Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a356230b-6674-3192-ae82-e1b96237ea71.roa
File:                     a356230b-6674-3192-ae82-e1b96237ea71.roa (raw, json)
Hash identifier:          HFY00zcG1dTQSyRkfMU3PVqyn/v7hEtO5BGc5ePIsIk=
Subject key identifier:   02:54:3D:F2:F5:5C:94:2C:31:73:89:7E:AF:3B:BE:F5:0F:C4:11:BF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CEFA27326B05F99CCFC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a356230b-6674-3192-ae82-e1b96237ea71.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        24.25.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ce:fa:27:32:6b:05:f9:9c:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=134ac922-9d93-46c4-90db-5a586abbdcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:15:e3:7d:2f:1b:d9:12:24:a2:a2:c1:e8:
                    c5:32:27:ae:5f:fc:8c:a2:18:ab:1d:71:d7:a2:da:
                    5f:53:64:34:cf:2f:e2:17:88:ce:9e:c2:07:e0:ff:
                    33:e0:f0:af:00:99:9a:73:d2:c9:85:8a:c8:da:1b:
                    48:d9:ff:f3:9b:c1:0d:64:9d:f3:c9:1c:c8:5f:bd:
                    20:2a:9d:fe:a4:90:e3:d6:7c:1c:eb:07:16:12:2c:
                    e5:7b:83:b4:4a:ca:e1:ad:2a:2e:2e:79:7e:55:99:
                    20:2a:51:e9:0f:69:90:a7:ed:a4:dd:a9:1f:1c:1b:
                    8e:26:71:c5:09:2e:c3:00:67:e3:6f:d9:c2:34:79:
                    2a:ce:54:92:b5:50:76:67:68:40:80:ff:33:4a:8d:
                    e8:4d:e0:f3:b9:a2:eb:3e:2e:f8:56:e9:14:56:51:
                    6d:6c:c5:dc:fb:51:e1:f2:aa:94:3a:db:00:f4:f2:
                    7a:45:67:29:da:e7:9e:d7:55:4e:1f:41:74:14:11:
                    ff:5b:dd:06:7e:da:87:25:76:45:4c:98:32:2e:11:
                    60:13:07:2b:f6:c9:7a:70:0f:55:77:a7:f3:90:4c:
                    10:bf:01:77:1d:4f:8a:e2:af:bf:a3:84:7f:83:ba:
                    b4:63:65:24:a1:d4:8e:93:a1:28:bd:9f:fe:fa:88:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:3D:F2:F5:5C:94:2C:31:73:89:7E:AF:3B:BE:F5:0F:C4:11:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a356230b-6674-3192-ae82-e1b96237ea71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.25.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:48:42:a4:68:80:26:a4:fa:4f:ca:58:16:87:a8:6a:86:28:
         7e:45:8f:e1:66:21:e7:33:25:01:98:66:09:2e:46:10:c6:39:
         bd:12:99:51:9e:38:c9:84:5b:6f:86:df:91:e7:ea:4f:37:30:
         40:e2:cb:5d:ff:a7:21:cf:c1:1b:25:a0:54:e4:11:90:d4:81:
         61:50:52:d6:e6:cc:6a:09:42:a1:b2:35:17:b5:26:0c:42:2a:
         08:4a:49:19:4b:bb:f4:14:e7:fb:8d:85:c4:d0:0e:6d:7c:c7:
         50:80:f2:21:8b:43:82:0f:d6:41:0c:9e:83:27:fe:c1:d8:21:
         9c:cc:df:22:4f:e7:c7:ab:48:a8:0f:1a:e7:c6:5e:00:c1:43:
         15:9a:7f:00:42:7b:2d:44:79:8f:bf:dc:9f:50:bc:59:bc:47:
         99:b7:3d:37:d1:b5:69:d4:58:cf:ff:2b:fd:b5:11:04:e2:e7:
         30:02:31:f4:67:f3:49:3e:47:4e:1d:0a:f1:4b:2d:87:29:96:
         ac:76:e3:00:b7:79:f8:13:69:52:f7:27:e0:13:cf:68:8b:de:
         3f:0d:65:55:7a:8e:7c:57:5c:d1:e3:99:0c:3b:ef:e2:ef:76:
         a0:9b:60:e7:23:90:a7:18:c3:a3:43:3c:ef:c6:7b:95:fd:f2:
         bd:17:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:04 2025 by rpki-client