Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa
File:                     8d456bdf-dc21-332e-b55e-05623dcb6140.roa (raw, json)
Hash identifier:          snLdhW2oe1xxGkrVP/mIGxMn30exaTXRKecv8upYSDQ=
Subject key identifier:   B1:8B:DC:72:CF:AD:4E:39:8F:EA:8E:1F:8F:01:F6:2A:1A:F9:39:6D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D41387BFF16AD4B29D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        24.160.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d4:13:87:bf:f1:6a:d4:b2:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=5c3b265a-820e-4c8f-8613-55c700fdf10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:08:dc:8d:d1:c9:2a:e1:9b:20:d6:f4:fc:
                    df:da:24:da:6d:a0:c5:ed:01:e1:48:90:e9:56:fa:
                    0d:e2:e1:9e:e5:3c:48:a6:ce:0d:24:13:42:9e:16:
                    71:1d:17:0f:c4:e1:9c:e5:55:0c:51:52:59:9e:fd:
                    34:02:2f:4d:62:10:87:23:5e:76:db:c9:82:6c:9c:
                    d2:5d:f5:30:f2:eb:0d:40:44:09:3f:b8:ed:65:29:
                    20:fe:10:a3:50:34:ff:12:ae:24:01:06:f6:9a:86:
                    9b:6c:15:3e:09:98:3f:6c:1a:97:d6:f2:59:ac:a4:
                    51:f1:f6:92:33:5a:f5:20:8f:2d:10:1f:a7:8d:1a:
                    63:f2:ab:81:f9:43:f3:15:b4:22:40:96:10:4d:b8:
                    d3:f7:46:95:c8:25:56:00:4d:fe:94:b3:21:9c:4a:
                    eb:9f:b5:63:d1:54:ea:e1:16:ea:32:9e:d0:5d:e7:
                    f9:3d:18:54:a2:b4:48:a9:df:82:1a:98:fc:3a:c4:
                    89:c1:6c:90:d0:06:db:08:3a:f9:e7:08:6b:f5:03:
                    ae:67:20:74:f1:19:c8:83:eb:e6:f8:60:4d:91:1b:
                    bc:3e:9e:c0:41:8c:2e:e1:5c:2a:2e:0b:92:df:1c:
                    13:4c:97:87:69:86:bd:8b:3c:8c:af:03:f5:b5:e2:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:DC:72:CF:AD:4E:39:8F:EA:8E:1F:8F:01:F6:2A:1A:F9:39:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8d456bdf-dc21-332e-b55e-05623dcb6140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:c1:40:e7:19:a2:0b:90:1f:b2:a7:3a:57:ae:0e:42:7c:
         7a:ac:9b:b3:37:d1:12:aa:88:a6:e4:53:e9:64:20:0d:27:76:
         c6:a6:ba:5f:aa:7e:8f:d0:7d:5e:27:e5:22:a5:9b:aa:89:ae:
         cd:60:81:e0:ec:65:1d:0a:4d:4e:2f:ba:26:58:81:bc:1f:2d:
         d3:cc:e5:7c:dc:f6:6b:a2:d0:db:f5:da:96:79:9a:b6:06:ac:
         79:12:30:c2:16:38:1d:55:e2:87:1f:df:be:ea:24:20:d9:9d:
         3c:58:66:cd:67:21:b1:55:82:e6:b2:c5:87:99:90:d0:d0:1b:
         d8:40:4b:f4:7f:7a:38:0e:b0:0e:c0:a8:8c:71:c3:7b:0a:ce:
         9a:c4:d5:4e:8a:a8:2b:c3:e5:5a:b7:51:e6:b9:55:c7:7e:4a:
         85:1a:5f:58:1b:65:b4:22:49:9f:46:50:fc:28:57:62:82:12:
         95:d2:8a:59:f7:31:37:d4:77:32:2d:f2:6c:bd:24:b1:97:3e:
         98:7e:05:ac:2b:46:37:6a:81:91:fe:81:dc:c2:1b:6d:7f:bf:
         68:29:94:86:e1:61:68:a4:56:db:e4:2c:cb:bf:60:af:09:36:
         ca:fa:0b:e2:d3:ef:66:0b:4a:ae:27:8f:3e:10:1a:e0:84:3f:
         51:19:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:58:04 2025 by rpki-client