Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa
File:                     880f2e83-c3b6-3a4a-bee3-082793f6966d.roa (raw, json)
Hash identifier:          i/Ye6kInxZnqhsn/bMzEzpGT0LUhh/Smf0jwa3T7LGU=
Subject key identifier:   84:67:64:49:3C:38:00:FC:B9:D4:96:A0:9E:6D:BC:1E:55:E1:B0:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14E709DE5120450E1B2C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        98.145.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:4e:70:9d:e5:12:04:50:e1:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=0ac0a035-b8da-42c8-afac-91fc7d2bb662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2a:44:c0:c9:28:8b:7c:e7:68:d8:16:2b:53:
                    e8:9c:d4:f5:e9:92:8f:da:04:46:cd:e9:ac:21:1f:
                    ff:c7:dc:1f:ff:fb:9b:ad:64:0d:fa:b7:e6:c2:54:
                    5d:76:8c:e0:61:39:c0:e0:8d:b7:39:db:29:17:bf:
                    80:87:c6:51:a9:ae:5c:43:4f:20:7b:fb:2f:95:5f:
                    fc:60:cd:0b:15:2c:50:57:4b:04:f9:49:3b:c4:24:
                    1d:b1:74:7d:42:3f:71:00:be:05:be:fa:74:39:91:
                    5e:3a:42:d5:94:a3:e5:1f:87:b7:b3:70:a2:bf:af:
                    95:4b:79:b3:16:49:21:aa:f5:b0:6b:6f:32:87:a0:
                    ed:33:1f:1b:c8:9e:a4:00:dd:1f:f9:d5:b8:ff:47:
                    57:d8:b3:1a:b7:d5:df:6f:b7:0d:cd:11:2f:f4:a1:
                    ce:2f:7c:79:36:87:a0:f5:cb:d9:65:06:1b:d5:8a:
                    93:12:34:bb:be:27:8f:b7:bc:76:bb:c6:10:d1:e4:
                    1f:f0:e0:57:9e:ea:77:cc:f6:cf:a3:1d:2c:12:f2:
                    28:1c:29:22:fb:86:0e:a2:5a:1a:6b:0b:21:37:c6:
                    f1:22:68:21:18:46:12:73:01:7d:9f:09:f0:9b:cd:
                    53:92:58:b9:52:ed:44:0f:65:84:b1:ec:4d:e7:15:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:64:49:3C:38:00:FC:B9:D4:96:A0:9E:6D:BC:1E:55:E1:B0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:5c:0e:b2:66:c5:ba:a1:2d:b5:10:03:41:54:9c:70:c2:
         9c:ff:fc:3b:12:5f:b4:cf:48:20:56:ae:ca:76:25:c2:b3:c7:
         55:50:3c:55:7a:d5:1b:12:f3:a1:07:b3:4f:57:ae:ff:7a:0e:
         e1:73:da:ec:bd:81:57:c2:bf:8e:36:8e:c9:b7:ee:2e:ac:9e:
         3a:ac:b3:c1:36:52:7e:e9:68:28:45:70:1d:10:23:b9:d0:39:
         da:8d:c1:77:42:36:6c:f9:27:b6:bc:e9:50:c3:82:c2:ae:03:
         eb:bd:2b:00:81:2c:f7:24:3d:1e:bb:47:fe:b5:31:3a:c1:12:
         f6:83:41:1a:e9:38:12:55:6e:8c:1c:2f:17:91:04:9d:27:9b:
         9e:8a:51:8a:3d:01:f5:02:33:b4:74:49:35:3e:5e:b3:41:d2:
         83:b6:f8:ef:71:13:2c:f8:af:a8:f6:10:80:69:fa:6c:68:cf:
         71:ee:25:d4:91:52:9e:71:fe:0b:26:2a:26:b1:4b:04:54:a9:
         ec:11:4f:64:02:49:8c:30:fe:59:d2:58:ca:3c:e0:51:41:4a:
         f9:5f:51:2d:8c:b9:4f:34:97:15:b8:3d:18:a0:dd:bc:02:25:
         31:e0:07:9c:1e:1f:c7:da:83:3a:7c:44:20:7a:87:48:59:aa:
         9d:9c:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:56 2025 by rpki-client