Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba6b646d-f1ee-3ea2-b0b5-f609af5309d2.roa
File:                     ba6b646d-f1ee-3ea2-b0b5-f609af5309d2.roa (raw, json)
Hash identifier:          ZCQJvS84/+PHSEUpIWUTCpAWBN9i3pplHwcQxHzyTyc=
Subject key identifier:   37:74:78:33:CF:86:2D:CA:71:83:48:05:3E:DB:0F:44:67:20:FC:6B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D161FCBC51C583AED540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba6b646d-f1ee-3ea2-b0b5-f609af5309d2.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        76.178.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d1:61:fc:bc:51:c5:83:ae:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=6d0ed173-54d3-443d-b217-30b217176730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:30:41:e5:fd:6a:06:cf:e5:64:e6:ab:0b:
                    41:0e:e5:9c:06:c3:f3:d3:55:6e:7c:11:72:ea:b1:
                    51:89:06:1d:0f:91:59:42:a4:2d:d7:3f:1c:78:81:
                    05:f2:37:5d:68:ee:a8:38:66:e2:d1:bd:33:26:1c:
                    d7:4f:cd:2b:d3:81:89:ad:9b:d5:b9:a2:b3:c6:4d:
                    d6:04:f3:9e:16:c8:02:07:08:3c:8f:5d:93:f6:24:
                    b1:ba:a3:cb:2b:c2:27:50:5b:1d:d2:73:7a:cf:e6:
                    e6:73:c2:9f:94:ee:1a:4a:0c:22:4a:aa:9e:f8:cf:
                    77:76:b2:e5:76:8e:28:85:71:aa:ce:f7:f9:9b:f9:
                    bb:cf:bb:6a:f7:2e:38:a4:78:2d:f1:80:93:28:ba:
                    63:87:1d:d6:70:23:9c:88:d3:04:2d:63:a7:74:80:
                    ce:dd:29:db:02:65:c2:d1:5f:85:5d:14:af:f8:d5:
                    d6:7c:76:ac:90:db:78:62:c2:b8:47:68:05:f0:81:
                    eb:14:81:e2:59:66:16:be:0e:54:93:c6:89:08:8d:
                    a5:d2:ec:f9:e3:24:2d:05:09:74:b9:79:50:29:b5:
                    1e:39:d9:d1:86:35:b5:21:f2:b9:3a:bf:e6:b5:14:
                    6c:57:d2:07:9f:cf:9b:82:55:2e:6f:09:6b:ba:19:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:74:78:33:CF:86:2D:CA:71:83:48:05:3E:DB:0F:44:67:20:FC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba6b646d-f1ee-3ea2-b0b5-f609af5309d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:51:87:be:e1:2f:50:a1:a1:0c:9c:c0:af:7f:6c:08:e0:
         20:b7:29:27:c2:80:49:60:99:78:76:c3:32:76:aa:75:9e:49:
         6a:bb:e0:37:47:b4:d3:b2:86:18:d3:91:c3:a0:8f:f6:bf:38:
         98:26:4a:40:77:8d:ed:c6:d2:09:07:4c:6c:1c:3f:9f:13:c3:
         b6:55:c2:05:34:37:a5:5e:29:c7:27:dc:3d:96:9a:6b:45:30:
         11:e1:fb:58:a8:ae:08:a3:1d:b6:67:3f:b0:2b:7a:cd:f0:b4:
         93:e0:64:00:eb:12:76:40:b7:7f:72:d1:0f:62:2c:c7:1c:40:
         30:b3:e9:c3:33:75:79:75:86:a5:ca:61:05:85:00:b5:9f:15:
         0f:7c:ab:c2:f3:9f:82:7d:ad:1c:7a:78:5f:28:d7:3e:84:67:
         e6:d1:bf:20:32:4b:7a:ba:8c:cd:7e:6f:6e:4d:19:47:74:63:
         81:9b:39:de:1f:cb:81:ee:a7:e9:c6:b0:fd:41:cf:3c:09:8e:
         93:59:63:37:f7:09:53:d0:c8:ea:f8:12:58:6b:30:12:b7:af:
         e4:5e:9e:5e:96:0e:32:0a:6c:53:21:2d:77:c8:e1:e5:05:86:
         ab:fa:9a:f1:e5:79:fe:b1:d3:79:30:3e:51:d6:80:17:0a:be:
         26:49:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:14 2025 by rpki-client