Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
File:                     e7b232a9-af0c-3d2a-b23b-63139953717c.roa (raw, json)
Hash identifier:          FMYoSS6yba2dbz5JK6wwP96J/6t1o3S0Q9vk/le0pc4=
Subject key identifier:   1F:F0:36:D8:AD:D4:DD:9F:53:48:7D:70:1D:7A:10:E9:39:09:CB:EB
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F4328584A1B5FF3379F67CDC7572621F0
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     11775
IP address blocks:        162.211.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f3:37:9f:67:cd:c7:57:26:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=a3070b87-e407-4378-b5d7-c7e1d95a8820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:28:01:22:14:7f:01:21:f7:02:0a:73:51:
                    16:3e:bf:7b:f8:98:be:59:8a:57:b6:7b:1b:51:93:
                    d7:bf:0c:57:30:d6:8a:5d:38:db:59:ac:eb:03:b1:
                    8c:83:00:df:1f:65:4e:00:0a:5a:ec:49:59:c2:64:
                    f1:43:35:5d:f5:27:c4:39:2c:b1:50:db:2a:22:65:
                    d5:ee:4a:62:3e:2a:4b:74:c6:04:7d:ed:9a:26:19:
                    69:83:f8:c2:56:ee:c7:09:bc:dc:2f:44:77:46:91:
                    0a:d8:4f:03:de:eb:af:87:ec:44:d2:05:d2:90:9b:
                    93:54:f0:05:b2:94:d1:ee:33:4f:24:50:ef:47:0d:
                    f6:6a:c6:04:90:60:6d:a9:df:cf:0a:c6:07:86:c9:
                    01:f4:9a:b0:1b:a2:6c:31:1a:f7:f2:85:c5:52:95:
                    47:e0:7e:99:99:0a:48:0d:01:36:55:58:51:30:0f:
                    ea:4a:63:98:fb:e5:22:3f:40:a2:66:91:30:e5:8b:
                    47:d0:3c:28:ab:03:d5:1b:f6:08:45:d5:0d:bb:92:
                    ee:8a:74:ce:3f:52:0e:dc:07:75:e1:65:87:31:59:
                    13:f7:5c:c8:40:87:fd:63:17:0c:66:fd:5f:38:d5:
                    d7:c8:d6:d0:43:a8:29:41:37:d7:58:5f:55:f4:74:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F0:36:D8:AD:D4:DD:9F:53:48:7D:70:1D:7A:10:E9:39:09:CB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/e7b232a9-af0c-3d2a-b23b-63139953717c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f1:a2:94:ee:cb:99:87:ca:5e:88:9c:0b:0f:0a:d6:06:2d:
         33:52:0a:57:58:d0:fc:d1:3d:9f:59:21:b4:5c:85:bf:b1:4d:
         41:d6:6c:ec:17:10:67:d9:16:0f:bb:25:09:dc:a0:d8:66:b6:
         8b:02:63:73:65:8e:f3:06:3d:d9:fa:fe:6f:e7:5e:c3:de:5b:
         17:70:ad:30:5d:51:87:65:15:bd:af:ba:84:cc:d5:62:bf:e5:
         6a:ae:7e:26:f9:17:da:4a:ee:d6:5e:f8:f9:df:e6:a7:77:1d:
         42:b2:50:86:08:60:48:b2:92:01:c8:79:a3:ff:ae:1f:ff:28:
         31:f7:bc:1c:0c:d9:cb:d6:ae:7c:95:10:a2:8d:d3:55:dc:66:
         a7:8f:2d:83:b3:03:af:98:44:6f:19:00:f2:e2:85:0b:d4:f9:
         38:c1:a7:98:f6:44:46:70:3f:34:d6:a9:2e:0e:7f:2f:cd:85:
         13:b5:24:93:41:c0:b2:21:fa:d4:25:4b:eb:61:af:eb:68:20:
         01:e3:fd:61:28:c4:38:59:51:e3:78:09:0b:44:ea:15:de:5d:
         19:39:83:6e:32:26:cd:7f:a6:a5:f7:5a:cf:3d:bf:55:67:9f:
         7d:aa:41:1a:90:de:e9:2e:6a:a2:c8:4d:e0:bb:fa:fd:19:a2:
         66:72:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:02:52 2025 by rpki-client