Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca23f3c-1405-366a-9ff4-36d2b7cd5e38.roa
File:                     cca23f3c-1405-366a-9ff4-36d2b7cd5e38.roa (raw, json)
Hash identifier:          xfnL1ZPjsGA4raYgc+ETkRiwQtL/PMS7Cja00+B1ef4=
Subject key identifier:   13:C8:A8:B2:32:53:83:C6:82:4D:85:0E:44:CB:E8:DB:EC:D7:AF:91
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1202D5C5BC186B3126700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca23f3c-1405-366a-9ff4-36d2b7cd5e38.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     4546
IP address blocks:        173.198.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:20:2d:5c:5b:c1:86:b3:12:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=45098d37-1238-494b-b400-18e5a0e67fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:52:00:4b:3f:54:90:d7:ad:94:73:67:1d:
                    a5:1f:d1:84:fc:02:a0:e4:a2:88:ed:f5:7e:d0:fb:
                    7d:a1:36:5e:80:3a:7c:40:b6:2a:36:93:ec:68:c4:
                    92:7e:ec:13:6c:49:63:32:0c:ff:74:cc:6d:b7:7d:
                    92:e8:00:ff:57:95:ce:e2:f4:4b:ed:83:0c:12:d6:
                    a6:1c:24:ed:39:c5:9d:22:30:f1:fb:96:bb:2f:e3:
                    fd:80:82:6b:09:6c:dd:92:52:47:ff:31:7c:94:58:
                    68:7b:ea:5f:8e:76:9d:cd:50:70:44:1c:99:bd:a5:
                    93:f2:17:4e:7d:67:85:c0:60:8d:a9:5e:6e:57:be:
                    d8:32:66:11:76:ad:07:57:02:27:4b:45:9d:3b:6d:
                    5d:61:60:9f:51:3d:f4:40:32:e8:66:49:56:d2:24:
                    4e:cc:aa:3b:6f:3e:f1:83:50:83:e0:cc:81:5a:82:
                    d7:8b:7d:dc:47:8b:9d:1b:61:d1:51:8e:54:b7:45:
                    dd:6d:19:bd:d1:7b:ea:bf:07:58:95:04:4e:41:6e:
                    9e:8f:ae:04:1f:da:03:dd:cd:f6:1b:d1:e4:7a:1c:
                    6b:39:f7:a4:c0:06:0b:52:bd:21:02:7d:21:b1:d2:
                    09:18:2a:bc:8b:8e:66:06:a5:6d:6e:d5:40:29:36:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C8:A8:B2:32:53:83:C6:82:4D:85:0E:44:CB:E8:DB:EC:D7:AF:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cca23f3c-1405-366a-9ff4-36d2b7cd5e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:22:c2:30:65:ba:42:06:f8:5c:b9:8a:90:db:83:17:90:
         cd:f3:0d:dc:3c:63:4d:ac:d4:48:e5:92:f8:21:ee:69:6c:ac:
         ff:84:74:f3:97:e5:33:a4:eb:f5:fe:c1:2b:2c:42:09:65:01:
         79:c4:ba:9f:d3:10:34:37:df:85:47:ad:af:e3:6c:fc:21:1f:
         4f:8a:79:64:a3:b4:20:c6:5f:13:8f:cf:e6:db:54:39:3e:2e:
         63:51:18:2f:5c:9b:41:49:e4:43:27:87:81:61:ea:2a:f6:30:
         d7:c3:b4:b3:20:cf:15:67:74:67:0b:42:a2:cd:fa:b9:a7:6c:
         ae:8b:b5:50:0b:ad:59:3e:5f:92:78:6b:56:7d:cc:5d:47:fe:
         e9:a1:a6:ff:4f:35:1a:81:83:c0:6f:97:9a:36:f0:fa:a9:78:
         af:65:21:eb:9f:2d:5e:70:70:c7:b9:f9:08:29:2a:de:23:ea:
         de:aa:5f:85:44:b1:2c:eb:71:3c:d2:4f:7b:28:87:f7:dc:bd:
         84:f9:27:2d:76:ef:9c:a0:f2:13:19:f2:82:13:c2:b7:b1:c9:
         5a:81:86:03:eb:54:60:83:3c:3d:84:72:84:3e:3e:6b:1c:ca:
         9d:53:2a:04:20:b6:a0:8b:09:81:7a:fe:db:e5:7a:8f:59:43:
         4c:ac:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:31 2025 by rpki-client