Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c80c6e46-12c8-3048-8bb5-10c5c1b406ed.roa
File:                     c80c6e46-12c8-3048-8bb5-10c5c1b406ed.roa (raw, json)
Hash identifier:          uHLZuNM6jbOQ2Ej8FaOVy1vgflRZVtJaa3AfVZOZVWs=
Subject key identifier:   1F:22:AE:A7:0F:15:13:C7:FC:17:4C:88:4F:D4:59:F2:80:55:C1:E8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ABFE057F236891D496D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c80c6e46-12c8-3048-8bb5-10c5c1b406ed.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        107.8.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:bf:e0:57:f2:36:89:1d:49:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=3a35e85a-72e5-4f9d-94b9-883858ae8567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a6:29:84:e8:fb:75:5c:c1:3d:f2:2d:94:3c:
                    0f:67:b0:f5:b6:eb:bd:04:8c:e7:13:3b:64:b8:e1:
                    8c:9e:9e:68:32:dd:4c:6f:43:d2:c5:d0:7c:8b:d2:
                    f4:46:e2:c5:f2:c1:e8:ea:b3:ad:b2:bf:e3:ad:c4:
                    38:20:07:be:83:89:54:44:13:bf:a0:e0:e0:a8:11:
                    59:86:73:2e:df:ac:53:91:09:2b:a7:43:5e:da:67:
                    73:43:85:4b:1c:ef:b9:98:d8:f7:e7:b8:51:68:c0:
                    f3:45:2a:db:84:c7:62:cb:0f:c9:5c:4b:c2:d9:71:
                    da:d2:a4:d8:4e:a7:bb:24:d6:10:21:bb:5c:09:91:
                    6d:83:1c:65:87:67:14:6a:98:8f:68:a3:28:c4:c6:
                    b9:74:62:25:e1:ec:d4:b8:b5:3b:b8:d4:23:7b:e9:
                    a4:df:92:64:46:06:5f:8b:ec:4c:e9:66:1c:cc:42:
                    fe:da:c5:63:ce:5a:9a:68:c7:4a:b2:0b:f1:f4:6b:
                    be:d3:03:31:98:fb:c9:2a:e2:bd:67:83:03:da:2b:
                    c9:94:50:df:a3:f6:51:40:c0:24:ea:3f:d4:0b:a8:
                    c0:ef:ed:3a:0c:e9:23:5d:9c:0d:dd:87:19:26:6a:
                    99:74:1d:ed:75:eb:a6:cc:df:e4:15:8a:52:63:df:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:AE:A7:0F:15:13:C7:FC:17:4C:88:4F:D4:59:F2:80:55:C1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c80c6e46-12c8-3048-8bb5-10c5c1b406ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.8.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:28:46:ac:b6:b8:56:c2:e7:c7:53:bf:59:ae:45:ff:68:
         a8:22:82:59:8e:85:9d:05:d5:ec:63:a1:66:14:da:5a:20:0a:
         ef:1f:e9:ae:ad:d2:0a:9c:4e:c9:84:2e:51:98:00:21:b5:fb:
         6f:ef:03:36:ed:92:f1:e4:69:1c:f5:6f:a6:7b:65:ad:64:94:
         8a:b0:24:4f:67:94:4f:c2:d7:e2:00:b7:26:cd:c4:57:35:0e:
         b0:7b:76:06:61:3a:a9:c3:44:1f:81:32:77:aa:f8:ad:cf:f2:
         61:dd:21:33:2b:ce:a5:4e:d0:e0:c6:e0:af:94:99:33:80:00:
         ec:f8:6f:78:e4:44:33:f3:51:39:e7:02:98:9f:75:c5:e6:f7:
         3f:52:2e:63:f2:46:b3:20:aa:72:a0:f8:8e:63:e5:ec:f4:bd:
         8f:76:7a:4e:02:c4:07:04:22:69:a6:b6:e0:5d:0d:9b:c3:c5:
         79:f4:15:11:b1:a7:04:13:8a:dc:f0:a6:d6:4f:6f:af:fc:20:
         f4:9e:7e:cf:68:37:fb:7d:c1:8c:b3:ea:84:c5:4c:c8:b0:88:
         90:ab:dd:01:c8:f3:ab:d6:c7:02:69:99:26:7f:4f:27:db:61:
         fb:7d:20:6a:2c:12:3d:c7:dd:ea:88:db:03:0b:3a:0d:90:f5:
         45:02:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:54:02 2025 by rpki-client