Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa
File:                     e364eebe-5f5f-3db1-a85d-7b1552712159.roa (raw, json)
Hash identifier:          duw4UuD8cRj7qWObKL4ON+nd+PEIfLr0Dn9XOR5RrdY=
Subject key identifier:   B8:51:47:16:90:28:E6:7A:FD:44:F5:FF:50:83:DC:B4:D7:8F:60:90
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD3A5EA54FEE8543C3E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        66.57.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d3:a5:ea:54:fe:e8:54:3c:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4a532cb1-9b42-4166-9829-48ce3e86b04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:4f:5a:07:c3:b4:40:e4:df:91:fc:44:b8:
                    c8:a2:db:c3:58:2c:53:5e:1d:52:a8:7c:8f:d6:28:
                    4e:67:c6:8f:55:b4:81:af:4e:4e:87:04:80:d9:d1:
                    09:46:5a:82:e7:62:f9:ab:87:6c:df:b1:ac:3d:e9:
                    87:18:96:e8:2d:17:40:01:1e:7c:0a:37:6f:fd:6c:
                    22:71:91:6f:cc:5e:0c:b5:6a:94:bf:96:17:f9:32:
                    c6:19:4b:b0:3f:66:5e:9d:ea:3d:b6:85:1f:9c:06:
                    47:7c:36:61:96:bc:80:4b:2e:78:bd:14:b4:43:1c:
                    f7:7b:39:04:db:2b:c9:ae:27:c5:dc:16:e2:9d:3a:
                    d1:2c:31:53:dd:6e:dc:ed:d9:79:ff:61:46:39:00:
                    28:28:72:df:37:a1:d1:43:df:85:61:cc:d2:fd:5b:
                    6e:70:54:1b:61:46:11:f3:98:73:f5:e8:ce:2a:c3:
                    c9:2f:68:cc:29:ee:53:96:bf:56:13:fb:ea:29:e9:
                    99:60:9b:dc:00:df:83:14:57:d5:56:8d:90:ed:0d:
                    d2:ad:0c:66:43:47:61:63:f2:48:84:5d:e4:68:96:
                    87:47:b7:9d:eb:c4:fe:86:ae:68:ca:ce:f0:f3:82:
                    c1:b6:b2:6a:04:d5:81:46:09:2b:08:38:a9:e8:4b:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:51:47:16:90:28:E6:7A:FD:44:F5:FF:50:83:DC:B4:D7:8F:60:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e364eebe-5f5f-3db1-a85d-7b1552712159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:24:66:f1:ea:a5:3b:47:4b:83:6b:7a:9c:f4:2f:a4:99:
         3e:3d:86:6b:d1:fb:71:9c:8c:ed:92:16:94:d4:b7:83:ea:93:
         52:d6:05:3b:25:3f:25:5c:2f:11:7e:1d:14:94:39:6b:1b:ec:
         26:f3:df:3e:41:d9:20:23:57:df:b5:fd:81:a1:cf:13:7e:cc:
         3d:06:04:62:ce:77:c0:77:b6:82:9c:58:19:f8:92:37:bc:7c:
         d8:06:3c:01:44:58:ca:6d:6f:3d:3f:55:cf:0c:69:8f:f2:96:
         b9:3c:e3:b0:99:bd:28:89:c4:0b:6c:c4:64:aa:2a:5f:ff:5d:
         f8:29:ca:eb:b6:26:e5:a6:70:6d:0d:91:29:18:97:8d:76:bb:
         d8:87:a0:46:19:40:0e:b4:ea:22:c9:8c:80:02:e1:fe:0c:4d:
         5f:6b:f6:51:f5:af:ea:22:2d:4a:2e:d1:ea:c6:2a:bd:79:43:
         17:23:83:2b:35:da:35:cd:a8:b6:0d:3d:ec:26:22:ba:12:cd:
         c6:f3:f3:86:52:f5:ee:8a:46:a2:6b:17:4b:47:65:fd:e0:48:
         01:48:59:3e:5d:ee:9f:ff:b6:69:1e:8c:30:6d:84:8a:f7:17:
         b9:34:38:71:f4:93:68:b8:9d:c1:82:54:3a:b4:bc:b6:39:a5:
         04:01:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:50:15 2025 by rpki-client