Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b16d0fb-5581-340a-b73d-b7c61d626e47.roa
File:                     2b16d0fb-5581-340a-b73d-b7c61d626e47.roa (raw, json)
Hash identifier:          VtyNf3+TKK8olKARHlV59VrRHIz7+s/AUq4Iie63v5A=
Subject key identifier:   DF:70:F9:1C:DD:87:19:AE:3F:71:CB:79:CD:CA:A0:30:B7:DD:F0:EA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4D86E0F256EF4A107400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b16d0fb-5581-340a-b73d-b7c61d626e47.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        69.200.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4d:86:e0:f2:56:ef:4a:10:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5ec2f759-df98-49ca-ac2b-22a211ef2f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:8a:30:89:ca:a8:17:4e:34:60:46:ac:63:
                    e4:7b:23:72:9d:b6:a7:25:ad:a6:16:50:83:f8:da:
                    a9:29:cd:0e:e2:29:69:20:2b:2a:62:1b:6c:5d:70:
                    49:d3:c3:44:2f:ca:bc:3b:59:63:8f:f3:4e:0b:c4:
                    5c:0d:8b:f8:eb:4c:dd:d3:f2:86:63:09:71:74:30:
                    3d:32:ca:ba:e1:72:01:94:04:a6:a4:ae:2a:2b:ce:
                    d6:bc:d6:c9:c2:87:c8:f8:fe:08:94:5a:ea:35:de:
                    84:82:86:7e:b6:58:1e:9b:d1:ee:69:97:42:73:a2:
                    96:47:d1:c1:dd:b7:fb:71:6d:fe:7a:9d:55:99:71:
                    4b:89:02:0a:30:60:cb:38:1a:f8:1c:6c:5d:2b:b3:
                    88:b0:98:31:e2:f5:5e:50:6a:e9:26:2c:66:8b:f6:
                    30:0c:53:42:b5:74:87:97:4f:65:e7:9c:84:69:0c:
                    67:af:8e:e1:9f:e1:3b:3e:2a:c5:1c:74:1d:31:4e:
                    2a:0a:83:44:2a:37:11:0a:2f:79:bc:a8:28:6b:93:
                    a3:a1:fa:35:56:e9:36:50:93:1a:be:75:ce:e7:54:
                    9e:2e:02:28:5d:97:18:5e:77:e5:8e:66:5f:f3:25:
                    06:c3:43:c2:76:e0:1c:5c:77:a3:cd:3d:83:f9:11:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:F9:1C:DD:87:19:AE:3F:71:CB:79:CD:CA:A0:30:B7:DD:F0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b16d0fb-5581-340a-b73d-b7c61d626e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.200.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:b1:aa:73:f5:ab:36:5b:99:3d:f9:9b:6c:40:8a:98:4b:
         9e:6d:27:cb:87:65:d5:64:2e:1e:0b:be:62:e4:06:29:21:38:
         79:77:b6:73:6c:0c:fd:18:0e:34:d3:06:a0:85:15:4e:2c:81:
         e3:42:e2:ae:76:ca:6e:f2:40:5a:18:5d:c3:91:92:88:73:a7:
         55:e7:ed:1b:5d:00:9e:18:96:a9:40:45:cd:66:fd:e3:00:f2:
         91:d7:48:df:7a:8f:b2:8c:7f:d2:d5:a9:5d:71:bb:c6:a7:0f:
         3b:9c:9c:9a:47:49:77:83:fe:91:a1:af:92:71:94:cd:21:44:
         b5:6d:14:6d:44:a6:67:4b:a2:cd:8f:89:65:30:f3:89:85:6e:
         11:d6:2d:a7:2e:4d:3e:17:c7:fd:32:28:56:fe:c1:78:50:97:
         64:4b:f0:3c:cf:6e:a9:4f:06:29:03:af:d3:30:b6:20:e4:9e:
         85:b7:b1:ba:7b:82:62:92:c3:38:b7:e8:bb:9e:92:d8:c9:70:
         de:2b:69:0d:aa:46:44:35:39:e8:08:bd:20:53:28:87:26:0a:
         44:72:f4:3d:c7:9e:4d:18:22:0b:e5:c8:66:db:12:14:2e:aa:
         a4:f4:37:92:c2:b9:bd:ff:f8:a3:08:56:1b:45:8d:6e:49:18:
         c0:1d:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:46:01 2025 by rpki-client