Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa
File:                     ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa (raw, json)
Hash identifier:          gfp/RPxOe5Fvmp3PYlDcExkXM0OGLsjqd8r9v1jWqRM=
Subject key identifier:   E9:8F:7B:6C:5B:92:F7:31:B9:A5:98:62:D4:4F:F6:69:22:1B:85:C3
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BB6B201594D7D99E99F680
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        172.102.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6b:20:15:94:d7:d9:9e:99:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c6ff58c5-e2cd-406d-9150-a76e5adfc475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:df:8a:ae:a3:c3:36:3a:6e:93:a8:07:a7:
                    1b:1b:45:3b:e2:d8:4a:8d:a0:1d:5f:1c:d3:7d:11:
                    ab:1e:34:35:4b:c1:ed:be:69:02:dc:6e:d4:84:ca:
                    8a:b6:ae:ff:82:45:37:4c:b0:bd:5f:2e:6e:e1:ec:
                    ee:c9:90:0f:38:5a:de:c8:d6:f1:f6:1d:b1:d5:f1:
                    55:46:9b:dc:39:cd:5e:db:a0:27:da:f6:b0:dd:ba:
                    d3:71:fe:11:4b:44:80:02:34:e3:47:3a:81:c5:e6:
                    ff:75:3f:14:cd:80:36:e0:b1:c2:b9:e0:07:dd:3d:
                    54:4e:69:a0:b1:07:57:04:d3:f7:2d:3f:6b:98:6c:
                    74:b1:a9:e6:4f:ef:8a:41:78:c4:88:e3:03:53:30:
                    31:78:d0:0d:2a:18:b2:b6:e7:c8:00:97:94:c0:45:
                    a7:8d:a0:4d:fd:83:63:88:7a:6f:ff:92:04:14:ea:
                    5e:93:14:93:16:ac:4e:87:22:d7:a6:fc:03:09:d0:
                    3f:2b:44:4b:02:29:3c:50:5c:8d:e6:f6:33:f3:ff:
                    12:e1:f6:86:39:31:11:a9:23:d9:9f:4c:a1:13:99:
                    45:08:f4:99:fe:2f:ee:bf:03:56:48:5b:e8:0e:10:
                    97:1e:65:bf:93:1c:db:7f:f7:5a:d1:a9:47:e0:45:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8F:7B:6C:5B:92:F7:31:B9:A5:98:62:D4:4F:F6:69:22:1B:85:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef1af8ad-1716-3d65-a0e9-3cdee82182f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:3e:53:ce:0e:7c:c7:1c:d8:79:17:b1:c6:d8:7d:5c:c8:
         0a:33:36:8c:7d:0c:ea:c3:9a:df:16:fd:2d:11:97:81:f8:8a:
         a7:3a:9c:6b:aa:4b:69:22:33:b0:9a:fc:08:8c:9f:4b:19:fa:
         b1:ed:ef:f4:53:67:f5:26:ab:84:a4:71:dc:01:bc:aa:bd:83:
         ad:05:4e:f4:0e:e3:79:70:69:f3:40:b8:8d:04:a9:d9:e7:7c:
         88:75:27:3e:29:ea:bb:ea:e4:f6:a0:7b:96:75:3b:97:13:29:
         cd:2e:4f:a1:30:26:6f:87:9a:15:79:b9:88:1a:1f:02:3d:33:
         c6:02:84:29:e6:90:22:83:d2:84:fc:4a:fb:7b:de:21:a9:f1:
         98:5b:0c:a3:61:fa:e4:b0:b9:fd:96:24:83:56:4d:f0:74:40:
         1e:59:45:70:cd:a3:09:7a:4b:15:4d:e6:3f:97:31:e5:26:33:
         fa:4b:06:66:db:3c:76:0b:83:bd:da:6e:ca:1d:61:ac:02:26:
         8f:37:34:db:d4:f3:68:0c:78:53:2d:85:f1:66:8c:73:4b:a7:
         33:0f:bd:4e:91:66:4a:b3:16:f3:d1:e9:d0:82:49:7c:f4:ff:
         fa:ca:10:ea:5b:2f:8a:70:0d:a3:ae:e2:60:8c:f8:8c:ec:02:
         b5:b2:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:08:09 2025 by rpki-client