Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa
File:                     3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa (raw, json)
Hash identifier:          MBCsY+bg1a+nDiAYIp0ZT1BnmYP0vT0PdVdNIu3gsp0=
Subject key identifier:   F7:03:B0:C3:AA:33:63:E8:2C:7B:C1:A1:42:2C:39:A2:0D:CF:37:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1509E73CC2D177B902380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        24.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:50:9e:73:cc:2d:17:7b:90:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d4b036b1-a08b-4bee-a5e2-86205370c084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:d5:49:01:0d:5f:29:fa:c5:9d:1c:10:72:
                    35:27:4c:07:07:bc:65:bf:24:98:c5:3c:2e:5d:af:
                    9e:52:da:d4:1f:a9:f0:cc:6a:90:1e:f3:c3:37:0e:
                    22:b5:88:cf:28:1b:aa:8c:6b:e7:ca:01:a3:eb:8d:
                    36:8c:05:73:d4:62:7b:5e:53:b8:06:6a:45:09:13:
                    24:30:55:ed:07:ca:bd:ce:e2:1b:ec:a3:60:57:57:
                    00:20:89:7a:f9:12:10:b5:a2:93:60:3a:fc:96:66:
                    76:9e:f7:cd:90:f1:b4:21:1a:a1:ea:94:01:8d:74:
                    9e:19:b6:42:47:5d:8c:df:17:ae:ac:2e:c3:e4:15:
                    76:01:19:33:52:22:b6:69:ab:8c:5c:b4:31:99:d1:
                    cc:ac:90:c6:6f:6f:16:03:fe:f7:83:00:7b:11:e1:
                    4b:5e:a0:7e:f6:d9:e8:40:56:6e:d5:67:ab:5e:3d:
                    bf:2d:95:32:54:c4:ba:17:a3:c6:ca:90:e2:93:c0:
                    b3:9f:10:74:a5:ab:69:9b:92:2a:d9:a0:3f:bd:8a:
                    30:a8:2b:91:d8:bd:52:4a:82:83:3e:71:a2:a8:ae:
                    31:65:d8:2c:a2:cf:c5:47:93:58:f5:b2:8c:6f:d4:
                    79:25:77:5c:cc:bc:37:18:4c:0c:3f:7a:ee:33:36:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:B0:C3:AA:33:63:E8:2C:7B:C1:A1:42:2C:39:A2:0D:CF:37:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:00:8f:82:83:da:7f:25:ac:1c:f3:fd:04:a8:a1:7e:cf:
         2a:33:e4:6f:73:a5:4f:16:26:fa:3d:24:1f:48:9b:40:ae:b6:
         5a:c4:78:00:70:f9:ea:df:c0:76:1d:de:fe:10:41:37:dd:50:
         24:cb:0b:1d:e6:96:87:ca:7e:5e:9d:cf:18:18:1c:f6:86:ee:
         39:0f:77:cb:e0:ea:bf:3a:82:d1:e5:d5:2c:9a:dc:1d:28:ac:
         66:2e:e1:2c:ed:0d:17:6b:a2:2e:55:4b:03:89:68:95:37:38:
         69:37:97:f1:54:79:4b:bf:77:86:58:91:48:23:f6:64:3a:02:
         b2:0e:f1:35:c5:ca:55:bf:f2:8e:7f:e8:1c:df:22:7e:24:01:
         71:2a:20:9b:67:87:ac:6d:58:9d:f6:81:96:7a:8c:f5:3e:85:
         d0:37:94:a3:ef:58:2b:6e:1d:3c:99:0b:62:ff:94:f0:df:8f:
         ea:23:fa:20:5d:ad:fa:32:50:5e:6a:00:72:91:b2:be:2a:7c:
         5b:11:39:05:c7:36:bc:4e:d9:a2:41:ff:4a:52:43:54:4a:37:
         4c:db:54:ef:bb:40:b0:89:a4:28:64:bc:ea:e1:4f:71:06:79:
         09:e1:9f:e6:1a:49:82:7a:52:be:79:cb:0e:a9:3b:2a:fa:5c:
         00:66:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:43 2025 by rpki-client