Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
File:                     e7b232a9-af0c-3d2a-b23b-63139953717c.roa (raw, json)
Hash identifier:          4Jdf0SgwRlNUVM68O98Vk6+pxGZrl/l6YwqNoTjLsnc=
Subject key identifier:   9A:3F:17:3B:3D:2E:55:72:F6:FF:03:17:13:39:C9:66:02:6C:74:F6
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F432858493B7DD560A8A7103902E58A00
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
Signing time:             Tue 18 Mar 2025 20:20:03 +0000
ROA not before:           Tue 18 Mar 2025 20:20:03 +0000
ROA not after:            Mon 16 Jun 2025 20:20:03 +0000
asID:                     11775
IP address blocks:        162.211.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:7d:d5:60:a8:a7:10:39:02:e5:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Mar 18 20:20:03 2025 GMT
            Not After : Jun 16 20:20:03 2025 GMT
        Subject: CN=579ad91a-ce06-4dfb-b6cd-3affbca4fb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:41:ee:15:86:39:a8:02:68:84:d2:af:1f:
                    23:3a:e7:3a:b7:7a:40:32:31:e2:ad:75:09:ce:3e:
                    44:45:f3:0d:3c:6f:1d:5a:8f:34:99:ef:7c:ff:18:
                    16:e4:30:ca:d7:d0:81:c9:d7:51:f5:bd:bb:f5:b2:
                    c1:f5:b4:e7:28:fd:a6:ae:37:af:6e:78:ac:f7:f2:
                    7d:3d:02:a2:7c:85:59:cb:94:70:6f:00:9d:f3:50:
                    86:83:80:21:5d:54:5c:68:5b:41:d8:ad:de:4a:be:
                    d6:0a:fc:2f:8a:7a:eb:30:54:08:67:33:3b:1e:8e:
                    32:2a:c1:e3:9e:a8:94:2e:02:68:de:b1:e4:10:e1:
                    4f:81:53:47:ff:91:a9:c4:6d:de:4c:a9:07:dd:5d:
                    9c:91:70:61:0e:f5:fd:d3:49:f8:8d:92:43:62:14:
                    90:2d:79:83:e9:74:a1:7a:0e:a4:10:7a:b5:a6:18:
                    6a:8f:21:6f:02:f5:97:7f:f3:85:fc:5a:3c:4f:b8:
                    d7:d3:d2:20:99:89:f4:2c:a7:cf:f7:42:f7:15:3f:
                    dd:c7:84:33:69:d3:c7:f6:91:be:4f:6d:8a:de:00:
                    5d:86:d1:ae:83:b4:e4:22:3b:ff:f0:80:78:75:ec:
                    87:64:48:35:bc:12:08:a0:9d:ce:31:6d:e8:eb:8c:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3F:17:3B:3D:2E:55:72:F6:FF:03:17:13:39:C9:66:02:6C:74:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4a:f9:f1:81:58:16:9e:e1:e0:e6:34:0f:89:ce:66:f4:25:
         88:83:61:6a:39:c5:f0:42:0e:9c:22:3a:ee:31:cc:1a:44:71:
         5b:c0:b0:02:bd:14:00:e6:cd:72:77:f4:5b:3a:ad:5e:7d:fd:
         d6:cc:e4:4e:15:1b:cf:7f:19:8f:ae:16:41:71:63:e4:c2:a7:
         bc:0c:e4:9b:3d:4c:63:25:99:76:d4:ad:a9:f1:0e:5a:3f:99:
         79:35:99:94:aa:bc:47:ef:da:17:73:c8:2f:ad:75:c2:e5:a6:
         13:9d:96:d6:86:20:d6:8e:6c:2b:f5:31:af:09:60:a4:4a:0d:
         97:57:93:28:c3:b6:4b:e5:d6:8d:30:8d:be:85:cf:d4:59:c5:
         f0:2b:24:88:b0:d0:ce:38:01:6c:03:d7:9e:2c:3d:55:ea:6b:
         e0:1b:4b:1a:55:f1:c9:cc:b7:e4:69:42:8d:36:55:fd:0d:f2:
         95:ed:b6:fa:7e:a2:26:74:45:04:8f:21:5f:d7:2b:98:a6:51:
         47:51:8e:60:7d:7c:bd:0d:f4:e9:c4:3f:73:04:5b:7f:97:6f:
         a3:1e:df:f0:56:49:7a:0e:ea:c2:d4:a6:a1:bc:be:b8:50:cb:
         7f:59:1d:64:76:2f:f3:75:db:b5:fc:1b:e0:23:62:6d:15:55:
         d0:9b:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:04:40 2025 by rpki-client