Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9107c1e0-0931-34a1-8aeb-6bc0b77c3d45.roa
File:                     9107c1e0-0931-34a1-8aeb-6bc0b77c3d45.roa (raw, json)
Hash identifier:          dVGknFvZTHepGYQRPIM71N0D/IwkmjOOWpwaAfGlMCs=
Subject key identifier:   42:B0:70:A2:B9:00:BE:BF:6D:87:0D:8E:00:63:10:0C:50:4B:60:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A936B5CF0F8C53BC69E25D2E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9107c1e0-0931-34a1-8aeb-6bc0b77c3d45.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        204.235.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5c:f0:f8:c5:3b:c6:9e:25:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=f9efa64c-f07d-4eb1-9bc5-08909edd97ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:b9:a4:ee:54:ce:e3:40:af:51:48:ff:2d:
                    15:9e:84:3b:76:03:9c:d0:e9:eb:5a:9a:45:c1:a2:
                    11:40:ba:ce:5f:6a:24:ca:91:fe:cd:e3:17:99:bc:
                    f2:2b:5d:66:c5:86:76:3a:68:04:bd:1c:56:69:7c:
                    49:09:0d:06:71:9a:81:3a:96:c3:2c:55:9e:4e:db:
                    b5:4c:54:ae:5b:19:62:43:2a:6e:0c:fe:27:f5:fe:
                    25:66:6c:53:71:7d:15:db:4c:f2:90:6d:10:36:4e:
                    0b:e0:94:3f:98:1e:30:12:77:a5:fb:55:56:94:c4:
                    c7:34:67:ad:bf:c7:b6:fd:02:dd:f6:27:3e:99:aa:
                    db:a4:6f:37:cd:33:c8:70:06:c6:ce:e6:00:f5:a6:
                    3b:8f:40:06:ed:6b:78:dd:e3:fb:b9:f8:2d:8f:cc:
                    df:26:9b:36:00:02:21:47:49:de:a0:6e:63:b7:85:
                    23:77:b8:e7:c4:06:b3:20:ed:89:29:83:43:f4:fc:
                    d3:27:bd:97:43:dd:cb:83:04:59:2f:db:91:6f:42:
                    85:cc:be:92:1c:9a:da:8a:78:d2:d5:fb:b5:bc:82:
                    d9:59:9e:81:45:c7:cc:a0:45:9c:57:44:fd:b8:40:
                    ff:9b:2f:94:ae:66:c9:2e:5c:2a:bb:bd:f7:22:e3:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:70:A2:B9:00:BE:BF:6D:87:0D:8E:00:63:10:0C:50:4B:60:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9107c1e0-0931-34a1-8aeb-6bc0b77c3d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:42:9f:b9:43:6f:a2:6d:81:e7:7d:8a:1d:f7:10:96:f4:14:
         08:4e:cd:3f:fa:2d:1e:a0:dd:03:8c:5b:b0:d3:6a:61:df:0d:
         95:8c:89:e2:ff:fd:6c:b0:53:75:a4:e4:5e:c6:c4:13:89:49:
         96:91:18:5c:d4:67:fe:ff:e5:46:11:7f:a8:28:01:f5:f9:84:
         1f:40:22:67:95:0d:78:06:f9:42:b6:63:b7:d6:97:b7:a7:64:
         b1:39:e5:06:f4:10:b5:75:25:29:45:77:3e:f8:90:0e:0e:50:
         b2:1c:47:19:97:4b:49:e6:59:92:54:2f:a4:a2:40:56:f9:9d:
         62:bc:b4:47:d3:4c:61:fe:e3:1e:23:34:1a:82:2c:63:a6:5a:
         ca:21:ee:6c:39:c7:55:8b:49:72:2a:ec:77:e6:ee:34:ec:d9:
         28:e1:a5:8d:70:41:14:f3:f3:47:51:e4:6d:e8:91:e4:a3:cb:
         7d:e1:1e:c9:d7:e7:07:e0:b1:25:f4:10:d4:b9:b0:61:99:2a:
         bd:50:07:f7:e5:c1:68:e4:5e:b2:10:21:66:8d:d6:d0:7f:fa:
         ac:d8:2b:27:16:4e:90:60:c3:ef:7b:53:a8:ce:8d:9c:f2:95:
         0c:23:9d:ee:88:9d:c8:f1:ae:fb:f2:17:89:77:23:94:50:38:
         cf:b8:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:57:01 2025 by rpki-client