Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1176647-81e2-3380-9cb5-df596816fbc5.roa
File:                     c1176647-81e2-3380-9cb5-df596816fbc5.roa (raw, json)
Hash identifier:          tyUH9qeHjxaNMLBF/4aahSP+ND2pSOd6NO1gwJ23IUw=
Subject key identifier:   14:95:8A:4E:73:68:4F:85:7B:70:27:9B:18:36:B1:0F:0B:10:7D:6D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A62229DB194706D708B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1176647-81e2-3380-9cb5-df596816fbc5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        24.123.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:62:22:9d:b1:94:70:6d:70:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=62e4d472-6ba9-4c6a-adfd-8417e2eeced8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:54:0b:6c:80:e1:ca:13:34:23:b0:f2:8c:
                    4d:93:9d:43:15:b7:5e:65:54:d2:71:c4:0d:96:ea:
                    71:fa:38:00:ad:23:2d:f1:c5:01:c0:8a:24:32:f2:
                    99:d1:f1:ed:78:20:ac:7f:77:db:61:b1:37:e9:ff:
                    d5:e2:6d:bd:2a:a6:e4:57:95:39:6e:48:93:08:76:
                    ac:21:c4:aa:ca:af:ff:c2:ab:6f:86:e3:9d:2d:f6:
                    73:84:84:72:9f:c2:2c:1b:c7:47:00:52:0c:49:ad:
                    06:cf:9c:1b:60:69:10:09:3e:89:45:35:4f:5f:e3:
                    99:eb:3b:dc:6c:93:eb:09:7d:d1:a9:4e:df:1c:ac:
                    38:91:7c:2a:03:f4:c4:3e:f6:a3:a6:4b:ba:c1:5c:
                    0f:c5:c6:7b:d2:8f:4b:7a:32:70:b1:c7:a5:96:31:
                    6c:ee:b1:7e:d2:51:63:96:c5:2e:cc:85:65:13:7a:
                    28:b3:0b:05:b7:9c:40:39:b8:17:a9:f0:85:de:07:
                    92:b1:8f:ae:f3:b5:c8:a4:e1:b0:79:64:0c:52:e0:
                    45:2c:c4:35:b6:c6:09:ae:31:55:99:74:07:e2:70:
                    b3:e6:3a:3f:e5:9d:84:88:db:92:70:ea:1d:52:7e:
                    2e:3d:3c:ab:12:5f:29:02:0d:02:26:1c:01:ce:36:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:8A:4E:73:68:4F:85:7B:70:27:9B:18:36:B1:0F:0B:10:7D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c1176647-81e2-3380-9cb5-df596816fbc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:92:9c:d8:ff:87:66:cd:f8:ac:3f:76:fc:35:75:2e:98:10:
         3e:19:2a:13:cb:fd:8a:a4:24:cb:90:49:b7:fb:e5:bb:36:6e:
         c9:11:fc:98:d3:00:91:1a:02:0f:94:d3:3a:88:e2:d7:2c:a1:
         55:9b:a4:02:f4:73:e9:41:b4:a1:8b:75:72:fe:6c:8f:33:3e:
         17:bd:4e:d3:0a:ec:8c:1f:b4:3d:1f:1a:da:aa:1a:ad:55:f9:
         94:a9:6f:bc:5a:72:d9:ba:3e:6c:be:23:da:4d:ac:60:3d:4c:
         4f:ec:50:eb:46:27:20:7e:7b:5b:18:3b:c6:d1:e5:ec:d5:90:
         e1:5e:a2:93:10:e5:de:40:eb:ed:47:6b:ed:03:68:82:d1:6b:
         33:f5:ed:d0:0f:8b:df:8f:cb:15:96:cd:02:f1:0b:60:a6:17:
         4c:00:70:f4:96:5a:30:5b:e9:ed:1c:f0:3d:5c:c4:86:2e:35:
         a9:65:f6:61:88:c7:83:7c:f0:1a:86:46:c8:88:be:63:a0:f5:
         14:68:0b:a1:4c:d1:f2:60:b7:33:5d:dd:24:c3:2d:51:ef:69:
         a9:4e:14:8f:0a:e0:70:34:d4:ad:74:fd:a0:ea:e0:a0:43:2f:
         cc:d4:85:9d:95:b0:7d:2d:1d:36:d1:6b:62:fd:db:08:cb:3f:
         eb:d3:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:51:12 2025 by rpki-client