Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b4cc564-e991-38b2-9d40-23818416739f.roa
File:                     4b4cc564-e991-38b2-9d40-23818416739f.roa (raw, json)
Hash identifier:          ASLZGK3WTgagUnhsQuVEXDQsep742DVmztEDgkYISEQ=
Subject key identifier:   68:37:85:4D:27:5A:E9:98:E3:81:8A:33:13:B4:41:95:09:06:AC:30
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C85365BDF2412B6020B0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b4cc564-e991-38b2-9d40-23818416739f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        67.78.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c8:53:65:bd:f2:41:2b:60:20:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7ed50fb6-7570-466c-879a-649b3f398f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:b2:4b:15:f8:10:ee:05:6a:03:ff:ac:38:
                    62:0f:1b:92:c5:29:45:8c:10:fc:17:3e:91:54:c9:
                    0e:ec:14:14:49:58:c7:18:5e:f9:a6:fc:22:34:ca:
                    90:57:4d:2c:12:71:a1:5f:bf:53:7e:fe:01:d6:92:
                    83:71:49:bd:5b:dc:db:d1:25:96:e9:10:67:7f:9b:
                    dd:c0:f2:53:d3:bc:09:42:e3:65:cd:af:36:9f:dd:
                    33:2d:af:c2:a4:cf:2a:b5:ba:f0:78:98:5f:68:93:
                    3d:14:d4:91:fa:06:e8:23:e3:f3:96:b6:7d:96:a7:
                    b0:5f:6c:dc:c4:49:1d:7d:da:12:5d:87:88:19:bd:
                    26:c1:cb:a0:86:cd:4b:49:18:79:56:64:31:d1:3b:
                    a7:4d:3a:f6:e4:bb:b0:19:71:6e:a8:d0:dd:36:81:
                    61:ea:eb:45:c4:0f:a1:b2:fc:66:1c:98:03:27:9f:
                    db:3e:01:c0:f6:b0:f6:1d:bc:ab:08:42:e2:f3:24:
                    e7:aa:48:cb:d8:53:0d:7c:4e:26:24:cb:d0:3d:c4:
                    de:8a:d4:bb:7c:8b:ef:30:72:fe:f3:6d:d1:f6:9e:
                    19:17:14:b9:19:80:60:e9:37:db:38:cd:82:b3:09:
                    3c:c9:f1:26:08:11:1c:eb:50:ff:69:f8:5c:bf:2f:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:85:4D:27:5A:E9:98:E3:81:8A:33:13:B4:41:95:09:06:AC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b4cc564-e991-38b2-9d40-23818416739f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.78.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:bc:ea:94:41:16:62:d3:87:a3:79:a9:fd:fe:93:3e:33:
         5e:4f:1a:3e:28:eb:c7:20:ee:d6:5f:81:5d:80:c3:fb:7c:34:
         4c:20:c6:f1:64:c5:a8:58:3b:17:11:a8:3d:40:11:b3:c2:fb:
         54:8b:f3:6c:02:67:34:20:ee:aa:4c:87:2a:7d:94:08:2c:17:
         a0:ac:06:d3:18:55:a0:d0:d4:9b:14:a7:be:7b:c8:c7:a6:98:
         e7:4b:0c:fa:55:23:df:49:7a:9a:60:d0:c1:75:30:f4:a7:94:
         cd:f5:25:1b:cd:86:d1:f6:d3:b7:db:5c:52:43:11:d2:0e:0d:
         7b:e7:28:53:66:fb:af:f4:8f:be:25:5c:48:e5:e3:3d:80:bb:
         8f:6b:55:b4:2e:cf:09:e8:1c:61:45:cb:24:ec:26:5c:68:e7:
         a2:00:c3:d1:8b:b4:da:5f:b1:27:b9:24:76:bb:95:05:0d:07:
         f5:9f:68:14:10:43:a1:2d:dd:c8:aa:28:a8:95:38:a6:6f:8d:
         1d:5a:02:91:73:40:ad:de:9f:3e:d3:bf:e7:a5:28:1f:42:0f:
         de:2e:44:02:b5:0d:fc:29:b4:b9:47:33:82:2a:5b:bf:83:46:
         54:26:d4:1a:0c:61:e8:3c:1a:1a:d0:a2:da:58:7c:11:fa:aa:
         88:bd:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:59:21 2025 by rpki-client