Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb41e543-0d22-3e16-8982-c75db46f41c1.roa
File:                     eb41e543-0d22-3e16-8982-c75db46f41c1.roa (raw, json)
Hash identifier:          LbBL5fy+J+oiqvgiHkdNUBVe6FzzeZFWoCgFBLX7NAc=
Subject key identifier:   34:0D:89:5E:AC:BA:49:4E:BB:58:2E:9A:2E:3A:27:3F:C3:87:8C:58
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B82875A35A7D02C4BC50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb41e543-0d22-3e16-8982-c75db46f41c1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        67.52.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b8:28:75:a3:5a:7d:02:c4:bc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=cbf2173c-0394-4b07-a998-70385b62ba22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e7:3a:0e:09:4e:2d:0d:4c:2c:c8:f6:30:5f:
                    b2:8a:74:ac:b9:6f:1d:af:45:a0:1c:24:e3:69:d4:
                    d6:e3:9e:0c:a1:29:c6:9c:63:86:f9:59:ed:5e:81:
                    93:f7:41:ee:19:dd:fe:b7:32:0e:8a:20:26:18:75:
                    e6:c5:db:fb:d5:e8:03:36:94:bb:5c:26:ba:1f:55:
                    9a:0b:39:19:c0:f2:50:3d:1f:ca:f1:13:94:e6:c1:
                    d8:04:f4:ba:b1:98:34:a0:ac:65:43:a0:b9:31:7c:
                    88:8d:ee:05:7a:4f:be:e4:c1:20:5c:28:15:b3:ab:
                    65:89:4d:87:88:83:58:36:0c:2f:b6:2b:d9:39:c6:
                    f4:bd:35:a6:e5:33:59:05:56:4d:81:47:89:c4:41:
                    b5:f7:08:ca:ef:d9:30:a9:4d:0b:7e:b8:e6:8e:55:
                    bd:85:36:ee:c9:65:7c:62:f2:43:c6:2b:6b:e2:6a:
                    cc:59:be:66:32:33:e7:9c:2c:42:26:0c:e2:19:2f:
                    cc:4c:f6:64:0d:a8:a8:22:ec:ee:46:f2:b3:7d:2c:
                    7c:b8:ae:e0:0e:23:7a:f8:26:4a:68:54:ce:68:c1:
                    db:78:69:9e:b6:7c:f0:d2:80:41:01:52:e4:67:ad:
                    ef:6e:48:4b:02:54:2a:b1:5c:68:c6:e8:46:d5:ca:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0D:89:5E:AC:BA:49:4E:BB:58:2E:9A:2E:3A:27:3F:C3:87:8C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/eb41e543-0d22-3e16-8982-c75db46f41c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:b4:4f:88:c4:d8:10:90:8b:f7:df:9e:45:2e:d2:9c:d4:
         c6:57:f0:82:79:bf:a9:cf:5b:e4:41:7c:85:d3:5d:cc:a8:ff:
         fc:8b:28:71:31:1b:77:33:d7:28:96:f1:c6:96:30:ca:af:c0:
         b6:4a:a3:cb:25:e0:9e:db:5e:b8:0b:cb:6a:33:c7:4e:58:67:
         e3:42:cd:bb:da:a2:bc:2c:58:b9:dc:7f:c4:ee:92:99:88:13:
         4f:11:19:5d:27:8a:d7:9e:02:21:97:4f:7f:f5:46:c3:b4:16:
         5e:17:78:18:df:ef:37:4c:52:ae:9b:06:91:9c:b6:8f:61:14:
         b1:9a:c9:d0:49:40:c3:1b:a5:13:dd:88:a6:3f:4d:0a:8a:9f:
         97:ab:64:c5:e9:b8:4e:35:3a:12:6e:fd:01:03:fa:5b:c7:e6:
         7a:07:76:01:8f:c7:d2:9a:c8:21:34:39:ec:f4:26:fe:3f:47:
         10:22:5a:72:22:47:b9:f5:49:96:cc:b3:2b:5f:fe:62:72:35:
         74:78:b2:8b:41:09:59:47:54:13:b6:85:da:ea:75:f9:13:2b:
         da:6a:02:7b:c8:de:12:99:cf:0e:b0:ca:a7:f8:c4:c1:fc:78:
         5d:79:a9:e3:ca:ce:76:82:7b:e0:84:a4:ca:d5:5b:5d:0a:0b:
         25:5e:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:46 2025 by rpki-client