Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8dd4ae04-d16e-3ddf-828f-676e4b431805.roa
File:                     8dd4ae04-d16e-3ddf-828f-676e4b431805.roa (raw, json)
Hash identifier:          wTSuUcoC8yGKcEz6M3FmJ9HVAzu8iQvRZOqiCwDzlMw=
Subject key identifier:   70:AA:DD:4B:53:CD:64:7C:E8:6C:E3:77:1F:11:09:63:DE:33:7C:E7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12FB265671F33C974F840
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8dd4ae04-d16e-3ddf-828f-676e4b431805.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        74.219.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:2f:b2:65:67:1f:33:c9:74:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=fe6ae9fe-60ca-44b0-9960-b179fdfbf6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:40:07:24:cf:a3:70:ef:d4:52:c6:80:95:
                    53:4f:b0:3b:e9:0f:66:52:9b:a0:e6:78:3e:e6:6f:
                    f7:d4:e9:66:24:bd:33:89:ad:d6:13:ce:7f:31:e5:
                    85:64:d2:3c:5f:32:7c:06:10:1e:bf:93:6d:b9:b5:
                    62:76:cd:00:23:43:60:78:66:b8:52:2a:78:98:1d:
                    68:09:b8:1a:77:64:41:89:7a:52:30:6c:5c:5d:91:
                    74:85:6e:0a:a2:1f:43:7d:43:fc:f7:52:23:8b:ee:
                    23:aa:c1:ae:74:07:1a:4b:15:62:79:70:ce:2f:48:
                    0d:3b:77:5f:6f:5b:d8:b2:5e:0b:54:e0:8f:16:6a:
                    da:43:d5:f2:9f:c9:7f:84:3c:0f:2e:58:12:fa:79:
                    6c:fb:a8:6e:2c:35:39:17:ab:99:cf:21:7b:91:3f:
                    7f:11:20:d9:ae:46:8f:ec:da:f1:82:04:e0:27:8d:
                    1d:d5:46:a7:6b:d3:c9:8c:54:29:1b:4f:78:dc:a2:
                    cb:fd:73:cc:49:d1:d1:aa:b0:c6:10:c1:1a:80:19:
                    da:b5:1a:88:e3:66:75:67:20:1a:c7:42:53:ee:1d:
                    89:4d:dc:79:77:ce:6b:ea:2b:22:bc:48:50:39:06:
                    c9:29:c4:0d:be:b4:95:5e:14:c5:b8:4b:53:09:56:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AA:DD:4B:53:CD:64:7C:E8:6C:E3:77:1F:11:09:63:DE:33:7C:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8dd4ae04-d16e-3ddf-828f-676e4b431805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:96:de:ac:3f:a7:d8:0b:3c:12:02:dd:e5:68:a5:39:a2:
         2a:47:a6:3d:f6:46:aa:b9:02:26:36:1d:af:e9:2c:0f:37:70:
         8f:cf:c9:d6:f6:aa:b9:07:b9:bb:ae:f1:be:ac:61:2b:aa:7e:
         d7:f9:cf:63:10:77:d2:c3:b3:12:c4:6e:ec:62:cc:ac:e0:90:
         e6:9b:2d:fa:c8:64:2a:3f:fc:14:cb:18:80:33:1d:45:6d:29:
         9b:8b:29:e8:70:ad:e1:2c:bd:5e:55:2f:27:50:59:25:de:c8:
         fa:65:33:b6:af:7c:de:89:db:f7:f1:db:5d:d9:6d:3d:4b:90:
         32:72:74:7c:97:4f:e9:bd:90:67:04:fd:16:52:c4:aa:98:d6:
         e2:b8:a3:43:77:94:35:ba:44:73:95:89:1d:c4:76:8a:c9:f1:
         40:ec:e0:be:23:a8:5c:75:ef:79:65:92:93:9c:18:bb:49:14:
         76:e8:ee:0d:a1:0e:ca:f3:10:3a:42:97:a9:d3:88:ca:53:83:
         6c:ce:07:df:8e:ba:28:55:e9:d5:e5:ed:e3:9b:bd:31:a2:47:
         70:03:9b:69:e2:b5:2b:29:20:32:ef:8d:6d:4b:c3:e4:fb:6d:
         65:39:a4:e0:f3:a6:7a:29:54:26:d6:4d:67:39:a5:76:21:de:
         b4:88:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:50 2025 by rpki-client