Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa
File:                     878b6ebc-cf3d-3b90-9136-a78ff9120482.roa (raw, json)
Hash identifier:          p8Yf0hyFVKvxRhfBKds0dpNe2PInYUXdfqs/64dAHuc=
Subject key identifier:   5C:BB:5B:0E:6C:B8:62:F4:60:C1:82:F2:1F:43:67:6C:72:2F:5C:C4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1547D69F6ABC57CDA6C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        68.168.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:54:7d:69:f6:ab:c5:7c:da:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8239e815-ff59-48ce-8cf7-96e76059c8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:e7:b7:3c:dd:e1:09:f9:c3:ee:e9:33:a6:
                    cc:52:2d:e4:03:3a:ce:bf:c1:ea:78:04:98:b9:08:
                    a5:72:db:40:a8:bb:2a:dc:4a:43:c2:df:cb:40:91:
                    6b:f8:c9:b2:f6:77:99:65:59:13:a4:31:f4:6e:0f:
                    c9:31:5e:dc:aa:34:bc:b8:40:94:a6:40:aa:af:46:
                    e3:50:3b:c9:b1:61:6b:96:25:93:17:6b:63:61:e8:
                    ef:b4:02:fc:1a:84:ad:07:c0:31:85:5c:7a:fe:d3:
                    14:71:9e:5d:51:39:35:ba:81:f5:90:89:0b:43:d6:
                    4c:b1:1d:56:65:93:1a:7e:33:f3:13:07:23:da:66:
                    c1:ac:56:8b:82:d9:75:e2:50:6e:27:d9:b9:19:a7:
                    85:d8:09:58:8c:b3:f7:d2:ff:10:b1:56:c8:4a:52:
                    d2:12:7e:62:41:be:cf:e8:48:66:60:8f:eb:fc:1a:
                    cc:46:cd:9c:30:32:45:d7:e8:23:27:2a:51:08:03:
                    22:85:83:74:df:10:a4:3b:4f:13:e8:f0:cc:4c:32:
                    3a:b0:3d:17:58:c1:f5:66:ad:69:21:fc:74:bc:de:
                    df:bd:d3:5b:5b:45:f3:e6:22:28:04:9d:91:e9:3c:
                    19:e0:33:4f:33:ae:e5:bf:eb:a3:99:86:46:37:ac:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BB:5B:0E:6C:B8:62:F4:60:C1:82:F2:1F:43:67:6C:72:2F:5C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/878b6ebc-cf3d-3b90-9136-a78ff9120482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:24:ee:e5:04:36:84:1e:65:de:63:34:92:ad:3d:59:00:
         8f:4d:08:52:6a:e2:c4:5e:df:e1:3d:9b:bf:e0:aa:f9:b4:ff:
         de:af:60:1e:df:44:a2:24:58:e3:1e:2f:66:69:14:4b:db:49:
         cb:60:37:c4:cf:1f:a7:cb:78:e4:da:29:48:de:cb:4d:2b:a6:
         a3:82:d0:22:e6:ae:e2:67:8a:c3:b3:7d:49:e1:3a:46:7b:fe:
         54:00:f0:13:b4:1f:77:1d:0d:a7:f7:1d:10:2a:21:aa:f2:aa:
         04:84:02:94:33:9d:14:76:56:d8:f7:3e:96:a2:26:c9:a9:c6:
         0f:ed:db:df:09:9b:ec:0b:17:20:04:18:44:50:0d:1a:b0:9f:
         25:86:90:54:5e:fc:16:86:c1:04:67:a1:44:a5:e2:af:b9:df:
         b8:01:30:02:cb:30:2b:f8:f9:f4:2d:d6:26:b2:18:ef:dd:97:
         5b:ba:16:aa:86:25:f5:33:18:93:a8:d7:2e:51:7d:86:94:91:
         c2:a0:e0:41:50:da:2d:e5:00:d5:05:4b:37:dd:54:9c:a9:7f:
         1e:ca:30:ee:75:d1:ff:89:cd:8c:c6:44:03:14:00:17:57:6d:
         fa:2e:80:67:be:5b:c5:27:ca:ef:5f:63:2c:f3:0c:fe:c4:1b:
         c6:07:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:17 2025 by rpki-client