Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d37c9eae-f13d-31d2-b76b-e9971f155522.roa
File:                     d37c9eae-f13d-31d2-b76b-e9971f155522.roa (raw, json)
Hash identifier:          thE6B+hNvlnjSPWbmLzAJJxNRGP5eaKc4AKlU26MZBc=
Subject key identifier:   47:D2:8F:BC:3C:D0:92:88:A5:1C:BA:87:4D:A4:11:81:42:F8:D6:8F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A470AF6BE5152451D7500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d37c9eae-f13d-31d2-b76b-e9971f155522.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        24.94.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:47:0a:f6:be:51:52:45:1d:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=cc9874c9-96bf-4018-bf9c-a1e7baa8fedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:57:d6:d9:2d:20:dc:db:08:f7:2d:4a:54:
                    e5:4b:cc:8e:56:6b:67:d7:2e:36:bb:14:f3:aa:df:
                    77:d4:45:be:05:24:a3:d6:45:98:3a:d6:8e:62:cf:
                    b6:b9:59:6d:ce:c3:3f:c1:6c:d8:6d:99:4f:29:e9:
                    a7:cd:e9:85:62:37:d1:86:72:6c:eb:cc:29:6e:93:
                    f7:79:03:96:04:c9:f9:05:05:f7:4c:8a:56:e3:9f:
                    6e:97:27:c4:7f:27:aa:c8:0d:20:d8:09:1e:3d:ea:
                    f7:58:0c:2f:c8:1d:ec:d6:5d:24:26:e5:31:2b:a7:
                    88:46:09:b2:c8:52:79:a6:cf:eb:7d:d8:41:7d:95:
                    b6:c9:79:c8:c5:d0:a2:d1:32:51:89:fb:21:bc:40:
                    92:3c:36:17:3d:4e:6a:1d:ef:20:44:33:e9:62:5e:
                    b9:c5:44:3d:11:e2:f5:4f:1d:85:52:07:b4:30:8f:
                    8e:c7:b0:7a:41:7c:d3:44:c5:5c:ec:22:4c:c0:45:
                    17:8e:dc:c8:c9:f7:b1:22:e4:39:8f:94:58:63:a5:
                    61:16:c1:dc:ca:77:ed:66:69:32:7f:85:2b:74:20:
                    d6:43:6a:a1:d5:fb:4e:ac:86:c6:50:c2:a0:58:c7:
                    85:8e:e6:e7:89:de:aa:df:3c:29:75:b6:0b:3e:9a:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:8F:BC:3C:D0:92:88:A5:1C:BA:87:4D:A4:11:81:42:F8:D6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d37c9eae-f13d-31d2-b76b-e9971f155522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:1e:a4:70:ae:0f:5a:b4:26:89:ff:99:b0:58:14:2a:b1:
         28:96:bb:16:3c:bc:35:0e:97:57:ab:a2:a2:d4:48:a9:14:34:
         07:d8:df:ba:e2:7a:b4:a2:c0:11:1e:b5:36:43:d7:47:c3:57:
         f0:44:e1:5f:90:68:df:38:8b:fb:ef:08:a2:d8:9b:13:49:1c:
         70:1b:47:8e:7e:a1:ec:89:5c:ea:18:23:0b:db:c6:19:64:43:
         22:f6:cc:f2:19:26:7d:f4:f0:29:b3:f2:14:2f:f1:00:61:8b:
         8e:9c:9a:86:e7:ef:52:87:50:7b:11:a9:f6:0f:8f:4b:65:c2:
         78:93:53:f7:1d:bd:15:a5:4f:db:02:24:c0:3d:b2:01:2d:ab:
         bc:ee:ba:29:89:d2:3e:cf:61:3a:e0:18:90:7f:78:b6:c6:c0:
         25:73:be:6d:1c:05:b5:5d:18:81:69:d1:7f:49:86:e4:97:1a:
         50:15:71:29:ff:f6:0f:71:86:95:08:74:58:23:5a:44:60:54:
         3b:d0:89:48:2d:3e:ea:a6:5c:f9:28:b2:50:7f:49:d9:28:46:
         42:eb:6f:cc:d5:a4:40:8d:74:37:c4:89:f2:5c:a1:a6:2f:17:
         ce:04:90:2a:bd:03:7a:5b:80:c4:5e:41:76:61:21:78:a0:e8:
         83:f0:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:51:28 2025 by rpki-client