Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb2cbeeb-83f2-325a-95ad-913a0a97c15a.roa
File:                     eb2cbeeb-83f2-325a-95ad-913a0a97c15a.roa (raw, json)
Hash identifier:          pJahD2+4VAi77Nc+7I6vtai1DaqdI5FCh967wMrXF3s=
Subject key identifier:   26:E6:23:73:C5:21:1E:28:D4:74:25:8B:12:22:FF:AE:2C:1A:19:A1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ABACC5ED31023DE719240
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb2cbeeb-83f2-325a-95ad-913a0a97c15a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7843
IP address blocks:        107.14.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ba:cc:5e:d3:10:23:de:71:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=85da8ff9-2d8a-4d7e-b9c6-257e49cd0609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:7e:c0:5c:27:ff:2a:d7:9a:a8:24:77:09:
                    a6:2b:23:16:17:b1:4c:49:48:57:a2:5e:33:87:d5:
                    83:f0:8b:4f:13:cd:51:a7:f4:79:42:ad:90:38:48:
                    e5:a9:ab:aa:48:6b:17:3d:10:ab:42:d4:60:ea:85:
                    66:b1:26:e7:f3:7d:ff:d6:b9:3f:cc:45:8e:61:a1:
                    15:bb:c4:c6:44:29:66:28:d2:e9:30:76:94:c9:2d:
                    05:6a:8c:2f:a0:3e:fc:7f:44:95:ef:51:b6:85:48:
                    67:f3:e2:b7:1a:bf:ea:d6:c5:c7:a1:d3:aa:c8:71:
                    50:75:15:4a:d2:89:ea:cc:e7:34:26:b5:2f:a3:dc:
                    78:18:f3:15:f8:aa:13:56:d3:13:9a:23:2a:cb:c7:
                    e1:51:e4:71:9f:fb:75:bc:c3:98:36:95:72:63:19:
                    01:40:ce:d5:4f:4d:a9:87:8b:13:e3:4a:12:7a:d8:
                    e9:fe:3d:ea:78:84:74:69:c1:52:1c:69:8e:58:cb:
                    db:ae:90:92:84:ae:ce:61:60:d2:eb:e6:49:2b:e8:
                    52:05:74:4e:b7:08:cb:66:2a:38:12:d9:dc:bf:a4:
                    c8:21:cd:b1:8c:5f:76:54:1f:3a:55:69:27:d7:fb:
                    ca:84:dd:c7:40:32:73:35:38:91:e3:4c:05:8b:73:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:23:73:C5:21:1E:28:D4:74:25:8B:12:22:FF:AE:2C:1A:19:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb2cbeeb-83f2-325a-95ad-913a0a97c15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:e9:74:2f:7c:ae:76:fb:ee:f6:2d:60:bc:f1:35:9b:7c:
         d4:36:33:61:ba:7c:92:ef:59:e3:44:f1:89:a0:ac:42:64:c0:
         33:04:4a:9b:b1:14:91:85:d7:fd:e1:53:b0:cd:67:a3:62:59:
         e7:a4:9d:06:28:60:b8:0f:cd:12:6d:b0:5a:fd:6b:30:fa:2b:
         27:4b:e4:33:70:a7:f5:0b:d8:06:d2:56:da:3d:6f:1a:1c:0d:
         9e:bd:5e:a0:04:ee:02:7d:58:ee:02:5a:32:13:cf:32:fe:f1:
         2c:a4:2c:50:49:1f:57:fa:69:f4:96:9f:e3:cc:cf:9d:fe:04:
         6b:a8:e4:bb:67:28:2e:4c:5d:d5:a2:cc:c9:68:f8:08:93:78:
         2e:94:33:5f:dd:c5:07:3f:59:93:d3:a5:6c:aa:e6:39:13:ff:
         cf:ab:ac:8d:ea:58:48:f3:ee:4f:7d:2e:a1:39:91:a4:0e:f6:
         f9:75:c1:06:d5:dc:70:11:2b:23:44:2a:e7:05:47:bc:9f:b0:
         c9:32:cd:be:ef:d2:21:06:7f:20:18:b2:28:ef:b1:71:a1:43:
         6c:16:37:8b:1c:02:9a:bc:41:75:40:15:f0:f9:31:bc:10:7f:
         a0:26:38:e9:b6:bb:a0:ad:d7:19:90:06:63:fd:df:04:fd:a4:
         5b:8c:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:14:07 2025 by rpki-client