Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34788f44-537a-335b-ab9c-1df645bd20db.roa
File:                     34788f44-537a-335b-ab9c-1df645bd20db.roa (raw, json)
Hash identifier:          fioQ2VzIEJKsWxdqYKui8IQpP6H4dWrGqdDZjvZ1fqc=
Subject key identifier:   DE:D8:E3:DC:E0:55:D2:93:00:DE:6D:26:5C:62:5F:1E:D4:4B:B2:3A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A936B5DBBC1B9D1365780BC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34788f44-537a-335b-ab9c-1df645bd20db.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        162.220.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5d:bb:c1:b9:d1:36:57:80:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=dc34b943-fa03-4016-8ab9-89b7f1d78c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:22:7b:58:88:0a:33:c9:8d:68:72:e0:52:
                    36:cc:4b:53:61:c1:3b:a3:4a:93:4c:37:9a:a9:f2:
                    4a:91:f8:53:e9:30:51:b8:af:5e:10:08:8f:9c:f9:
                    40:45:de:f7:27:eb:ea:10:e7:61:42:ed:d6:8d:f6:
                    22:cb:f2:88:45:ce:5a:8c:3a:b4:f3:aa:ac:c5:c8:
                    8c:9c:be:cd:dc:57:e6:54:02:83:d0:2c:9d:0f:5d:
                    db:ff:53:42:4e:79:77:ac:25:a7:51:2e:56:ed:05:
                    12:e3:7a:72:66:22:37:12:4c:4e:32:bd:f4:59:28:
                    9d:3d:d5:94:f7:44:2a:2e:de:ce:56:1d:62:39:98:
                    7a:b2:40:93:24:3c:eb:a5:9f:37:fa:cd:52:5b:b4:
                    37:b7:0e:ef:83:a0:6a:c8:31:64:b2:85:b5:65:2a:
                    a5:3c:63:e9:a3:80:35:7e:c1:8a:da:8a:04:66:d5:
                    3b:01:55:1f:3f:25:65:31:be:e1:b3:d2:87:a1:dd:
                    b0:52:81:ef:04:33:84:56:18:fc:c3:90:9e:e9:52:
                    ec:6c:97:2c:71:4b:ff:e6:ce:38:f1:fa:91:1e:2a:
                    64:fc:6c:31:de:31:a4:3c:30:84:42:2f:e5:d3:57:
                    7a:74:47:d6:e8:83:43:7b:e0:fa:08:fa:ae:3f:99:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D8:E3:DC:E0:55:D2:93:00:DE:6D:26:5C:62:5F:1E:D4:4B:B2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/34788f44-537a-335b-ab9c-1df645bd20db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:40:d5:11:e3:85:52:51:f1:fd:17:f7:73:b7:c5:cf:d2:
         bd:57:a9:37:67:ef:4e:07:c8:61:63:0f:46:91:b5:97:f8:63:
         0e:53:95:fb:34:27:a9:ab:e0:49:7b:d8:16:29:5d:b9:ac:e8:
         d8:07:a9:a7:26:8b:0b:33:3c:ae:c4:46:da:3a:0d:3f:d8:8a:
         a1:2e:8e:5e:59:2e:d5:fe:70:8c:58:88:e8:3a:b8:09:f0:b4:
         cc:5a:c7:29:0c:81:1e:65:ce:39:44:ed:b8:56:a7:99:83:e7:
         e4:32:46:38:78:1b:f9:a8:7e:e6:4d:e0:dc:4c:5f:ec:2f:d2:
         36:31:fd:9b:02:86:1b:75:6a:67:0f:ce:10:6d:3f:b3:26:98:
         5c:1d:35:83:df:8b:03:c3:ee:fc:d8:b3:d2:08:71:3b:a4:c3:
         00:c1:4b:1d:cd:f2:6e:a2:ad:96:5a:a2:02:5f:ae:ce:1d:85:
         76:ef:5a:2e:de:50:22:5b:04:2a:53:42:92:c0:7e:0c:96:2c:
         10:a6:80:98:0e:4f:4c:51:d1:46:87:b4:47:0b:ca:92:25:78:
         ab:74:9f:f3:f9:e8:89:1c:f3:a3:3d:33:fb:cf:bf:82:65:49:
         a1:4e:d2:2a:88:fe:9c:fb:df:25:c3:9e:4b:7d:b7:24:ff:29:
         a7:7c:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:25:50 2025 by rpki-client