Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df71e3fd-36c2-3d2e-a7e5-ca24218aa927.roa
File:                     df71e3fd-36c2-3d2e-a7e5-ca24218aa927.roa (raw, json)
Hash identifier:          ygHCWX/pTb4N2YTxTV/lSJjcc0IE/t+YphgkoLSxZso=
Subject key identifier:   A9:1A:77:E4:AE:72:F6:94:22:77:56:B7:95:9D:52:4F:D3:76:AE:2B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC0B55C3F1CB1E92EAA70
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df71e3fd-36c2-3d2e-a7e5-ca24218aa927.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        173.88.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c0:b5:5c:3f:1c:b1:e9:2e:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ee357b7e-2486-44f5-b5c7-10caa667b399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:fb:e5:7c:cd:86:da:6f:27:28:d5:6e:78:
                    43:d8:6e:a5:d9:e5:d5:4e:dd:72:81:ec:ba:81:ef:
                    be:fd:ab:9f:32:2a:ba:5e:c6:02:9d:d8:47:33:f0:
                    b7:0d:6c:15:8e:92:9a:6d:e1:6e:d8:6b:1e:02:2d:
                    54:87:43:29:73:ee:d4:4c:18:cf:26:fb:0d:4d:19:
                    d9:1e:3c:5c:5a:87:7c:c8:d4:29:a8:8a:0e:b5:36:
                    2e:c9:0f:88:66:86:10:5a:14:00:2e:a4:05:c9:d2:
                    80:43:31:26:73:fe:51:1e:e8:4e:b4:df:36:a9:b8:
                    81:d7:8a:07:9e:19:5c:6e:ea:b1:51:df:39:0c:b3:
                    f6:a0:cd:a6:48:7e:5d:e7:96:09:a3:61:c1:04:07:
                    64:0d:65:1f:98:40:f6:81:7e:98:91:66:30:f0:54:
                    6e:4a:c3:bd:96:97:8f:ba:0d:72:35:5a:a1:28:08:
                    d4:e1:71:e8:94:ae:c1:d7:3e:5b:77:f2:cf:28:64:
                    b6:6a:67:70:64:27:64:11:96:65:b0:be:03:30:c3:
                    28:1f:af:c5:bf:b3:20:db:4e:50:92:29:4d:d7:38:
                    4d:c9:f6:1b:78:88:5d:5f:35:bd:91:1a:d5:9f:9d:
                    03:f1:5f:e7:4e:fe:6d:2c:c5:bb:58:71:2e:ce:e9:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1A:77:E4:AE:72:F6:94:22:77:56:B7:95:9D:52:4F:D3:76:AE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df71e3fd-36c2-3d2e-a7e5-ca24218aa927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.88.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:36:b0:d6:b5:68:bb:a1:94:d8:61:b9:40:2e:51:a7:92:02:
         42:f6:24:a2:4e:aa:b8:29:e4:da:69:88:90:8f:c3:63:5d:31:
         d4:0e:04:77:1a:59:c2:74:27:57:85:9c:8c:a9:32:e5:d2:c7:
         5a:60:64:13:6b:77:18:51:e4:26:75:eb:b9:55:b3:95:d4:6d:
         98:9e:69:e8:17:7f:9f:69:03:df:e5:89:6d:c6:27:4b:a4:b8:
         85:a5:c6:0f:9e:f0:4f:b8:c6:14:92:c7:7f:d6:58:6b:3a:c7:
         50:82:8e:0a:cb:1a:48:3c:8d:bb:5a:be:ee:5e:8e:0b:36:6d:
         1d:f4:29:8c:7f:c1:70:bf:42:70:c2:5c:d4:a6:89:7f:8c:36:
         85:07:e6:e2:6a:11:17:8b:af:fe:bf:6e:e6:72:fc:2f:10:69:
         29:2d:5b:01:ad:e1:a7:bb:4d:7f:12:aa:9f:ac:41:63:cb:4b:
         dc:33:94:70:10:a8:38:b1:e6:9c:8f:f6:d0:87:35:00:6e:f3:
         74:be:7a:5b:a1:e0:25:71:2d:63:f9:0b:f0:94:b2:43:1f:23:
         02:8b:18:5a:73:87:19:33:18:f8:4f:07:56:92:11:ef:54:ea:
         58:52:d6:d6:4e:1b:c4:38:c0:7c:2c:fa:6b:4a:34:02:80:88:
         3b:a1:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:12:39 2025 by rpki-client