Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa
File:                     9864763e-6e44-3e95-9449-918b4fe2bb9f.roa (raw, json)
Hash identifier:          XnpWTlfqIF/b8tAKnJQjYHEBR/k00evvChfMVwCBw20=
Subject key identifier:   A9:7C:CF:57:61:DB:BD:3E:CF:DF:29:EA:D8:54:51:95:29:3C:4E:1A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D15B67649FF6F13286D800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        68.207.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:5b:67:64:9f:f6:f1:32:86:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=9f874bd3-0832-4d96-b1f8-5a5bb5a21964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:0e:76:ae:94:d4:7a:46:98:c0:b6:8e:d0:
                    cf:3c:7d:b6:c7:de:13:7e:eb:a3:18:92:bd:0e:9c:
                    f3:04:8f:70:a8:05:27:df:16:a4:71:87:3c:34:5d:
                    6d:a1:fc:00:e6:51:b7:14:e9:7c:ec:4d:fb:90:b8:
                    dd:0a:86:77:be:db:19:34:56:db:f2:06:a7:c4:ee:
                    37:a3:95:5a:51:3f:e2:bd:c2:7d:be:d3:81:9d:b0:
                    55:65:fa:ab:b7:7b:4b:c3:42:65:7d:56:e9:66:b2:
                    26:d8:e8:2f:9c:aa:3c:c4:9e:24:e1:74:18:22:1d:
                    8f:33:5b:80:5b:7d:01:92:c2:70:b3:bf:88:6b:7d:
                    df:f7:1d:06:ac:29:ca:ea:3f:17:f0:a7:f6:1e:b1:
                    f0:09:73:d1:10:98:10:59:9e:e4:7d:e5:df:2a:2f:
                    67:8f:8f:d3:db:04:8a:25:7a:2a:09:65:92:c7:4d:
                    cb:d1:71:d2:24:b8:f6:8d:f9:e2:88:7c:d1:3f:7e:
                    f0:55:d0:1c:3f:35:30:f9:5d:e6:9a:27:5b:97:90:
                    c8:76:c4:6b:f5:72:05:4d:0c:be:d0:2c:dc:08:9d:
                    bf:54:93:fe:6d:7c:03:e0:e9:d4:d3:0b:0c:94:d0:
                    50:4e:9b:e7:eb:51:32:bf:03:c1:7e:88:fc:d4:0f:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:CF:57:61:DB:BD:3E:CF:DF:29:EA:D8:54:51:95:29:3C:4E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9f:99:87:3a:c1:d8:74:97:cc:21:ae:b2:27:7d:45:75:d5:
         d5:1f:cd:6b:66:7d:b9:b2:0a:f8:35:2e:79:1a:69:3b:49:9b:
         32:7f:5a:36:c3:b9:bd:94:56:53:b0:22:7f:d6:f2:7c:92:80:
         27:15:3a:eb:be:d3:73:d0:c5:54:b3:c1:29:1e:59:87:76:e0:
         75:35:02:96:67:94:e1:53:d5:83:08:bf:75:93:51:e0:7a:97:
         84:50:8f:18:c2:bf:c0:2c:20:90:22:4f:0d:b1:44:aa:dc:5b:
         8a:50:ce:1a:6e:aa:1c:78:06:c1:06:e6:4b:93:ef:91:b3:e7:
         ce:fa:3e:0d:cd:e0:a9:4e:57:48:a6:48:ff:29:5f:5e:dc:f4:
         6f:dd:39:80:e4:cc:2d:34:71:2c:18:7c:71:87:a3:96:28:68:
         45:07:de:9d:ac:32:f4:54:c8:27:e4:47:62:42:6e:a2:88:f6:
         b2:9e:6e:cd:88:b5:3f:fa:6e:cd:7d:cf:64:df:d0:ea:49:b0:
         f8:55:0e:4a:34:7c:8e:35:b7:5c:1b:eb:4f:3c:e6:e0:27:25:
         54:70:ce:1e:70:2a:08:22:6e:ef:99:98:13:1b:b9:b0:88:ab:
         3f:09:64:68:30:63:5c:a3:57:2f:7e:86:d2:a1:1e:ad:53:04:
         b0:e3:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:56:06 2025 by rpki-client