Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6e555172-59ed-37b4-8a16-2107ab2c3d08.roa
File:                     6e555172-59ed-37b4-8a16-2107ab2c3d08.roa (raw, json)
Hash identifier:          bg5U9p5ydD2kAZuP8yPhxtNTVACTSl5jfsMy6es0LvA=
Subject key identifier:   C6:36:58:03:2B:E5:83:8D:22:0D:CF:02:A2:6E:20:88:4B:0F:00:C0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D158CDADB023B507349280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6e555172-59ed-37b4-8a16-2107ab2c3d08.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        24.172.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:58:cd:ad:b0:23:b5:07:34:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a9f2bd6f-2a0e-498d-9dd5-6fcc1c894139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:d6:f5:83:7b:71:01:3d:e8:2a:f3:dd:68:
                    3f:52:3b:91:b6:84:64:29:78:89:1b:70:f9:fe:8b:
                    da:c4:e9:df:85:a5:be:50:82:1a:db:e8:27:34:c7:
                    2d:56:04:7b:45:fd:78:5d:68:c2:b7:45:9f:4c:71:
                    62:9b:94:20:e2:5e:b8:c4:13:88:19:4a:c6:6f:01:
                    34:73:9b:86:6a:bc:94:32:e8:b8:62:25:d3:bb:3d:
                    58:36:6a:84:6d:40:0d:21:61:e8:92:33:9e:3b:0e:
                    b6:2e:87:27:fe:e1:95:d6:26:4d:d3:eb:e0:31:7a:
                    f1:21:d5:f0:c1:fd:e0:e0:ec:de:62:de:fe:5c:0a:
                    d2:11:07:73:5c:cb:73:df:a2:90:db:03:cb:23:bf:
                    ac:50:27:eb:3c:43:8b:60:bc:b2:32:c9:1d:c1:7e:
                    19:ff:0b:25:84:8a:b7:17:95:3f:e2:48:8a:8a:2a:
                    f7:4e:7c:de:43:e8:bc:94:a7:7d:a1:25:8a:25:73:
                    82:98:df:fd:ac:d9:b2:7d:d4:06:94:bf:b9:1b:71:
                    3e:e4:d1:01:a9:e3:f8:9a:ea:72:14:d8:29:16:da:
                    f0:43:27:54:4e:75:14:b8:bf:01:ae:3f:b9:2f:42:
                    46:d7:49:95:af:90:d0:ef:e5:e2:45:72:12:32:7c:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:36:58:03:2B:E5:83:8D:22:0D:CF:02:A2:6E:20:88:4B:0F:00:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6e555172-59ed-37b4-8a16-2107ab2c3d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:25:40:dc:76:3d:9f:ec:e4:8f:95:8c:a1:de:6c:c0:d7:
         09:d1:77:85:ee:8c:25:82:82:ee:5a:96:d9:e0:04:fa:75:22:
         b0:bd:84:c3:be:a7:10:aa:c1:c0:cc:d4:5c:67:a0:a6:1b:8d:
         c9:7b:67:6b:38:fb:c6:c1:b8:70:39:14:62:ee:32:ab:f3:65:
         dd:42:a9:8e:c0:ec:e1:e6:d1:2b:e5:b7:6e:c4:40:44:33:84:
         39:21:ae:52:24:92:bd:75:e3:34:59:f1:06:66:b3:be:19:c5:
         e0:0d:40:1a:32:40:2d:dd:d7:69:ed:9c:dd:bb:97:c8:71:3e:
         0e:08:f5:06:32:01:86:e0:a4:50:c0:5f:40:ed:34:ce:40:1b:
         23:38:84:bd:8b:a2:44:78:ed:d1:ea:25:0d:f6:7a:5f:8e:7d:
         8c:33:cd:a3:57:53:c3:9b:fb:82:88:89:69:df:20:8e:8a:74:
         ed:3e:32:6e:93:7c:5f:f8:b3:ba:34:2e:45:4a:8f:53:8d:0d:
         35:90:f5:c7:d2:e8:77:5a:de:2c:1e:f5:8e:0c:18:fa:4c:91:
         3a:70:9b:a4:95:a8:d2:9e:2d:c6:cf:b4:ab:f3:4d:9d:bb:21:
         a4:5f:5b:49:ab:05:b1:32:f7:8c:16:f6:31:b8:09:07:7a:3c:
         6a:80:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:21:03 2025 by rpki-client