Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5724dc97-68e8-3d15-9e2e-0d71209daa68.roa
File:                     5724dc97-68e8-3d15-9e2e-0d71209daa68.roa (raw, json)
Hash identifier:          rcljB6Oy59C9TxvZowh1jeclCA1WFQfP6LIM8DxFC7c=
Subject key identifier:   AF:4C:27:08:CC:1B:DA:F4:62:C3:39:60:1F:DC:02:23:44:39:99:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1AC263B6700392104B400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5724dc97-68e8-3d15-9e2e-0d71209daa68.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        108.167.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ac:26:3b:67:00:39:21:04:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=f5049da9-44c5-440d-af26-2fa46bc4a5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:69:1b:af:9a:02:97:67:9f:f5:7e:7a:88:
                    8e:fb:58:59:09:c0:5f:55:1f:63:f2:07:9c:c6:85:
                    03:28:32:6c:ff:07:9a:7b:3f:1c:08:d7:aa:2b:c4:
                    e6:48:df:91:c2:16:89:45:9a:45:c5:14:94:f2:72:
                    24:12:6b:b4:28:c7:f3:31:88:d9:d7:8e:cd:89:28:
                    bf:2b:d6:99:a9:95:46:ad:4f:ff:bc:69:55:ff:ec:
                    6f:c9:0f:7d:d9:e1:99:7b:a0:de:96:96:85:90:ab:
                    ed:37:7b:5b:60:d2:f9:40:48:08:ed:c6:b1:b7:a6:
                    63:bd:49:33:bb:ec:82:40:ee:df:08:cf:00:8a:d6:
                    28:54:36:53:41:1d:7b:4b:0f:af:ed:fe:72:6a:d4:
                    e5:8f:5f:f0:55:14:f8:38:d1:37:42:c8:38:c8:c2:
                    00:11:c3:7c:9c:99:e7:0c:21:ad:d1:72:a4:10:53:
                    d8:e2:9f:16:b7:18:09:b2:e3:2c:6d:0a:b2:c5:ec:
                    56:98:d0:ce:6f:8d:93:90:28:27:57:a4:2a:4f:18:
                    b1:21:52:0c:74:96:89:3c:38:35:0a:1f:af:9e:52:
                    2f:dd:1c:4a:b0:de:2a:b4:13:8f:0a:22:60:b8:7a:
                    76:54:f9:cd:9d:a7:01:a2:a7:83:b7:f3:f4:f2:b9:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:27:08:CC:1B:DA:F4:62:C3:39:60:1F:DC:02:23:44:39:99:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5724dc97-68e8-3d15-9e2e-0d71209daa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.167.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:f5:5d:d8:68:f4:39:24:54:e9:ab:d7:c4:b0:a3:41:13:
         24:9a:9c:a6:33:01:5c:0c:e9:2b:0e:1f:4d:d4:8c:cb:bd:ac:
         bf:a2:2b:14:5a:ed:5a:37:3b:e0:8a:fc:6a:d0:d5:a2:39:ce:
         17:8e:bd:28:1d:de:91:c8:4a:3d:45:b5:33:19:7b:40:cf:26:
         18:04:bb:f2:73:09:7f:b7:ae:e7:de:86:2e:39:5c:0a:5c:83:
         f3:c8:1b:38:be:2b:42:20:3c:b2:8a:30:ad:f2:81:db:47:a8:
         55:7b:4c:34:52:2a:b6:79:00:93:e6:be:7f:df:95:40:15:90:
         13:2f:b7:56:f6:d8:4d:b7:cc:de:6a:ad:ed:48:09:f4:46:61:
         0b:05:6a:bf:ff:29:c8:78:49:3e:c4:08:0c:6d:98:8c:88:10:
         41:76:3b:57:5d:c2:02:f9:3a:19:69:2b:a0:4c:89:ad:e6:64:
         af:88:bf:1e:9a:ff:b8:b9:6b:46:8e:bd:49:aa:2d:e8:21:e2:
         be:a3:10:e5:8e:f4:6f:10:36:3a:80:e1:34:3a:05:65:8e:8c:
         51:74:fc:4d:58:9e:65:68:ef:fb:88:02:a4:71:f1:b5:f8:65:
         28:01:23:90:38:f1:94:b5:9d:e3:66:3c:2b:38:51:eb:7e:b5:
         dc:e7:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:40 2025 by rpki-client