Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
File:                     ddb07463-be38-35e3-a789-7b573b75adc3.roa (raw, json)
Hash identifier:          edtEpQPDtABCKLr2f1zdftKnPW6CA47wJMnCTfzX86g=
Subject key identifier:   08:47:EF:57:1A:55:59:02:12:9E:E0:81:B1:10:EE:3D:B6:95:67:E9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A3FA81977D9E7EFB5D940
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        67.252.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:3f:a8:19:77:d9:e7:ef:b5:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=34765a92-c4dd-4267-a7e3-333ef7afd896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:b0:d9:97:ca:52:49:f1:d7:ae:64:34:f4:
                    f5:51:91:77:ab:2a:8d:12:10:a9:b9:69:18:5a:d8:
                    28:bf:68:93:74:f8:4c:d5:eb:fe:52:87:c5:ff:db:
                    2f:0a:dd:8a:72:9a:72:48:48:d1:28:fd:d2:72:f6:
                    81:04:eb:02:5a:9b:52:22:0c:c8:80:e1:78:63:56:
                    03:91:e4:6e:24:b3:0c:69:7a:ab:90:e5:aa:8d:f9:
                    f9:2e:9e:d5:d6:31:52:68:73:21:65:99:4d:5d:01:
                    5c:c1:46:03:a6:52:96:59:6c:04:c9:6f:0d:04:91:
                    d7:60:9a:4d:c1:ee:e3:06:03:60:73:ab:ce:3a:03:
                    ab:c8:1f:d7:f1:3e:97:85:8e:8a:f2:fa:ca:75:19:
                    4c:9b:0d:74:a0:cb:62:0d:0c:b2:a4:a8:b3:d8:c0:
                    55:03:8a:b3:02:66:b4:75:3b:24:75:fe:d7:b8:13:
                    ef:53:43:b7:ac:b6:85:45:18:ff:c4:72:46:5e:a4:
                    5a:e2:17:d9:f3:b6:ad:7b:ff:c4:21:e5:e5:74:b0:
                    65:e5:e7:5a:f7:1a:bb:44:9a:4e:c6:7a:e7:41:02:
                    1a:64:53:1c:f5:0b:f5:71:81:04:8f:91:04:db:6d:
                    3c:9d:54:f8:70:a9:a4:44:55:fa:8b:e3:31:22:5b:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:47:EF:57:1A:55:59:02:12:9E:E0:81:B1:10:EE:3D:B6:95:67:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:19:39:99:ea:9d:e5:26:36:08:d4:3f:b9:d2:fd:88:e4:
         48:34:ae:27:d6:dc:28:d8:2b:a9:7b:95:02:69:3a:4b:6a:0c:
         ce:eb:e2:67:0e:f4:25:77:c2:29:c9:34:43:a9:88:ae:67:d7:
         ca:4f:09:fe:f0:c4:45:3d:ec:05:45:f1:fd:7e:4f:95:51:9c:
         17:b8:79:ce:3f:13:1d:55:ea:66:5d:62:78:f9:b5:3d:f0:fe:
         2a:89:11:71:6e:32:76:24:ba:ae:ee:67:2b:43:a9:dd:b3:d5:
         6f:68:2b:80:d7:b9:9e:8b:60:fd:19:c8:0e:23:a8:67:f4:e0:
         bd:30:36:a4:76:10:a7:ff:95:0e:4b:d2:29:fe:97:7c:f5:17:
         c2:a6:0f:0f:62:61:b1:12:2c:e5:46:34:a9:b7:b4:58:8c:9c:
         ab:d7:88:60:2c:1c:26:c4:cb:5e:47:19:81:7d:fd:d0:09:54:
         8c:9d:82:55:8e:34:e8:27:d3:b9:14:90:2b:46:0e:da:f3:18:
         45:0a:ec:ee:08:d7:58:3a:e2:25:d7:ed:08:a9:17:32:1c:c3:
         5b:83:10:20:f7:5f:7f:3e:67:18:f5:39:12:3c:5b:fe:68:e1:
         bc:ce:e7:8c:86:f0:d9:25:c7:79:51:b1:91:13:49:22:ce:a3:
         fe:0c:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:40:36 2025 by rpki-client