Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d3b08e-bc51-373b-8966-0a0245f56a14.roa
File:                     59d3b08e-bc51-373b-8966-0a0245f56a14.roa (raw, json)
Hash identifier:          RDyzjA8d/nFu69fXNKENGmMtC8FX3E8bcBRGWGjjljA=
Subject key identifier:   3F:06:CF:63:F2:65:47:B1:26:05:C3:3D:20:3E:5A:85:67:E0:E5:40
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D151B8E114C3165D869540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d3b08e-bc51-373b-8966-0a0245f56a14.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        75.87.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:51:b8:e1:14:c3:16:5d:86:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=1f872996-be57-4bb5-a682-fb56089d2817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:ec:88:19:00:38:b5:da:54:cd:ee:24:db:
                    f7:12:55:66:9e:db:2d:dd:79:09:80:09:f7:f7:56:
                    87:26:3a:ab:9d:db:bc:a3:55:25:39:02:42:eb:72:
                    ef:3e:38:d7:50:27:ba:49:43:bb:ec:2d:f0:75:40:
                    9b:fc:1b:9b:4e:06:03:6d:32:5b:9e:83:dd:d6:8c:
                    2a:f9:f4:73:4d:c4:98:3c:47:d8:fa:45:a8:08:c6:
                    65:ee:d3:ef:3d:3e:96:4d:ab:92:0a:26:84:9c:d1:
                    51:2d:82:6f:95:f1:88:20:b6:e6:65:db:b2:13:23:
                    c0:88:74:65:90:85:53:6f:09:da:ea:58:62:6d:7d:
                    f6:3d:82:d3:14:54:03:4c:a8:67:45:1f:a4:d9:3b:
                    ac:73:d1:49:ae:22:a1:5b:eb:00:94:db:f5:7f:a1:
                    16:5f:74:8a:05:97:c7:2c:fc:d2:02:83:5a:a7:43:
                    45:21:87:a4:97:f7:64:69:39:29:78:a8:89:41:ac:
                    41:76:b3:cd:4a:70:e2:be:6f:f3:f5:1a:47:e9:70:
                    20:5e:6c:41:07:fe:79:45:77:f1:a8:7e:62:2e:53:
                    a4:ae:06:cd:ee:70:13:38:0f:9f:fc:fe:3b:fa:a9:
                    b3:64:fe:27:f7:51:5c:ad:ac:34:34:24:85:c1:b4:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:06:CF:63:F2:65:47:B1:26:05:C3:3D:20:3E:5A:85:67:E0:E5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59d3b08e-bc51-373b-8966-0a0245f56a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.87.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:0b:cc:1e:c4:7c:31:b1:a6:eb:23:32:32:c1:a5:77:bc:
         76:8b:7d:c5:5e:d8:1e:8e:f6:46:95:7f:06:3d:92:3e:d2:82:
         57:77:ec:3e:16:bf:49:a2:89:e6:3c:7c:1d:da:8e:be:88:23:
         d2:fa:97:74:cc:c1:1b:bf:7d:22:40:0a:ab:ef:a9:07:fb:33:
         4e:a2:de:1c:83:67:19:94:41:c5:6d:d2:4f:e7:2f:47:ff:80:
         19:c1:41:0f:b5:11:89:4e:07:1d:33:bf:b6:28:47:3d:39:a9:
         1d:d3:d2:f5:6c:09:d4:45:58:d5:d6:9c:13:c4:6c:42:15:31:
         f4:35:e9:fb:2e:61:a6:c4:d5:1a:96:40:c9:bc:ff:e5:ab:5f:
         21:62:b8:50:2a:f8:ab:8a:6c:eb:a7:aa:69:91:8f:13:c4:22:
         65:40:82:c4:74:3a:b6:91:28:44:46:b2:9f:76:15:b2:90:20:
         58:6b:27:00:49:9d:8e:87:99:d5:92:e4:91:3d:74:e7:11:75:
         03:65:54:4a:ea:c6:12:6b:80:b0:96:cf:77:33:e7:f0:eb:33:
         38:dc:95:12:60:a3:32:cb:8e:c4:5a:11:0c:eb:d7:de:73:2e:
         4f:9e:ef:cc:2d:35:ca:6d:01:2f:42:5e:7c:68:4b:a3:cf:14:
         e0:41:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:43 2025 by rpki-client