Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa
File:                     940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa (raw, json)
Hash identifier:          fkzTRjcHe2RqGaEXeQOLZDKjOvCUYfHSu5wBbpcW0Tg=
Subject key identifier:   1F:3C:E9:32:8E:45:E2:E4:32:1C:06:CA:E7:43:2C:DC:41:39:2D:B3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ACA5A229D87BB76393C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        67.52.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ca:5a:22:9d:87:bb:76:39:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2994dad1-1fe6-4a5d-9f00-8a69110a2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:07:a8:39:79:1f:0a:1b:84:ab:f0:50:5a:
                    b3:6e:1d:2c:9b:f2:9e:f8:a3:4b:7c:01:10:5a:4a:
                    d9:61:0a:ac:58:63:92:2b:47:b7:2a:96:c7:43:dd:
                    05:e1:c1:f0:c0:6c:16:dd:b8:5d:b9:b3:1d:42:66:
                    49:6a:ef:6a:53:52:39:79:eb:76:db:46:db:d0:bd:
                    be:4e:e9:ea:4a:9e:46:0c:0b:9b:02:30:6b:42:3a:
                    28:07:64:02:09:44:cd:ce:cf:a2:d3:47:cf:67:e7:
                    cb:61:ef:07:17:03:1f:7d:57:39:7a:c7:96:84:9b:
                    d4:d3:0d:e2:a3:01:d3:6e:ec:9d:62:b1:76:7c:b4:
                    d2:c5:67:54:73:7d:6e:c7:1a:89:15:e5:ec:7c:1f:
                    05:d1:81:98:19:95:0a:a9:a7:1c:1d:54:da:f4:2f:
                    c7:42:7e:f7:a6:7e:b2:59:ce:e7:53:65:c0:74:26:
                    9a:47:40:ef:f8:a2:88:d5:49:de:ff:09:15:4a:02:
                    10:a5:fa:1d:4b:a6:c8:4d:da:41:1a:97:fd:d1:d2:
                    ba:93:fc:ef:0a:53:9f:fb:05:f4:6b:f0:83:c9:ed:
                    c8:2f:2b:21:c0:e0:87:10:a4:03:10:18:d6:44:8f:
                    4a:a9:2e:63:86:4f:7e:9a:2b:f5:a7:da:6b:79:96:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:E9:32:8E:45:E2:E4:32:1C:06:CA:E7:43:2C:DC:41:39:2D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/940a8b35-3ef1-38f4-8a0f-7f51e74d5df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:51:bb:22:2c:b8:ca:ed:ef:2f:cc:7f:c8:73:35:4f:cf:
         08:ea:b6:fb:12:3b:07:55:86:da:0a:c5:1e:f6:7b:6c:eb:ec:
         24:0b:26:a1:08:4e:ed:37:77:47:ef:89:12:20:cc:dc:b8:d0:
         1f:72:32:0b:84:64:81:df:17:9e:8a:4e:18:b3:7a:a3:07:e7:
         99:7c:06:7e:62:5f:98:b3:1a:bb:0d:13:90:eb:5d:a5:02:46:
         9f:e2:08:1f:b7:14:04:39:1c:08:62:51:82:3a:4a:8a:ea:75:
         84:80:c6:a7:0d:4b:23:8c:cb:2d:69:0b:c6:dc:b7:04:a0:f5:
         37:96:6c:66:c0:1a:a3:08:1b:6d:bc:77:0f:78:01:1a:56:b3:
         87:39:c9:6a:35:bb:45:53:5a:66:e4:88:24:d8:60:1e:a7:43:
         fd:a8:f5:f4:69:52:a3:ef:fd:43:61:97:ff:62:59:8e:6e:80:
         49:eb:e0:3e:e0:74:ac:d3:2a:d1:cb:44:23:9c:a7:8b:12:15:
         92:83:5e:43:b3:89:1d:4d:c5:79:fa:b8:87:99:09:af:19:1f:
         ad:05:f7:49:0d:02:9b:07:e8:ed:10:f1:20:aa:6f:d4:94:5d:
         6e:21:12:5d:a6:b5:89:5d:bc:0d:4f:9c:be:24:93:15:29:26:
         a8:81:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:47:12 2025 by rpki-client