Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa
File:                     884535ac-cbd9-3781-9ac7-5008b4e6206a.roa (raw, json)
Hash identifier:          T/rerb0uTAEY+Y49xxV+34H0q5V5rZrG+gUf8GIR+Xk=
Subject key identifier:   C6:56:89:E3:7E:BA:95:C8:F8:F2:17:7F:C7:49:E4:23:CE:4A:EF:16
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BC42813D6A617B0D72E8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        72.231.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bc:42:81:3d:6a:61:7b:0d:72:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8424a446-2f7c-4e12-9403-b735d659cdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:26:7a:e3:90:f1:2e:08:65:84:7a:22:fa:
                    d5:e5:31:28:f0:5f:8b:49:bc:4e:d9:fa:96:f9:ca:
                    77:02:fc:47:77:02:e7:c6:c1:12:be:21:46:69:10:
                    60:7a:12:10:7e:cb:a6:b4:9f:33:2a:34:a4:0b:f2:
                    d5:79:f1:ed:76:8c:33:ba:75:10:c4:c2:d3:a3:8a:
                    92:c8:54:ce:71:13:39:1f:bd:07:45:37:22:5a:19:
                    52:46:c0:a7:74:0a:ef:48:42:72:12:5b:50:9d:08:
                    db:76:7a:00:23:14:02:60:28:0a:5d:d4:e5:1e:4b:
                    54:0f:30:fe:db:d3:39:09:a8:4c:ae:54:06:71:28:
                    2c:9c:4a:c9:8a:0a:b2:c5:c9:ae:8b:fc:2a:e0:46:
                    c7:d2:1b:e8:0f:00:80:a5:c9:f5:3c:77:af:97:d0:
                    a1:f6:ec:30:c7:8d:82:cc:f7:22:98:3e:96:91:db:
                    8f:f1:92:37:66:43:9f:e9:41:e8:b1:d4:28:36:fb:
                    be:61:f0:9f:5c:d3:2e:d2:f5:7d:93:80:0c:f5:0d:
                    23:95:a9:73:e7:23:93:4a:c1:8a:88:77:f5:7b:ab:
                    59:23:16:27:76:e4:8c:e2:05:50:ce:aa:ae:f4:ce:
                    af:d2:9e:14:0b:39:46:df:75:7f:87:93:98:1b:9e:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:56:89:E3:7E:BA:95:C8:F8:F2:17:7F:C7:49:E4:23:CE:4A:EF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.231.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:34:75:e8:47:de:53:91:05:73:75:49:8a:6a:7b:bb:bf:
         6a:9b:e1:79:fc:1b:98:9a:67:ac:5d:e4:29:d6:f6:32:24:6c:
         9e:a8:7f:e9:57:28:16:4d:92:b1:00:7f:e7:c8:65:e3:d0:cf:
         c4:c5:3e:f0:91:8d:68:8d:1d:1a:c1:97:5f:a8:24:ba:18:c8:
         57:d8:fa:9b:1e:fa:a2:27:29:66:2f:23:ef:7f:ab:eb:92:74:
         e9:26:2c:63:a4:0c:7a:76:f4:34:e0:4a:0f:8b:4a:84:6c:4b:
         1b:34:c5:00:0f:1d:61:75:48:2d:38:be:0d:47:4a:7b:20:0c:
         76:4b:d2:c8:33:bd:a2:83:44:81:ee:0e:13:4d:ed:bb:a1:ac:
         52:ff:e6:02:05:c0:c2:93:9f:0d:90:f8:73:20:14:2f:31:8d:
         5c:74:e7:e8:d4:94:9d:c6:8c:f1:f2:4e:66:fe:09:e9:36:b7:
         96:e0:d4:e3:bf:51:3b:7b:a0:88:b0:f8:e3:bd:3c:31:3e:2e:
         f5:86:38:85:ea:9d:3d:00:69:ee:a8:bb:5f:15:d7:76:9f:83:
         f9:f4:8e:be:41:e1:aa:3a:fd:71:5f:fe:5b:c5:66:63:83:55:
         28:23:1f:14:10:ba:91:7a:38:d8:b1:7a:a6:9e:66:b6:35:bf:
         e2:6c:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:59:18 2025 by rpki-client