Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fda3014a-7029-3038-ae4e-e325e1cd3e6a.roa
File:                     fda3014a-7029-3038-ae4e-e325e1cd3e6a.roa (raw, json)
Hash identifier:          0OR++MNjdBFcdOvyn5o9N9DPqhB8nr1t32HgIlM4nQ0=
Subject key identifier:   C9:7B:4F:A0:7A:57:54:F3:1F:CE:67:BC:B3:6C:63:FF:2F:CA:83:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE370E6184C70050D73AC
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fda3014a-7029-3038-ae4e-e325e1cd3e6a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        67.53.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e3:70:e6:18:4c:70:05:0d:73:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e2a1b73d-83a4-4479-8f59-405c305b26ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:fc:62:54:24:d0:66:65:f2:32:cd:99:f2:
                    f7:04:82:48:e6:92:c3:22:01:35:68:bd:ae:2e:d9:
                    15:52:7a:db:98:58:cc:a3:75:49:e5:c0:e2:26:bd:
                    0e:d7:82:92:34:d3:c1:15:d3:bd:ce:97:ac:0d:3e:
                    80:07:2a:33:25:95:70:2d:c1:f3:2c:22:5e:be:be:
                    67:b6:80:f8:a1:c9:24:0e:e3:84:d3:7a:c8:f8:75:
                    ec:62:49:f8:a4:41:eb:93:a1:66:36:45:eb:e9:26:
                    fb:0f:b0:0b:f3:19:ac:32:1c:a2:61:11:f0:21:07:
                    1d:4b:07:a7:21:3b:ef:7c:53:9a:35:9f:dd:e3:8d:
                    c0:5d:f0:fa:15:c8:63:00:da:5e:da:d2:32:dc:e6:
                    73:fa:25:08:32:33:ef:a4:5f:d5:20:5f:55:93:ad:
                    e4:23:d6:80:d5:1e:f8:20:cb:69:38:d5:9d:00:56:
                    f4:a5:48:a1:37:d1:72:d5:8e:09:f3:74:ff:39:5f:
                    3d:98:ed:62:ea:a6:7e:be:f0:5a:96:20:57:f5:1a:
                    53:df:69:56:8e:22:b6:d7:ad:c3:dc:85:11:aa:95:
                    a7:29:1d:12:80:92:bd:cc:03:7c:65:36:a6:9e:d4:
                    62:fa:82:72:f6:d8:45:6b:da:d2:e1:c5:ca:9c:68:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:4F:A0:7A:57:54:F3:1F:CE:67:BC:B3:6C:63:FF:2F:CA:83:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fda3014a-7029-3038-ae4e-e325e1cd3e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:4f:a4:41:1c:82:72:54:24:5f:ad:57:92:05:11:91:9e:
         06:ab:fc:11:d8:88:d9:53:86:e2:14:43:be:37:95:d7:43:47:
         d3:c6:37:de:72:0c:4a:ef:f5:ce:db:6e:9a:b1:56:d7:84:10:
         f7:bc:5e:fd:07:dc:71:38:72:71:a6:6d:6c:c8:a0:67:22:13:
         8b:21:0e:78:a7:b2:7a:a9:1f:56:bb:68:c8:d3:52:e4:14:e8:
         bb:cb:7e:8d:58:ed:80:af:f1:33:db:4f:4c:e6:0e:43:f4:53:
         77:36:a1:7d:e8:78:4e:84:9b:77:bd:90:13:60:c4:5b:93:e0:
         45:3e:93:b1:a2:94:33:c5:41:ac:0d:da:b8:a7:6c:4b:71:09:
         73:91:cc:52:62:b4:e5:e4:f6:f9:93:58:99:d1:b2:9c:32:37:
         2f:99:de:c3:86:2c:8e:72:16:ad:1c:af:15:25:0f:c4:85:84:
         94:0b:05:7b:84:12:90:0e:7e:99:da:39:19:bb:96:f4:d1:42:
         5a:19:74:2a:ee:96:0d:2a:74:40:37:76:84:a1:42:9e:87:70:
         29:04:25:8c:64:d6:c5:b0:e9:bf:1a:3c:6e:f8:1d:2b:c3:98:
         d4:9c:a0:fd:c6:b0:75:26:05:8b:40:ee:40:c6:56:a0:8c:a6:
         90:ce:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:59:20 2025 by rpki-client