Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ca6ff9-316f-3671-8670-82f2406c8649.roa
File:                     d2ca6ff9-316f-3671-8670-82f2406c8649.roa (raw, json)
Hash identifier:          t4AA9/U4Jkl4uNES/3xCLzYcvNyRN+cKMndNpXTvOsc=
Subject key identifier:   70:B7:90:AF:A7:1D:ED:66:F3:25:3C:39:6F:D2:19:09:13:30:A2:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16186AA094C0AB391103040
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ca6ff9-316f-3671-8670-82f2406c8649.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        24.166.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:86:aa:09:4c:0a:b3:91:10:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e68a23d1-1790-443b-a1f9-2eda83ffe73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:cf:37:67:3a:ca:ac:63:79:78:a4:9d:5e:
                    df:a3:8f:b6:a1:2e:35:9d:b1:32:e4:36:82:fd:08:
                    09:89:ee:a5:77:94:0c:9a:8a:c6:50:1b:69:3f:f6:
                    83:0f:37:05:20:d9:88:38:3e:c2:f4:56:6d:20:2c:
                    bf:99:da:b7:92:2c:c2:ad:71:c8:ba:b5:b2:d9:ae:
                    ab:49:43:18:f2:7e:ab:76:a5:d6:e3:c4:66:79:97:
                    80:44:7b:80:22:e4:94:c7:98:0d:c8:7f:a5:6d:47:
                    99:52:be:8a:04:38:5d:7b:30:af:1d:2a:d2:cc:eb:
                    3b:8d:a5:0c:f4:72:07:53:05:5c:90:70:4a:73:de:
                    11:c2:61:ba:99:b9:4b:f2:c2:a2:18:ac:9f:92:46:
                    64:e2:91:c3:24:73:a9:c7:a4:54:e8:9e:85:24:c1:
                    ae:8f:e6:3e:a7:cb:9b:df:3e:78:c0:d8:36:d0:2a:
                    b2:b9:a5:09:75:4b:03:6b:1c:d6:b4:af:e9:87:05:
                    ca:fe:94:b7:d9:eb:df:44:ef:53:1b:d7:4c:e7:aa:
                    5e:43:93:3b:9c:12:a1:d0:59:75:00:c7:48:c7:aa:
                    b1:36:cc:36:f2:52:41:75:0d:a4:f9:61:f7:26:86:
                    17:b6:f7:08:8d:a7:3f:b3:e9:6e:14:0e:63:49:ed:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B7:90:AF:A7:1D:ED:66:F3:25:3C:39:6F:D2:19:09:13:30:A2:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ca6ff9-316f-3671-8670-82f2406c8649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:68:e5:5d:57:a1:42:6e:b7:56:0d:83:3b:c7:e6:86:95:
         c0:c3:11:64:10:59:1d:ca:a5:ee:12:c5:4f:6f:bc:1f:e8:99:
         17:ff:ee:95:ed:2a:9e:25:ec:05:61:5a:96:70:19:21:e0:f2:
         bc:86:7b:3b:70:5c:1c:23:52:fc:f6:db:b2:be:a1:59:d2:3e:
         72:1d:e5:c7:78:e7:be:78:b3:74:8a:d8:e7:e1:0c:51:7e:e1:
         be:55:1b:f9:b2:5c:a8:d8:b3:8a:44:b4:94:23:f9:aa:83:12:
         dd:2b:ab:e3:e1:13:4b:6f:70:94:48:69:18:55:2f:4b:14:8f:
         de:72:05:a7:f7:c4:ee:e1:45:38:69:8e:31:df:31:05:b7:d6:
         38:53:e5:f0:61:af:d8:34:ed:ae:71:7a:8e:69:f5:7e:00:c9:
         41:6b:67:cb:e9:15:21:6a:ab:aa:89:1e:e9:ef:d2:dc:ba:47:
         ee:2e:cd:39:68:21:91:7f:fa:2d:85:04:bb:f7:d6:f8:3c:7a:
         4d:1f:ee:45:a8:62:24:d7:0d:53:db:13:7f:88:68:d8:24:06:
         b3:b7:1b:42:14:aa:b4:98:8b:ef:ba:b5:ac:e0:52:1f:36:55:
         30:b2:d2:eb:60:3c:e1:c9:db:88:63:fa:9c:7a:0d:1a:a5:15:
         db:61:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:15:15 2025 by rpki-client