Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffaa3370-45eb-35ec-ad11-53ed44e1e54f.roa
File:                     ffaa3370-45eb-35ec-ad11-53ed44e1e54f.roa (raw, json)
Hash identifier:          hdoThtA2lCdcvvb94nSDg0Q7yUr7uGrTCbtAFhh4SgE=
Subject key identifier:   93:60:24:A5:89:F4:1B:17:0D:51:F2:3D:7C:86:1A:84:4C:0E:B5:31
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A294F57A2FF5E341E8800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffaa3370-45eb-35ec-ad11-53ed44e1e54f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7843
IP address blocks:        24.143.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:29:4f:57:a2:ff:5e:34:1e:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=b76088e2-707f-4708-895a-d75ca4fed6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:2f:5b:a3:e7:05:fe:b6:c9:6e:87:29:40:
                    b4:a9:0f:23:73:4c:74:a0:00:e4:40:d2:c5:45:be:
                    bc:be:71:8f:a9:50:c2:99:61:4d:cc:1d:4a:04:3c:
                    6a:ee:b7:b3:29:95:d0:b5:71:1e:35:1e:06:91:0c:
                    be:b1:17:ad:e6:c7:04:ae:c9:d2:1d:d9:b5:4e:72:
                    fa:9a:53:d3:98:a4:2f:0c:f9:13:db:ee:32:f4:9e:
                    95:4d:5e:5e:3b:f0:df:ce:d7:02:b7:5f:b6:3b:8f:
                    42:db:fa:67:a9:91:5d:f3:48:bf:97:49:38:98:8c:
                    80:16:3a:e9:da:2c:12:89:c8:db:94:2e:c2:34:80:
                    a2:6f:83:35:5b:80:b4:f8:3d:0f:ff:d3:11:c6:26:
                    3e:3e:e5:87:ce:c8:9d:b1:53:4f:e9:d7:e8:52:03:
                    cc:33:e4:1a:36:3b:86:73:1f:5f:2a:44:17:9f:56:
                    eb:17:33:d4:45:f2:fa:b5:69:9e:c3:55:92:1e:4d:
                    36:6b:76:f7:91:e8:bf:4b:ac:13:fc:b7:f9:a1:66:
                    ee:3b:6a:0d:d2:5b:19:fb:f3:cf:52:15:60:80:cb:
                    77:3d:26:ad:56:82:77:28:3e:a9:ab:f0:08:a1:7a:
                    04:4f:9f:ab:80:8f:97:49:9b:49:53:15:c5:4d:73:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:24:A5:89:F4:1B:17:0D:51:F2:3D:7C:86:1A:84:4C:0E:B5:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ffaa3370-45eb-35ec-ad11-53ed44e1e54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.143.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:09:b1:f5:18:88:27:22:ef:04:97:73:51:aa:8c:eb:62:05:
         aa:26:b1:15:2f:00:74:3e:43:f1:11:06:ed:ed:f9:4b:ff:d0:
         80:91:6f:73:8a:70:dd:5a:af:b6:05:d5:27:ea:b1:7c:8c:7a:
         d2:ff:f5:b1:55:d7:86:af:d5:be:73:f4:59:93:2f:8f:c4:a7:
         0d:a7:1c:ea:90:a8:d2:44:e6:11:95:20:e2:76:6b:7f:75:26:
         a3:52:cd:eb:40:af:98:51:8d:ad:f7:8c:5e:a7:1e:b6:28:29:
         c6:6d:15:13:a0:5d:7e:d6:55:2a:b7:b6:b2:6f:8a:21:88:aa:
         64:d4:c3:92:3a:d3:a3:88:88:bf:95:c5:9a:87:7a:79:a0:d5:
         2f:47:fd:3e:91:9c:62:a7:a8:f3:f9:3a:d5:8d:63:38:a6:8e:
         71:da:d4:c6:f4:20:f7:57:4d:3d:22:bb:69:e3:ef:05:09:55:
         7f:60:5b:54:09:ab:25:80:69:7b:c3:b2:f1:d3:dd:35:2f:29:
         4a:38:bf:6e:b2:55:1c:da:6e:2b:e2:3c:87:2a:d2:7f:44:16:
         0d:34:99:77:d3:06:bf:4a:96:88:51:79:f5:93:50:11:6b:93:
         f4:23:ce:35:3e:32:f2:62:89:7a:15:99:45:c0:72:9a:bf:6c:
         f8:59:34:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCilPV6L/XjQeiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
Yjc2MDg4ZTItNzA3Zi00NzA4LTg5NWEtZDc1Y2E0ZmVkNmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBUvW6PnBf62yW6HKUC0qQ8jc0x0oADkQNLF
Rb68vnGPqVDCmWFNzB1KBDxq7rezKZXQtXEeNR4GkQy+sRet5scErsnSHdm1TnL6
mlPTmKQvDPkT2+4y9J6VTV5eO/DfztcCt1+2O49C2/pnqZFd80i/l0k4mIyAFjrp
2iwSicjblC7CNICib4M1W4C0+D0P/9MRxiY+PuWHzsidsVNP6dfoUgPMM+QaNjuG
cx9fKkQXn1brFzPURfL6tWmew1WSHk02a3b3kei/S6wT/Lf5oWbuO2oN0lsZ+/PP
UhVggMt3PSatVoJ3KD6pq/AIoXoET5+rgI+XSZtJUxXFTXOwfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJNgJKWJ9BsXDVHyPXyGGoRMDrUxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZmZhYTMzNzAtNDVlYi0z
NWVjLWFkMTEtNTNlZDQ0ZTFlNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGI/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUJsfUYiCci7wSXc1GqjOtiBaomsRUvAHQ+Q/ERBu3t+Uv/0ICRb3OK
cN1ar7YF1SfqsXyMetL/9bFV14av1b5z9FmTL4/Epw2nHOqQqNJE5hGVIOJ2a391
JqNSzetAr5hRja33jF6nHrYoKcZtFROgXX7WVSq3trJviiGIqmTUw5I606OIiL+V
xZqHenmg1S9H/T6RnGKnqPP5OtWNYzimjnHa1Mb0IPdXTT0iu2nj7wUJVX9gW1QJ
qyWAaXvDsvHT3TUvKUo4v26yVRzabiviPIcq0n9EFg00mXfTBr9KlohRefWTUBFr
k/QjzjU+MvJiiXoVmUXAcpq/bPhZNNI=
-----END CERTIFICATE-----
Generated at Tue May 13 00:11:34 2025 by rpki-client