Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be797428-dc54-3e92-9131-001c7dcb2851.roa
File:                     be797428-dc54-3e92-9131-001c7dcb2851.roa (raw, json)
Hash identifier:          +vlw+pAOzfTYihQ02KEtImTfYFGmsvRgWu0+9P+nMeo=
Subject key identifier:   C8:53:E9:04:65:2E:6E:D0:02:4B:BE:99:50:D5:B1:E9:D8:E4:67:39
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A8C70CABD79CEBE2890B73580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be797428-dc54-3e92-9131-001c7dcb2851.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     12271
IP address blocks:        24.103.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:ca:bd:79:ce:be:28:90:b7:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=6902d09e-90fb-429a-aab5-2881c330bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:a6:e3:76:99:23:36:51:64:bb:0c:75:2e:
                    f8:da:49:d8:4d:45:af:13:44:cd:77:f4:b4:53:65:
                    36:5e:5b:bc:70:17:7f:9a:43:dd:7f:0f:8b:da:1d:
                    20:60:d3:2f:ea:cc:ee:11:04:6a:16:3d:05:d2:d2:
                    44:c8:a5:46:74:59:2c:65:7c:79:e4:dd:6a:37:77:
                    60:97:1a:e1:d5:8b:2e:29:54:23:46:87:5c:5f:af:
                    8f:c1:36:f1:cc:a8:be:f6:e3:20:8b:48:e3:0d:e9:
                    37:a0:04:c8:a2:35:e0:12:40:d0:b9:6e:af:ed:60:
                    c1:49:9c:02:46:03:9d:31:c0:88:16:29:d8:8f:9d:
                    ce:60:c9:0f:ea:fa:29:0c:47:29:fb:4a:c1:5f:8d:
                    53:a9:37:dc:75:50:89:14:35:f4:ab:a0:50:0d:2c:
                    4b:94:8c:f3:3b:89:ef:24:9a:08:1b:9a:9c:3a:ed:
                    8a:86:22:3a:3e:de:7d:c3:b2:e7:4a:f0:6e:30:e3:
                    b3:6b:80:2b:3f:5b:2c:19:8f:9b:17:87:00:39:57:
                    9f:94:5c:cb:1a:cb:23:33:cb:88:c7:32:75:c2:23:
                    ee:72:af:c9:18:bc:75:5a:74:bd:56:de:50:33:25:
                    e3:08:4c:0a:6a:ed:55:52:8d:0e:a6:11:5c:26:fd:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:53:E9:04:65:2E:6E:D0:02:4B:BE:99:50:D5:B1:E9:D8:E4:67:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be797428-dc54-3e92-9131-001c7dcb2851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.103.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:91:82:84:08:98:3c:3d:af:ab:e3:dd:59:89:03:3d:12:
         09:3f:5e:4d:25:95:f1:88:e6:e1:a6:72:ce:7a:c5:b7:9f:6a:
         d9:46:2f:c6:e2:0b:43:ac:52:5d:6c:b9:c1:d0:ac:32:7d:70:
         ea:30:2c:c2:4e:0b:98:38:96:85:ad:d8:dc:14:ec:12:cb:83:
         de:13:50:1f:8d:f6:c0:31:bb:43:d5:bd:0d:1b:96:d9:43:5b:
         dd:a8:23:90:b5:38:b0:ac:57:d4:dc:33:df:56:e1:6c:0c:b4:
         cf:4f:d4:4e:28:e1:52:c1:af:2f:e3:09:de:b5:ad:9d:ca:31:
         70:d6:e3:3f:db:10:4c:0f:62:9b:93:37:81:8f:88:f7:63:90:
         29:68:9d:1b:4c:fc:87:80:64:07:32:97:77:c8:14:a7:4d:66:
         8a:9b:d6:5e:bd:e0:51:fd:9e:4f:cf:d8:69:fb:ad:d7:7e:7a:
         fb:8b:f8:63:fa:9b:fb:de:9f:9f:06:85:4c:ef:ca:37:34:d0:
         f1:7c:43:66:c0:d1:77:90:23:63:bb:97:b4:fe:02:c6:9b:77:
         4f:c1:8d:b4:9e:55:5b:67:90:8e:0f:22:9b:d5:2a:35:9c:bf:
         6f:7a:19:d5:0e:d0:a8:3e:40:03:2d:53:7b:34:65:3e:39:19:
         3c:10:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:39 2025 by rpki-client