Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b868de91-b314-3c92-bfd3-c562c677ab5a.roa
File:                     b868de91-b314-3c92-bfd3-c562c677ab5a.roa (raw, json)
Hash identifier:          xnB6qsDlH2ri4pprDmoCagTgOsXXGVEAQQk7lc7BoA0=
Subject key identifier:   05:B5:0F:CA:38:E2:F9:A3:44:E2:63:F7:13:FE:DC:66:EB:B0:FD:02
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584901152C9835700B9D8F962680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b868de91-b314-3c92-bfd3-c562c677ab5a.roa
Signing time:             Tue 25 Feb 2025 22:12:18 +0000
ROA not before:           Tue 25 Feb 2025 22:12:18 +0000
ROA not after:            Mon 26 May 2025 21:12:18 +0000
asID:                     20001
IP address blocks:        76.81.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:15:2c:98:35:70:0b:9d:8f:96:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 25 22:12:18 2025 GMT
            Not After : May 26 21:12:18 2025 GMT
        Subject: CN=2e40f8ab-9211-4e21-aeb8-1aaecbc432b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:1c:6a:16:fb:c3:0f:c0:b5:4a:d2:57:f0:
                    47:5c:17:ba:aa:c6:d5:ef:00:d3:5b:8d:61:c7:74:
                    38:f6:b2:79:33:8b:df:ee:fd:28:9d:d1:3f:9a:f8:
                    16:04:db:a5:d2:71:a7:92:39:bd:dc:85:5f:7f:f3:
                    5d:35:a1:a9:47:70:0c:73:ee:46:a0:24:02:b9:06:
                    4d:a4:99:db:ac:ad:44:dc:d3:ff:cd:06:3b:ec:36:
                    84:48:3b:98:27:ee:b3:3a:16:83:2a:4c:cd:7c:3d:
                    39:ee:34:fd:ec:90:24:02:ca:eb:59:9f:a1:23:1f:
                    83:2f:fb:1e:e4:5a:9d:ab:16:e7:0a:5c:f2:2d:51:
                    31:b5:29:35:56:e3:26:c1:b6:f5:f7:40:34:71:43:
                    0f:b1:0e:fe:ef:57:fb:8b:f9:64:a1:3a:92:3d:a5:
                    3f:e3:55:d1:01:88:af:4f:f1:5f:aa:e0:f4:2d:0e:
                    5d:0f:c7:99:01:0c:64:82:d0:fe:03:46:47:98:29:
                    17:d3:82:4c:10:e4:0a:f6:7b:9d:e0:bc:4a:a4:68:
                    e5:79:d2:07:a8:5f:7c:47:7c:e4:31:c4:28:96:f4:
                    55:07:4e:12:4b:a4:b7:87:4b:06:17:e5:5b:2c:69:
                    16:20:f6:c9:8f:c5:2f:41:78:d6:17:f3:c9:72:f3:
                    d9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:0F:CA:38:E2:F9:A3:44:E2:63:F7:13:FE:DC:66:EB:B0:FD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b868de91-b314-3c92-bfd3-c562c677ab5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.81.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:70:40:52:6c:7c:ab:69:96:88:79:1f:5f:fa:5b:f8:bb:
         6b:b1:11:2c:b7:dd:ab:c6:37:2a:36:41:be:de:58:fb:a9:07:
         4c:df:0e:00:24:7c:5c:bd:7c:63:8b:2c:0a:5f:f1:7e:26:d3:
         37:bd:f6:33:43:0c:1c:59:e7:b9:f1:9f:eb:0f:70:48:47:72:
         37:f0:81:df:c0:53:92:42:78:d7:79:37:dd:f9:ec:a9:ff:cb:
         9a:e2:8f:29:03:b8:e5:c7:cf:65:0c:a0:6c:b3:89:f0:fa:3c:
         5e:4e:06:81:4f:dd:da:b5:96:d3:ce:37:ca:fd:c2:e8:ab:3b:
         ea:89:83:74:7d:52:a6:15:c2:db:d1:af:c7:91:f7:6c:6b:bb:
         fb:96:ea:13:0e:f5:8e:60:11:86:d8:ff:ee:ba:d2:57:7d:81:
         f5:74:fc:37:a4:e0:73:37:d1:8c:f5:9f:0e:92:fb:98:df:f5:
         10:9b:0a:c8:50:fc:b6:e5:10:90:ce:57:42:16:0e:41:a6:f6:
         2c:71:69:9e:66:ea:04:1a:19:b5:92:54:26:83:8f:ae:ea:b8:
         2f:59:42:41:88:78:45:43:a5:a5:da:45:f2:32:12:61:42:f2:
         97:c1:66:58:e2:ad:04:bc:fb:73:78:36:95:e1:d1:a6:7a:2e:
         a2:8a:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:17:32 2025 by rpki-client