Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75343bb9-6b97-35b8-8375-b88594929b4e.roa
File:                     75343bb9-6b97-35b8-8375-b88594929b4e.roa (raw, json)
Hash identifier:          znTmg3rxMR+iHiGoSUcl0K6JfLD6k/v3rMoMAZVI5GE=
Subject key identifier:   92:62:C5:5C:35:E8:D0:06:CD:33:3A:52:57:10:8D:4E:C3:B4:AC:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14D9258553D919CC7E380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75343bb9-6b97-35b8-8375-b88594929b4e.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        172.112.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:4d:92:58:55:3d:91:9c:c7:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=91e2a023-25a2-4fcd-99de-59d46edfafb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:2c:ac:bd:90:64:cf:14:63:a1:7c:a0:c9:
                    6c:12:6b:c6:d8:e5:92:15:ad:50:9c:91:89:5d:fb:
                    bb:5b:35:3d:ba:a1:c7:aa:c3:87:12:27:57:ee:0c:
                    f9:1a:e7:51:d2:36:1a:92:58:24:89:a4:e3:49:bf:
                    dd:79:c4:8a:7b:71:45:2c:4b:59:29:f1:84:7a:9b:
                    9e:d9:f8:97:da:de:30:a7:4d:0c:9f:c8:af:62:dc:
                    40:58:f2:89:8e:23:13:19:e5:f6:49:d2:5f:39:6f:
                    e6:c3:c7:a1:fe:69:9d:5e:69:c3:d9:42:b6:4f:99:
                    a2:4a:2a:6f:4f:03:ed:e0:ad:93:46:78:46:bb:2c:
                    32:fe:11:ec:94:35:8b:05:f3:67:75:a0:64:67:98:
                    b8:97:62:f6:d4:81:73:7b:ac:48:85:c8:7f:76:e0:
                    e4:c7:cc:1f:b6:88:b4:42:1b:08:24:6f:e7:d7:c8:
                    15:3f:4e:3a:04:ed:87:ad:7b:91:eb:f3:aa:fb:30:
                    1e:2b:75:35:31:5d:bf:53:85:ee:1a:c0:37:04:5d:
                    ed:e4:3c:18:82:60:1a:9b:35:46:90:8b:3f:1c:cb:
                    56:6d:0f:c2:9e:d8:cc:6e:0a:ff:48:98:45:a1:24:
                    fd:41:1b:46:59:2c:43:d6:36:ed:03:75:13:f2:b6:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:62:C5:5C:35:E8:D0:06:CD:33:3A:52:57:10:8D:4E:C3:B4:AC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75343bb9-6b97-35b8-8375-b88594929b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.112.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:98:59:0a:36:35:20:5e:3f:f6:a3:47:c8:cf:11:3f:c2:f6:
         e8:9f:04:fe:73:e7:79:3e:b4:f8:72:ad:a1:07:6e:2c:c4:de:
         a3:c8:7c:65:87:46:2b:8a:6f:3f:da:5a:dd:f2:5c:3d:70:61:
         c7:fa:b4:10:31:17:48:13:0a:1f:b8:cb:02:48:2c:aa:d9:d9:
         ff:56:53:0f:5f:26:db:25:22:59:45:d8:84:9f:5a:e6:f6:a8:
         07:ee:0f:01:32:a6:ba:55:05:66:0f:5b:45:32:9c:88:d7:32:
         7d:d4:b6:da:6d:97:bf:25:e6:bd:cd:0c:b2:e2:3f:36:2b:e4:
         9e:04:9a:ba:be:bb:73:4b:b7:3d:49:81:b7:d0:28:14:5e:0f:
         c9:cc:14:53:8e:14:71:ff:63:87:e1:05:2d:a7:c1:6a:cc:b1:
         22:78:4c:d1:d2:29:0b:a5:da:c6:fb:0f:48:e1:09:60:11:62:
         70:aa:6a:a0:5d:7b:25:d4:e1:99:dd:86:20:da:20:29:13:5a:
         55:e3:42:45:f6:7c:51:3b:7e:cb:6c:7f:31:4b:d2:4b:e0:dc:
         75:d3:5c:f3:09:aa:27:8b:2c:57:3a:38:f0:9b:f9:7c:59:28:
         7e:e6:d3:96:03:07:6b:16:1b:c0:bd:77:05:29:ee:ec:c2:38:
         3b:2a:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:39 2025 by rpki-client