Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da54eb75-075d-3a76-8c30-d655b399f83a.roa
File:                     da54eb75-075d-3a76-8c30-d655b399f83a.roa (raw, json)
Hash identifier:          qXd6Prsn4y5iE5BTkUOlDh2Hsdw3Rl7+ghVjOjFQTDI=
Subject key identifier:   30:25:97:B6:EB:61:6A:E2:79:92:F4:D4:5C:59:7A:FD:41:C4:1C:ED
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE9CF01AC09FB156F2E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da54eb75-075d-3a76-8c30-d655b399f83a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        65.34.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e9:cf:01:ac:09:fb:15:6f:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=736d1c12-01f5-49d6-867e-e235695f21a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:4c:20:71:66:e8:24:ef:da:50:03:2d:fd:
                    91:70:92:6b:61:ce:1d:fe:f1:4a:ab:1d:fa:fc:05:
                    63:2e:a5:66:64:62:99:89:45:e0:5c:8c:4b:8a:bc:
                    39:fc:b9:c6:73:5f:b4:11:79:39:4c:6c:c8:2d:81:
                    87:b1:d1:b4:4f:fa:4b:e6:9f:e3:e0:33:0a:68:a2:
                    c0:35:7c:7a:aa:58:d8:76:e9:6e:8d:24:0d:7c:d7:
                    d1:dc:44:3a:89:bd:84:3d:d8:09:ef:64:8e:53:34:
                    2d:5d:da:70:48:5a:8e:54:1a:ad:e9:96:73:3c:4e:
                    dc:e0:18:30:50:e6:b2:58:a2:67:ed:ca:f2:f2:0f:
                    61:1c:59:12:21:d3:56:45:84:f5:96:07:ec:00:f2:
                    e6:6e:1f:2e:d6:90:42:5e:82:f9:b1:57:ce:b0:20:
                    da:6e:ca:4f:9e:a4:2d:e7:bd:75:6d:6f:60:14:17:
                    37:b3:3d:a0:1f:ea:fc:94:89:6e:2d:74:46:61:13:
                    d9:68:94:56:0b:d5:6a:f5:79:23:a5:f2:7f:e4:c2:
                    e8:81:69:55:7b:e2:57:f4:d1:5f:61:87:93:4d:11:
                    10:1d:47:fd:16:be:57:f5:a1:de:3d:72:70:e0:e7:
                    0a:14:a6:d7:f0:f7:73:0e:99:48:c6:0d:5e:bf:42:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:25:97:B6:EB:61:6A:E2:79:92:F4:D4:5C:59:7A:FD:41:C4:1C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/da54eb75-075d-3a76-8c30-d655b399f83a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.34.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f2:71:38:34:b1:78:fa:05:21:cf:8c:63:24:f1:b2:21:a4:
         c6:ee:24:8d:a8:36:61:4c:fd:1a:b2:ce:7d:dc:8f:3a:cc:7d:
         0f:64:98:8d:06:e5:a0:b3:ad:ca:bf:ef:8a:7f:de:e9:22:c1:
         48:5f:95:bf:c8:1a:f6:ea:d1:51:cb:a4:cb:40:c2:09:38:47:
         6f:7f:1a:14:b5:db:22:1a:cb:32:96:a7:09:f1:c1:59:3b:58:
         da:33:23:14:39:dc:17:49:7c:29:0e:45:37:95:b0:5c:65:8f:
         d9:8b:6f:65:d5:46:cd:28:a8:a1:75:5a:b0:87:44:9f:1b:09:
         b9:54:a4:53:55:94:9d:d1:e7:41:18:67:12:5f:16:13:84:b0:
         39:1e:e7:93:c6:84:02:1d:b0:21:48:89:d3:d7:58:7c:e6:aa:
         fe:89:0a:45:01:30:e3:0c:52:79:19:60:a8:b6:b1:0d:7b:2d:
         5e:99:46:ca:48:0b:5a:54:c6:67:ce:5f:b6:1e:59:1f:bc:0c:
         42:db:a0:d7:a1:eb:ba:17:97:2d:fa:65:ea:9a:57:b4:94:0e:
         01:e8:ce:6c:50:06:81:a8:53:78:f2:98:e9:0b:1a:d8:10:4c:
         a5:ef:cb:da:a0:65:06:28:7b:d9:c4:4f:c1:d3:0a:ff:14:70:
         e7:1d:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:29:29 2025 by rpki-client