Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/e0bfaf6d-aa62-3b7a-a74a-22e9456c9650.roa
File:                     e0bfaf6d-aa62-3b7a-a74a-22e9456c9650.roa (raw, json)
Hash identifier:          3DRBBWzT+CuWjKcBY3ByL+rCVHdWKip7MSum8T+HPmM=
Subject key identifier:   CA:9D:3C:B0:B5:E1:6E:5E:35:B0:B8:86:E5:76:50:2C:13:44:BD:5A
Certificate issuer:       /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial:       010D0C9F4328584911B735A7D78E527753FA6680
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/e0bfaf6d-aa62-3b7a-a74a-22e9456c9650.roa
Signing time:             Mon 03 Mar 2025 21:11:43 +0000
ROA not before:           Mon 03 Mar 2025 21:11:43 +0000
ROA not after:            Sun 01 Jun 2025 20:11:43 +0000
asID:                     8047
IP address blocks:        24.237.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:b7:35:a7:d7:8e:52:77:53:fa:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
        Validity
            Not Before: Mar  3 21:11:43 2025 GMT
            Not After : Jun  1 20:11:43 2025 GMT
        Subject: CN=8a1f32f2-9675-436b-adcc-6270751d86d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:bd:ac:ed:0a:dc:e8:64:ef:b1:be:3a:94:
                    89:a9:27:09:df:a4:e1:6f:64:9a:f5:4e:60:65:b2:
                    f5:de:75:95:4f:8f:e1:64:ac:0b:5d:54:62:9e:4d:
                    2c:96:90:83:6a:c6:33:2f:1f:19:f5:c4:5a:f2:49:
                    5d:2a:29:54:e0:79:f4:30:ff:73:00:86:7f:04:11:
                    36:5e:ac:c3:1f:ec:64:c9:57:32:71:85:ab:b4:30:
                    ee:43:6d:6e:29:9f:2d:c0:95:31:9d:35:05:f5:4f:
                    5e:6f:b1:3b:a8:0b:7e:36:5a:2b:26:e9:7f:34:3e:
                    d2:52:1d:ba:14:75:29:36:ae:ae:01:d2:c4:f2:47:
                    64:06:c8:3f:8a:96:26:42:cd:a9:3b:43:d4:73:76:
                    b3:f6:a7:6d:77:6e:67:dd:99:df:1d:16:37:2a:26:
                    6d:1e:79:14:9b:a9:3c:e3:c7:47:87:bc:fc:a1:ce:
                    6e:4f:06:a8:62:57:f6:fb:56:46:11:ed:f7:04:1e:
                    17:7b:4f:b0:c6:ab:74:04:dd:12:69:ca:a4:c0:12:
                    15:c6:3b:ff:21:28:16:08:6f:ec:f1:82:24:bd:81:
                    5d:08:63:93:21:35:22:a3:3b:67:49:8f:02:98:b4:
                    61:cd:e8:ce:49:b5:42:01:78:2d:e2:d1:0d:b4:76:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:3C:B0:B5:E1:6E:5E:35:B0:B8:86:E5:76:50:2C:13:44:BD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/e0bfaf6d-aa62-3b7a-a74a-22e9456c9650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl

            X509v3 Authority Key Identifier:
                keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:0b:48:20:e4:22:53:ea:d3:b3:ca:a6:a5:31:48:26:4f:
         f2:3c:ca:16:af:ab:7c:9c:bd:e7:b6:ee:1c:36:28:b9:f6:49:
         e5:ce:9e:e7:32:ca:b3:61:d1:8e:95:ad:47:80:5d:c4:13:58:
         a8:ef:7e:fb:7b:77:69:dc:e7:e0:d0:0d:a3:42:33:0e:bf:c2:
         21:d0:3f:e0:9a:6f:97:48:62:1d:3d:ad:a0:70:9a:aa:69:7c:
         8a:99:9e:03:62:6d:36:48:55:fb:26:fb:20:e4:08:39:50:a4:
         fc:bf:46:e7:c8:73:90:68:ee:7d:16:3d:f7:13:a9:a8:0e:d3:
         c6:95:e9:41:40:ab:ef:59:7f:f6:fb:45:5e:ca:0d:70:00:e6:
         a4:7d:b7:a7:00:42:89:9b:1b:9d:49:14:e3:4a:d8:0d:d6:aa:
         16:84:2e:90:aa:b5:8d:08:0f:43:57:d2:1d:50:13:6c:31:0a:
         4b:0d:76:e8:c0:91:34:69:86:96:da:99:49:5e:8c:d6:a3:a2:
         ae:ef:76:de:8a:6d:63:d8:69:0e:f1:53:fe:c7:ac:ae:2a:79:
         f1:37:b2:66:ed:aa:95:d7:b1:f3:73:b7:15:c6:33:62:99:47:
         ea:9a:07:56:ea:ab:e3:a3:0b:5a:ca:fd:e3:fb:1a:3c:bb:c9:
         0d:c9:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:40 2025 by rpki-client