Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec8fe657-dbca-33bf-9b39-0a2cb914cbc3.roa
File:                     ec8fe657-dbca-33bf-9b39-0a2cb914cbc3.roa (raw, json)
Hash identifier:          bv3vUux5ovFA0D+vJgovTuvTzTrenMee4EEKZW1SsZY=
Subject key identifier:   BC:8E:5D:A2:13:E0:92:CE:50:89:95:DB:65:14:4D:51:86:44:BA:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AEBCA693D0C5BBB30B8C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec8fe657-dbca-33bf-9b39-0a2cb914cbc3.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        71.40.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:eb:ca:69:3d:0c:5b:bb:30:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=9a29265d-beff-4ea8-bd67-e728f6b94df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:17:22:03:f1:c3:c5:b4:9e:62:47:9f:72:
                    ee:0b:b9:bd:3e:53:d4:17:a6:5d:90:d2:df:70:a4:
                    d0:78:cd:50:a1:82:fa:10:f7:5e:1e:5f:f0:45:c3:
                    f5:a9:aa:1b:56:11:64:7b:df:72:51:b9:2f:4a:79:
                    00:b5:63:20:0c:0b:f5:1e:0a:d7:4d:ce:4d:8c:53:
                    ac:6e:2a:67:ff:9f:78:71:5c:1d:25:f1:9d:f5:f2:
                    fb:2f:0e:ce:5f:55:6d:83:f2:de:d7:cd:e2:5d:d4:
                    63:c4:5c:87:80:d2:5d:3e:14:a9:a4:38:00:f7:84:
                    fd:b6:b6:e9:96:f1:9b:58:71:20:39:cd:0c:b1:62:
                    e3:6e:7f:9e:75:6d:30:b1:db:9e:3b:2d:29:09:b4:
                    33:63:f6:fc:02:9a:71:0f:b1:5d:f1:6b:9d:c6:a2:
                    66:d1:4f:1e:a8:98:8a:c0:81:af:1d:9f:36:54:3e:
                    53:ac:c7:ea:14:cb:58:ba:70:99:ca:f9:43:c2:b4:
                    77:98:db:fe:1b:d7:4d:d2:0c:b1:35:3f:6f:1c:de:
                    2f:15:e3:0c:d8:65:ac:e6:a5:b9:fe:fe:35:4d:5a:
                    3c:08:7c:e8:ac:48:a6:3f:56:88:84:04:8c:ce:a6:
                    a2:d0:c1:56:52:1f:69:93:e6:d7:d7:b9:88:10:9b:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:5D:A2:13:E0:92:CE:50:89:95:DB:65:14:4D:51:86:44:BA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec8fe657-dbca-33bf-9b39-0a2cb914cbc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.40.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:90:23:99:f1:2c:a0:83:2e:c0:d6:4b:a5:16:31:85:eb:
         95:0a:3d:ea:f2:52:eb:55:38:02:ed:5e:19:ff:3b:ae:ab:eb:
         e4:ef:43:f1:34:5f:c1:ba:fd:50:bc:72:7c:27:9f:aa:46:02:
         83:ab:f5:58:d6:b4:ae:d4:23:5a:7d:38:47:be:c0:e4:f4:2f:
         e6:fe:09:d7:3d:f4:52:44:ca:9d:a8:ed:7c:bb:ac:06:2a:fc:
         7c:27:15:1c:e1:ad:16:81:fa:59:98:a5:6e:8a:cc:3d:8d:a7:
         54:e2:7d:ba:0d:f2:bf:43:c8:40:e3:b2:7b:50:6a:a7:72:c7:
         ba:b4:bf:da:ed:fd:a9:5e:8c:f8:b3:7d:d0:f5:df:2f:10:6c:
         c2:67:98:1b:df:de:b8:ac:37:71:80:b2:3a:fb:32:33:13:62:
         28:1a:10:14:83:20:9d:5f:36:4c:0e:83:2d:26:34:80:3e:83:
         1e:96:2f:75:33:9f:8f:60:1e:a4:62:53:e7:82:2c:b4:07:5f:
         4b:90:a3:b4:3f:0d:88:4b:aa:72:8a:fd:d2:4b:75:e6:83:da:
         6f:68:b8:39:f7:18:a3:03:51:0a:4c:c8:da:77:28:70:d3:34:
         3c:56:d6:0b:61:fb:a7:07:f0:1c:1a:8a:46:1f:37:49:dd:6b:
         ea:ae:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:59:40 2025 by rpki-client