Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ece715-d25b-32c2-b11d-183cfb2a51aa.roa
File:                     c5ece715-d25b-32c2-b11d-183cfb2a51aa.roa (raw, json)
Hash identifier:          cn2gulqGX5JlizTXDUNO9zOG4VtmOvMRT7iIyn0nNsA=
Subject key identifier:   EC:11:E0:5A:52:B6:12:48:F0:D6:EA:38:17:55:02:AC:74:2A:2D:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1BC9EB3134E2C3FA38C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ece715-d25b-32c2-b11d-183cfb2a51aa.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11351
IP address blocks:        68.172.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:bc:9e:b3:13:4e:2c:3f:a3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ddcfa62b-e425-4a5a-a8d8-3927c4754aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:77:64:68:96:ad:bd:3f:04:9c:13:93:36:
                    d5:b0:d0:af:c8:65:13:f3:e9:f0:93:96:35:e5:4e:
                    02:38:e2:52:5f:a4:0a:63:cf:e6:4c:3e:c4:32:a4:
                    dd:8a:f1:e0:d1:7c:9e:d0:2b:ec:86:03:32:3f:3d:
                    05:63:c4:89:c5:5b:01:c8:30:a7:96:7e:5f:d1:1a:
                    1a:6c:c1:c1:9a:2f:a6:1b:94:ab:15:b8:71:40:45:
                    5f:34:20:cc:82:04:52:d9:b8:c8:db:46:c9:fa:53:
                    68:31:c8:95:d4:d9:28:55:7d:51:93:00:bb:5f:00:
                    90:c3:5b:af:0a:43:7f:49:2d:41:67:bd:de:0b:68:
                    39:af:3a:22:ef:0a:d0:a6:eb:cc:73:af:54:15:98:
                    6d:33:85:2d:10:4d:16:dd:a3:95:10:d9:4a:d6:15:
                    94:8c:dc:eb:0f:e7:50:48:4c:4d:65:1a:93:03:09:
                    76:e7:8f:5f:ca:92:8f:fb:99:a4:25:a1:c2:09:23:
                    fb:7f:49:94:31:f2:de:74:9f:02:b9:af:2d:25:d5:
                    b4:1b:e5:b8:f9:7f:2b:94:88:71:94:8a:69:a1:cb:
                    95:e0:cb:99:9f:3c:a7:4e:0a:de:f2:88:5c:c3:90:
                    d5:26:a6:76:5a:aa:11:45:7e:ec:12:85:13:82:48:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:E0:5A:52:B6:12:48:F0:D6:EA:38:17:55:02:AC:74:2A:2D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ece715-d25b-32c2-b11d-183cfb2a51aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.172.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:e7:be:70:3b:8b:2d:07:c7:ce:71:2a:1a:a8:55:36:2e:
         9e:48:99:ce:65:19:46:e4:10:1f:30:72:98:76:4b:2a:56:8a:
         f4:11:4c:26:40:e7:a8:3d:f6:99:5d:c3:8b:00:a7:a7:22:0d:
         96:fd:e4:8f:dc:39:45:b3:97:31:1f:b9:ab:9a:dd:59:69:c1:
         d8:b8:8e:32:37:dd:4d:80:88:30:c2:91:eb:0c:4b:c9:d4:f5:
         68:dc:89:ad:7b:1e:34:4a:0c:82:a3:9b:17:51:1f:20:6b:eb:
         e7:db:f3:4a:3c:2e:88:e2:aa:b7:13:2f:d5:45:84:98:af:24:
         3d:c9:49:6e:ac:e6:46:88:f5:a1:5d:79:ca:ba:b9:96:34:82:
         f7:c6:61:b2:52:ff:d5:b8:80:32:b3:1c:ab:ba:43:27:b7:ad:
         99:ba:bb:86:3b:36:e8:a6:a9:ad:e0:4c:a9:01:82:d1:30:a2:
         8a:33:0a:d8:c2:e3:e4:a8:16:fa:e9:37:fa:fd:0e:e7:24:98:
         2e:fc:d6:cf:fa:7f:85:74:84:eb:77:f3:73:88:71:0c:01:10:
         03:ba:b3:10:fb:73:fa:64:ac:a8:c6:03:37:be:66:f9:b4:2e:
         93:a0:e4:17:75:fb:ca:c2:20:17:01:5d:28:ea:c6:ca:fc:4b:
         cd:b6:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:07 2025 by rpki-client