Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc186179-a356-3cad-803c-3dc53c186a07.roa
File:                     dc186179-a356-3cad-803c-3dc53c186a07.roa (raw, json)
Hash identifier:          yWvIhzneG5ahSsY6L3GpbWTcvjdgjsk+9fA/0rsrLRE=
Subject key identifier:   DD:D6:B4:48:60:80:8F:7F:14:B0:46:CB:46:73:7B:7A:C6:78:61:36
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D155E92EEF489A7BCF1980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc186179-a356-3cad-803c-3dc53c186a07.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     30391
IP address blocks:        67.53.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:55:e9:2e:ef:48:9a:7b:cf:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a20794f4-fcde-45df-9e14-3bedb9dc90bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:6e:d9:4f:69:3f:75:e9:1e:c5:bf:cd:72:
                    76:34:df:0b:b2:00:5a:e3:e5:47:b3:33:7e:9b:cf:
                    73:ba:e5:7f:d1:b3:cd:2e:fb:75:0b:9b:61:05:31:
                    ef:22:0f:a7:6e:99:e9:6c:d0:11:00:8c:79:2c:4d:
                    c7:f1:a4:12:9a:95:67:72:ca:2c:81:5f:7b:45:21:
                    76:37:d9:0b:67:09:06:4c:b6:ee:98:05:5a:7b:75:
                    37:9f:06:01:42:64:72:85:7f:2e:ce:e0:9e:d5:46:
                    b0:0e:f7:18:e7:32:27:23:92:29:e4:44:0f:62:c4:
                    54:63:39:8f:a4:02:91:64:43:86:07:aa:c6:e3:94:
                    e4:0e:a7:70:22:16:b0:ca:df:e5:2d:af:61:01:a6:
                    c8:de:dc:d8:e7:41:bd:06:51:82:ff:29:50:e9:bb:
                    ad:c6:73:a6:3b:49:9b:e8:c8:30:2d:85:32:7e:ba:
                    c6:47:d8:8b:b1:b2:5d:3b:86:15:cc:ab:f5:e7:1c:
                    dd:71:f9:35:85:bb:09:d1:ab:35:c9:4f:9d:88:b0:
                    b8:64:98:a1:0b:cd:94:fb:bc:49:9e:61:29:f2:74:
                    f1:e0:f7:7e:56:2b:ff:ca:c3:48:ff:6a:f2:56:52:
                    d4:ff:72:b8:9b:2b:26:b7:3b:3e:59:53:02:5e:04:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:B4:48:60:80:8F:7F:14:B0:46:CB:46:73:7B:7A:C6:78:61:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc186179-a356-3cad-803c-3dc53c186a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:4b:c2:ab:64:f8:06:38:a0:9e:94:48:e1:12:d6:46:2e:
         30:27:94:a3:7b:07:a0:56:3e:d3:5d:ad:e3:6b:04:60:09:fb:
         19:16:35:91:a2:be:75:e0:88:02:d5:22:a6:9b:18:7b:e3:7d:
         06:e4:5f:e5:20:62:72:ff:68:92:ff:db:89:b2:0f:a9:5a:56:
         94:89:7b:eb:29:d8:9c:31:ac:c0:62:53:76:32:70:68:dc:fd:
         f4:72:f9:66:ed:3b:47:f9:36:56:f2:84:e3:3c:44:4f:c2:06:
         33:cf:da:71:51:0d:87:05:40:09:3b:56:5b:e9:39:cc:9c:dc:
         41:fd:d6:ee:2a:36:d5:87:0a:ee:3e:d8:72:87:74:4b:f0:fb:
         13:de:c1:b1:37:2c:c6:b1:7d:9b:44:83:58:07:36:e0:7d:39:
         eb:53:00:1b:0f:b2:ac:b9:98:bb:95:b9:24:ab:0b:c0:b1:ce:
         6d:f2:78:1d:26:c0:17:df:1e:65:20:92:f1:5f:b4:44:90:d7:
         fb:fb:4c:96:3c:8f:76:82:90:88:91:50:d3:d2:0b:c7:78:e1:
         a3:46:0e:9f:fd:fc:db:69:09:11:5d:7b:61:da:30:88:d8:ea:
         ea:9b:a8:bc:66:d3:74:73:2f:27:35:89:55:fb:44:86:a3:41:
         23:f1:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:59:52 2025 by rpki-client