Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5eb4ef6-b0a9-3f6a-8ea5-87ee401739f0.roa
File:                     c5eb4ef6-b0a9-3f6a-8ea5-87ee401739f0.roa (raw, json)
Hash identifier:          EE7w6ZszHiK9oujGXVGJSynHa2yCO2khivMHH4p+rxQ=
Subject key identifier:   29:89:D3:D3:18:54:D4:0E:B6:0D:3E:CA:F5:67:83:FC:33:1B:1D:00
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AEB61445D69D4D9E1A100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5eb4ef6-b0a9-3f6a-8ea5-87ee401739f0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        24.73.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:eb:61:44:5d:69:d4:d9:e1:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e001aa8c-c812-4754-89b5-17d4e410e26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:40:f6:65:aa:a0:b6:ba:aa:b3:c7:d9:c3:
                    27:60:e7:26:cd:fd:0b:86:84:a8:ec:8c:79:d8:32:
                    9a:77:e7:af:aa:51:2c:d4:8c:19:4e:25:19:a6:e1:
                    99:0e:d4:ef:d4:72:6a:df:f2:8e:dd:12:8d:94:d8:
                    4f:88:5e:d0:96:7a:dd:5a:23:00:24:7a:80:2c:5e:
                    d8:41:c5:ed:13:f9:e6:9c:37:99:fb:2e:ca:2a:cb:
                    36:b7:69:ee:48:df:c5:79:3b:bd:73:b7:3d:2e:99:
                    70:c2:ea:a7:b4:26:70:a9:57:72:47:dd:ef:58:6a:
                    85:5a:18:8e:1f:d4:e1:42:b8:90:d0:17:e1:3b:08:
                    ea:43:ed:fc:ec:6d:dc:ea:16:42:8e:07:1d:f1:60:
                    73:80:e6:51:58:33:4c:5a:98:e7:2e:08:cc:ad:3d:
                    9c:07:97:07:03:fa:16:98:ad:a5:a7:22:59:e0:31:
                    71:c2:fa:20:3f:f6:f8:08:4b:99:52:73:07:c2:67:
                    8a:96:b2:d8:9d:69:33:09:c0:d1:8e:d3:f7:23:05:
                    d1:aa:64:02:fc:e2:44:d5:5a:14:0d:b0:d5:ca:b0:
                    8b:28:e6:0a:cb:38:be:7f:84:d6:94:2d:40:95:39:
                    64:53:6b:3d:f0:ab:5d:a9:40:9e:7a:9e:3b:68:03:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:89:D3:D3:18:54:D4:0E:B6:0D:3E:CA:F5:67:83:FC:33:1B:1D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5eb4ef6-b0a9-3f6a-8ea5-87ee401739f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.73.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f4:6c:80:0b:d0:93:ea:a1:50:d3:d9:45:b9:8c:87:1c:a6:
         eb:4a:50:31:6e:b9:38:0d:d3:5f:74:f7:33:a6:39:7e:3c:f6:
         fd:4b:3e:25:c3:92:4b:e5:a4:f1:34:d5:b2:18:e8:62:70:33:
         fe:ce:77:a8:8c:a7:6a:03:1b:f7:65:02:ac:76:8f:86:7a:ce:
         88:4b:e0:5f:3a:c8:74:78:6b:47:20:a2:ad:3c:2a:17:59:9c:
         e7:00:c1:08:2b:5c:0d:59:5b:7a:e4:44:ae:cf:05:69:35:8b:
         d5:6a:96:1c:b2:8d:b3:8a:e3:de:ee:cd:2a:9f:7f:c5:8c:d0:
         a2:69:ca:c6:fd:d4:0c:86:9b:b9:04:72:35:d4:b4:49:7a:d5:
         1e:c2:2a:53:e2:22:4d:07:aa:f7:0e:ba:df:ea:c9:54:64:e0:
         ca:aa:10:74:c2:f9:aa:69:fe:05:db:fc:d0:85:19:5d:0a:31:
         98:80:9b:2b:c8:5d:98:0c:62:00:55:50:72:fb:47:bb:e5:64:
         50:77:97:d9:ea:d3:23:10:48:53:57:b8:57:76:cf:0e:39:79:
         f0:c2:62:5a:b3:ac:13:19:e6:2f:a5:f2:3a:4f:25:1d:27:dd:
         90:6d:87:f4:18:50:cb:d4:c8:12:79:3e:84:ee:a6:08:a5:95:
         3f:ab:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:34:00 2025 by rpki-client