Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9a983bbd-309b-3cc7-9580-37c90a1f3d7d.roa
File:                     9a983bbd-309b-3cc7-9580-37c90a1f3d7d.roa (raw, json)
Hash identifier:          o/tzPekejetriauhGRd3gT8+XuBGAG8JOckoqRxKhn8=
Subject key identifier:   7C:66:0D:F8:21:B3:E8:5F:28:9E:C8:DC:66:31:5E:C3:DE:7E:24:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584905B6B6B899235872B0184980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9a983bbd-309b-3cc7-9580-37c90a1f3d7d.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     16787
IP address blocks:        24.33.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b6:b8:99:23:58:72:b0:18:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=9de0b5d5-a55a-4406-8d2b-72ddee62e7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:23:92:68:8c:3d:64:58:19:38:f9:ce:e3:
                    85:79:a0:1a:d1:85:d1:34:3d:39:58:b7:ce:66:c4:
                    fa:82:fb:17:20:e2:13:44:1c:ea:57:41:5a:b7:d2:
                    1b:00:74:ee:3c:f4:27:8e:d8:5f:9b:ad:69:34:d2:
                    d9:c3:c0:55:0a:94:c2:37:be:60:2b:6b:b5:7c:92:
                    b7:62:f5:de:20:e9:7f:64:43:e8:9e:6b:15:96:d2:
                    c8:75:da:7d:ce:74:5f:9b:58:93:5b:b6:13:8f:49:
                    03:50:a2:b6:7c:d2:a5:80:78:7d:bb:ec:3f:bf:03:
                    dd:30:cf:90:8c:dd:16:95:00:28:30:ff:f7:5b:5c:
                    20:96:4f:fd:23:49:92:61:30:8a:f4:3a:d9:9a:2d:
                    d8:38:ef:e1:3f:3b:9b:c0:a1:bd:e6:6c:e1:12:ec:
                    81:d1:6c:ae:8f:09:dd:f4:ae:6f:23:f2:49:9e:c7:
                    8b:af:04:8d:22:84:16:52:da:ce:49:43:77:62:e5:
                    52:c0:a0:5a:a5:cc:f4:55:13:e9:77:53:dc:d6:13:
                    84:24:a5:ff:21:3f:37:dc:de:94:85:78:90:f1:05:
                    99:4a:4c:ea:99:80:a8:0e:64:72:82:c1:ef:2d:4d:
                    6a:4b:87:24:19:b3:4c:e6:3b:32:87:7f:6d:ac:37:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:0D:F8:21:B3:E8:5F:28:9E:C8:DC:66:31:5E:C3:DE:7E:24:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9a983bbd-309b-3cc7-9580-37c90a1f3d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:73:c5:71:70:11:17:5c:eb:e5:76:6d:c0:65:56:49:7d:fc:
         ab:c6:4f:7b:db:62:5c:89:8d:27:c7:47:78:e6:6d:f8:1a:3d:
         6b:ef:87:a2:9c:26:06:12:73:7e:4f:1e:92:ad:89:d8:57:30:
         db:6a:c0:43:05:49:71:b4:7f:3b:27:3a:24:0a:34:71:89:06:
         60:8e:20:e4:c1:37:24:44:39:1e:55:59:43:a2:c9:b9:4a:a5:
         24:80:68:a7:6d:78:01:b9:82:b5:a5:73:a3:59:1b:a9:6d:c7:
         8c:8b:6e:c7:8d:4e:d0:43:1d:07:f7:f5:77:10:e4:8f:9f:fc:
         be:5c:77:5f:b4:47:51:85:ca:a3:02:91:bc:19:14:d6:76:ab:
         c4:f5:d6:4c:3e:11:ed:f2:c8:bf:80:1d:58:08:5b:31:5e:bf:
         b0:c2:f8:6a:a7:d8:5c:19:48:37:1a:01:e3:0d:a6:8b:b8:44:
         75:d4:e6:80:5b:ca:a6:b4:6a:e8:b6:82:23:0f:fc:e8:7c:24:
         d8:a4:87:86:12:b3:b9:93:6d:08:a6:24:57:e6:8f:52:4c:0a:
         13:f5:a2:ac:da:2a:9c:b7:ec:11:fa:86:d2:4b:bc:c0:0c:1f:
         de:37:55:a2:d0:17:38:35:51:05:ab:70:35:2f:99:4e:de:f1:
         4a:5f:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:03 2025 by rpki-client