Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df7b9907-a936-38d6-a4a7-4ff5feb6f234.roa
File:                     df7b9907-a936-38d6-a4a7-4ff5feb6f234.roa (raw, json)
Hash identifier:          VTEhvWDz6cduABq/uMqFznMbFlV6lG31EoQji7zMsnM=
Subject key identifier:   72:1D:E2:5B:AC:F5:67:67:9E:4A:C5:02:18:A4:0E:BD:2B:A9:24:04
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A44D0257AAC44A55C0880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df7b9907-a936-38d6-a4a7-4ff5feb6f234.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        71.65.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:44:d0:25:7a:ac:44:a5:5c:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4babf4f6-ac5f-483c-b537-0bc347e2b532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:75:3a:8c:31:eb:46:bb:bd:2c:6c:a6:e4:
                    e9:e8:98:15:7d:fd:c5:0f:83:f0:e4:30:09:f0:b3:
                    67:93:dc:72:f6:24:6e:8f:66:43:44:98:fe:b0:43:
                    a8:8b:6f:70:f1:0a:af:4a:0c:71:74:92:e6:af:8c:
                    14:97:2b:0a:00:bb:2c:72:4b:26:db:9e:c1:e8:f7:
                    a1:53:42:ca:42:4f:32:5b:df:25:73:68:67:d6:b3:
                    25:d0:4a:7e:f7:0f:be:8c:12:f7:7c:77:bc:b2:73:
                    a0:f3:d3:87:e4:85:06:f1:68:10:94:67:73:37:cf:
                    e5:1a:06:3c:e9:fb:62:52:bc:92:a8:09:aa:63:d2:
                    47:2a:e4:95:ea:64:c8:9d:ab:78:c8:0e:b8:a6:a8:
                    1a:0e:eb:62:6b:35:f4:24:85:3e:82:9a:1f:f6:0e:
                    cd:a3:71:ea:91:32:28:ba:cc:bb:89:de:f3:7b:95:
                    02:bd:03:92:27:49:b7:da:cd:41:0b:17:aa:ed:89:
                    80:57:2a:b1:e0:f0:6a:dd:2e:f1:fe:6f:d1:d3:9d:
                    c9:2a:9f:58:38:22:f0:bf:20:bc:a7:a1:60:b3:fc:
                    b3:d5:94:48:0e:ff:69:3d:76:db:b6:63:97:0f:a5:
                    ec:9a:43:79:8e:5f:1f:50:22:6b:84:80:31:b1:12:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1D:E2:5B:AC:F5:67:67:9E:4A:C5:02:18:A4:0E:BD:2B:A9:24:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df7b9907-a936-38d6-a4a7-4ff5feb6f234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.65.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:77:16:c0:fc:72:1c:61:ac:46:00:23:13:45:bb:b8:95:eb:
         31:8e:4f:03:66:47:f6:3c:5e:3f:16:81:c5:bd:24:77:f2:3c:
         54:bc:5c:e7:7f:1b:b3:bf:f2:48:da:54:eb:16:4a:02:93:00:
         f8:d0:d6:12:d4:af:bd:04:41:cd:f3:73:f8:c5:95:d2:27:6b:
         3a:00:c6:71:d2:07:53:b4:5a:cf:30:6f:36:29:3c:15:83:ee:
         17:6a:d4:f3:8b:2a:72:e0:0c:82:07:da:33:d6:7d:f4:10:6a:
         9b:15:8f:b6:00:d1:3c:ac:e1:62:59:57:3e:bd:d0:b3:62:9a:
         13:7d:5d:8f:33:b7:20:f0:ab:0f:c0:a8:c1:88:77:e4:60:fe:
         dd:56:12:bf:0c:6f:02:04:8e:fc:46:28:21:7b:0c:10:fc:40:
         4f:4f:14:33:fe:28:91:3e:74:a8:73:c3:3e:07:be:51:99:28:
         58:15:e1:44:6c:58:ef:ca:81:e0:e4:53:b4:92:a6:01:85:ed:
         8a:13:48:9e:a7:be:dc:de:e0:8d:e4:37:01:59:6d:55:31:80:
         f1:d6:47:c2:85:8f:12:3f:69:26:17:a7:b1:ed:6b:05:94:3e:
         3b:16:fa:3f:10:f7:4d:fb:2c:97:90:18:76:f2:51:2e:98:19:
         2a:1f:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:18:03 2025 by rpki-client