Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa
File:                     f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa (raw, json)
Hash identifier:          Ys3AkaXyofJJutvbphMME/Oq+lJJjvs9XJGjJjUDfRE=
Subject key identifier:   76:90:7A:84:2C:F9:45:59:D7:D7:B3:41:82:8F:01:E5:93:2F:FD:DE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD7798656E23207C09F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11427
IP address blocks:        70.120.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d7:79:86:56:e2:32:07:c0:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4ef47cab-c535-4957-95bf-4c373da46168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:8c:a3:99:e9:bc:d5:25:3f:4e:bf:1d:9a:
                    02:a5:4a:88:2d:50:f5:7b:68:31:d0:38:91:95:ed:
                    1f:48:cc:8c:2b:4f:ac:5f:59:4e:37:54:3d:86:1e:
                    11:15:f2:52:1c:9c:4d:93:c9:bf:80:08:89:9a:b7:
                    fc:27:02:ee:29:ad:e7:d5:f1:70:2e:05:37:04:28:
                    b8:d3:d5:49:3b:30:10:1d:10:4a:be:55:15:37:d2:
                    2c:aa:72:ed:e3:66:93:5c:2f:1e:0b:76:e0:cc:74:
                    44:35:0f:bc:a6:63:c5:42:e4:47:0f:2d:7c:12:5c:
                    17:fd:58:3b:52:d9:61:46:d4:58:1d:da:23:6c:1a:
                    60:ba:ee:8b:fe:ea:ac:69:1f:b6:d5:a9:36:e5:51:
                    7e:46:87:93:1f:31:7e:6b:f5:b5:96:77:28:01:4b:
                    d9:19:f4:33:f7:63:b2:2a:56:a2:5e:7b:04:bd:26:
                    aa:45:5e:d0:91:f2:31:26:be:89:d4:8f:dd:18:eb:
                    ed:f6:65:e2:ae:a8:2b:e7:49:7c:95:62:62:fb:d0:
                    27:2c:80:b9:b5:dc:14:d6:5c:7c:10:41:9e:00:dc:
                    92:91:9d:da:11:0f:f8:bb:dd:a0:48:b2:f5:2a:49:
                    9e:af:91:e9:61:88:73:4c:f8:3f:eb:9b:d5:0a:a6:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:7A:84:2C:F9:45:59:D7:D7:B3:41:82:8F:01:E5:93:2F:FD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f8be478a-3593-3c09-83b3-bf6d7f0e6009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.120.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:11:2e:16:9a:b1:1d:07:83:ff:19:44:19:09:d2:17:5f:66:
         e2:62:29:4c:e6:2e:39:13:ff:c7:a3:5a:b0:82:bc:f7:64:94:
         4e:26:46:e6:1d:19:86:f5:cc:2b:69:22:6d:04:c8:81:7e:c8:
         e9:13:42:52:e4:8f:15:f0:ba:a8:db:bb:3d:43:fa:a0:cf:01:
         68:77:89:71:9e:8d:43:0e:8a:b5:d0:df:a8:2d:51:a1:70:e2:
         04:da:dc:fc:5b:7a:02:4f:b1:2d:fc:b5:93:ec:f8:2f:c0:aa:
         89:30:e1:f2:1b:4e:59:f5:9d:41:8a:44:43:35:7c:4c:6d:78:
         ef:41:04:4e:1d:09:42:49:af:cb:81:eb:8c:4e:f4:c9:4a:72:
         a8:8d:8f:33:d9:5f:63:22:93:da:42:0e:97:13:7f:6c:62:f4:
         fc:ef:b1:49:9f:58:7d:65:50:22:de:b0:c6:c8:ef:21:1f:fb:
         46:72:0c:25:3c:6e:84:23:63:53:ad:7c:00:7c:b1:1d:68:ec:
         c6:94:ae:6f:0f:18:b5:91:07:dc:31:08:7e:02:20:48:a9:ba:
         02:36:6e:45:44:59:a6:98:d5:66:ee:85:02:9c:07:5b:09:2a:
         49:fc:b9:73:32:58:11:51:22:c9:d6:6b:62:c7:bf:03:d5:7b:
         5e:aa:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:15:01 2025 by rpki-client