Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0940157-c993-31d0-9438-fe4e7ba97213.roa
File:                     e0940157-c993-31d0-9438-fe4e7ba97213.roa (raw, json)
Hash identifier:          K0YI/gnVk2js9/Jpt63CteuWEUZFFZb/4QO9sg3akKc=
Subject key identifier:   D4:40:A6:E8:9F:C9:6F:F6:81:78:05:16:7A:A8:75:C3:BB:F0:F4:E4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC3114DB75B100A35CE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0940157-c993-31d0-9438-fe4e7ba97213.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.165.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c3:11:4d:b7:5b:10:0a:35:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2bd9921f-64ce-410b-9221-9e0e974df19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:60:8b:34:f2:48:54:ec:15:d2:47:e8:32:
                    a3:5c:00:70:d5:8f:61:c0:49:d5:c4:f8:11:84:44:
                    0d:80:d2:2f:ae:83:80:36:e9:85:1e:09:02:2f:7e:
                    39:5b:6a:24:d2:49:37:9c:9a:5b:ff:83:93:be:2f:
                    e2:5c:5c:64:d6:95:9c:89:fc:b4:7a:60:00:e3:ea:
                    ef:c4:97:e3:83:9a:a8:b7:ae:49:bc:7f:ea:a0:2a:
                    0b:80:da:6a:df:be:83:82:3b:f8:f0:41:69:74:6f:
                    5c:88:89:92:e3:5c:44:e5:a0:9f:3f:49:ea:90:e1:
                    65:04:fa:51:a2:41:d2:2b:bf:a5:0d:3e:44:6f:1c:
                    47:42:32:a7:ab:50:9d:5e:6b:63:2b:8d:05:68:e1:
                    90:25:16:b4:6c:59:48:ac:f6:8a:48:90:a1:67:9b:
                    1c:77:50:db:b5:ff:c7:e0:27:e3:fb:39:e6:04:f0:
                    9b:d9:f3:51:63:b6:b9:67:cd:a7:40:c3:28:0b:b3:
                    1e:e9:f4:a7:71:03:fe:71:a2:86:50:9b:46:69:47:
                    e8:27:d4:25:4e:9d:c0:47:82:30:95:e0:3b:50:8e:
                    18:7f:7b:ce:46:67:a1:60:a8:ea:22:62:8c:ea:8c:
                    df:e7:4b:cb:10:44:6b:f8:2e:d4:0e:97:93:90:a4:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:A6:E8:9F:C9:6F:F6:81:78:05:16:7A:A8:75:C3:BB:F0:F4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e0940157-c993-31d0-9438-fe4e7ba97213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.165.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0c:65:83:f4:65:c2:4a:48:90:63:3c:2a:0b:29:39:60:6b:
         c9:93:e7:86:2c:9f:42:e6:10:c6:fa:9a:33:90:f2:8a:73:41:
         75:dc:7c:d8:ce:1b:44:98:f8:f1:00:e7:0c:39:1d:20:49:98:
         7e:57:2f:c8:43:7a:35:de:4f:9c:c4:f3:01:6f:bd:a6:f9:31:
         e1:a8:1e:a9:2e:f5:1f:21:08:18:a1:a4:6f:52:8e:3d:5b:97:
         b8:25:4a:e3:a9:7a:01:d8:99:46:3e:ac:64:0b:e6:4c:9c:56:
         b9:41:e0:a3:94:dd:c2:e1:36:16:fa:76:eb:d0:b2:87:29:3e:
         27:96:2d:db:07:d7:5a:c9:05:2f:6d:2f:d3:4b:79:d9:c6:f4:
         fd:d4:9c:dd:a2:cb:6e:12:75:5e:06:89:98:0b:66:e4:a4:c5:
         27:fd:dd:d0:8b:80:1d:51:6e:72:bc:84:b0:81:d2:dd:29:e2:
         32:1d:f2:24:4f:4a:4d:73:59:c7:25:7d:ec:95:cf:7b:3f:5a:
         fc:47:84:6a:54:03:ae:99:05:f5:44:3c:d7:3f:f8:3a:14:a4:
         db:98:9f:6f:3a:92:2d:42:5c:45:aa:45:9f:7e:8a:18:95:57:
         f9:56:a7:ab:29:39:b7:91:76:1a:37:51:24:b6:c8:d2:d3:7a:
         1b:31:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:24:58 2025 by rpki-client