Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f28d33db-35d5-33d5-860f-82dc7eab41c0.roa
File:                     f28d33db-35d5-33d5-860f-82dc7eab41c0.roa (raw, json)
Hash identifier:          +CQWvgC8i7H+L5GE5SzMP1wT1Uhb9NCPDM/CMGZdxmA=
Subject key identifier:   C8:E4:C3:A6:2E:65:8F:1E:B3:CD:CD:80:BC:FC:A6:84:61:6E:D4:7C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A32741B7DCB2ADFE10C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f28d33db-35d5-33d5-860f-82dc7eab41c0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.106.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:32:74:1b:7d:cb:2a:df:e1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1b24cfa3-10a6-4091-8190-87b6a9afd551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c7:dd:72:23:5b:2c:1d:fc:ed:d7:1f:34:f7:
                    9b:d5:03:2a:bf:e0:19:dd:a0:d0:5b:1b:2b:bb:20:
                    f8:53:03:21:2f:14:54:47:16:92:f8:c3:ee:8e:d3:
                    a3:7a:4c:f0:dd:e2:3d:6d:e6:82:4d:5a:16:aa:c2:
                    d5:48:98:6f:82:31:58:ae:25:bf:25:d0:03:48:cb:
                    0f:3f:ce:46:e6:92:47:3a:43:11:cd:ef:ec:6b:19:
                    1e:e7:cd:62:75:80:11:95:6d:ef:0c:4e:e9:bd:56:
                    12:68:bd:81:b5:cb:3a:9a:8a:74:2c:f8:ac:f9:3e:
                    c7:c0:c5:93:95:40:75:42:4e:95:c5:65:e5:df:df:
                    ab:0e:f5:a8:d7:42:4a:6d:6d:ae:ef:e4:e5:f7:6f:
                    62:67:90:b7:45:02:cc:05:1c:b9:65:96:8b:00:b0:
                    98:65:f0:b6:fa:db:dd:cc:e8:dd:4f:10:aa:66:19:
                    5d:a9:da:0b:00:9f:ac:5f:c9:63:32:38:04:d0:44:
                    da:e3:cc:22:9d:5f:02:44:b2:f6:93:46:23:2c:81:
                    39:61:d5:0b:b3:ae:0b:f2:9e:d1:9b:bf:b6:75:ce:
                    10:17:c4:ff:69:71:f1:13:d3:00:4f:1c:3b:e0:fd:
                    be:92:51:8a:8b:c0:46:ae:dc:de:55:34:c1:ca:80:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E4:C3:A6:2E:65:8F:1E:B3:CD:CD:80:BC:FC:A6:84:61:6E:D4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f28d33db-35d5-33d5-860f-82dc7eab41c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:43:eb:75:42:3d:60:91:9a:13:b8:5b:80:ff:ec:59:0a:
         ab:dc:17:48:0d:b2:a9:4a:a5:6c:68:de:ed:a7:cf:37:0c:68:
         bb:6e:1d:70:12:dd:91:e7:ac:59:5b:d3:e7:44:31:1b:88:99:
         35:06:94:18:8f:ea:47:bd:a8:cd:c8:b7:84:17:ec:ea:49:0a:
         77:ca:95:ce:53:32:71:b3:86:c0:8d:8c:ee:4c:fd:14:b6:bc:
         48:a5:c4:1c:18:9e:bd:44:42:7c:a2:a3:f2:1f:ae:29:bb:04:
         92:06:d4:20:c5:97:aa:5f:e1:cc:6c:fe:db:f3:b1:00:37:3f:
         18:b9:ca:bf:b9:f5:11:63:d5:ef:e4:2a:ae:50:6d:70:fe:3e:
         d2:f9:57:f0:18:8b:57:6a:b7:f4:09:3e:17:5c:5f:31:db:7f:
         31:b7:93:9a:45:03:7e:1b:e6:ef:bc:1e:81:b1:60:d9:b6:83:
         63:c2:b0:b9:e1:00:32:70:3e:05:4d:0b:9b:fc:ac:c3:76:f1:
         f4:af:5e:49:eb:f7:f8:09:0f:2b:e3:3c:24:32:60:4a:ea:e8:
         ff:a2:23:67:5d:ad:5e:4b:5e:d1:e5:c9:6c:64:22:6f:40:e9:
         68:6a:ea:b9:84:d3:9c:bf:0e:1f:63:2b:77:66:c9:80:92:1e:
         49:35:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:31:45 2025 by rpki-client