA=
Subject key identifier:   4A:4E:1E:F7:18:9B:D0:D3:76:0C:16:EB:B4:B8:AF:B2:3C:47:18:CB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE868AC0F1B6940A9D9A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        76.53.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e8:68:ac:0f:1b:69:40:a9:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=abe78891-c799-4a5e-bc0b-9628373ffdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:62:08:b5:a7:9c:2c:84:d8:71:a9:93:f8:3c:
                    3c:a9:56:34:87:f7:07:9e:21:0d:36:91:b6:22:6f:
                    33:ed:98:35:93:cf:99:9b:c2:a0:b2:14:5c:6b:3c:
                    d5:99:9b:30:ee:01:f6:b1:24:69:85:58:34:d3:95:
                    23:58:d7:b7:52:12:37:3b:43:51:61:3c:85:7c:60:
                    4f:ac:e6:b6:96:64:dd:70:66:6a:19:0c:5f:00:af:
                    87:d0:9f:a9:d0:d4:4a:e3:d1:ae:64:72:72:5c:25:
                    b5:fd:18:04:56:b0:9e:dc:73:85:71:95:22:34:4f:
                    78:22:bd:e9:66:47:08:33:26:a9:f6:ec:97:10:55:
                    e4:3e:71:7a:73:7e:dc:da:ad:fb:42:c1:2d:16:d8:
                    88:3e:53:32:56:7a:68:6f:2e:b0:c2:8d:0e:59:aa:
                    5d:f1:89:ac:5f:9d:7c:c4:98:9c:8c:f3:d3:45:a4:
                    ac:ea:a7:19:eb:07:e9:fc:e0:3d:8b:be:b9:62:21:
                    98:c6:2d:35:90:d9:ee:57:8d:01:2d:54:81:1c:a6:
                    4a:af:01:73:84:0b:ac:42:45:f4:7c:9e:07:2e:70:
                    85:bc:34:99:e7:91:93:2c:a2:61:3b:3b:b0:52:c3:
                    61:d1:6b:98:7b:62:6f:bc:0b:92:a4:bb:f1:37:37:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4E:1E:F7:18:9B:D0:D3:76:0C:16:EB:B4:B8:AF:B2:3C:47:18:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bc97ca2f-4623-38e0-876a-9fea9455f67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:b5:f8:d4:ab:81:03:5c:6a:f4:82:08:b5:d0:e8:50:a9:
         27:8b:fd:a7:96:b3:c5:5e:6f:84:bc:51:60:87:a8:bb:2d:d0:
         ae:e9:e6:14:39:ea:88:2a:2d:d4:11:d4:a4:52:fc:1a:89:86:
         6c:6d:a3:25:f1:2d:bc:36:8e:6c:0d:d8:8f:b5:55:aa:e7:b0:
         c6:8b:d9:77:f0:93:70:bf:f9:f2:b3:51:ce:21:33:b7:4e:08:
         3a:57:e3:fb:56:20:1d:18:b0:74:e3:c4:3b:ce:3d:02:dd:df:
         60:ae:0a:4a:30:00:46:2d:8e:ae:4a:f1:d7:53:80:bd:e3:66:
         60:cc:6d:d4:62:e3:7e:c7:ff:65:9c:c0:44:ec:48:ed:77:b4:
         3f:34:0e:c3:4a:e7:4a:bc:db:4e:76:86:00:82:2a:46:79:55:
         09:99:a4:13:bb:8e:c3:18:8d:32:f1:5d:8f:e9:fd:08:93:91:
         91:55:be:be:50:34:71:32:50:83:16:7e:ee:d8:c3:e7:e3:74:
         4d:ea:37:82:38:70:41:f7:55:ca:d5:09:aa:f4:aa:3b:8b:76:
         46:a8:8e:f3:59:77:68:79:36:e6:47:6c:ce:5d:eb:7f:27:03:
         c5:88:23:f3:80:80:a0:04:f9:12:17:29:2e:fe:c9:df:01:78:
         b2:02:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:50 2025 by rpki-client