Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/335ce4d7-0a1a-3f3d-887c-490c3e882093.roa
File:                     335ce4d7-0a1a-3f3d-887c-490c3e882093.roa (raw, json)
Hash identifier:          eoBt4bKc24o0srVlS5VyX/vmY6RgxtueRDXRuDQe/Wo=
Subject key identifier:   B9:5F:81:CF:6F:63:25:32:19:70:D4:57:A8:74:DB:44:4A:05:FE:CE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619D43E7D60B18B9B8A500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/335ce4d7-0a1a-3f3d-887c-490c3e882093.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11427
IP address blocks:        108.167.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:9d:43:e7:d6:0b:18:b9:b8:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0a5eba8b-f2b0-4c5c-b56a-23c80b99ad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:aa:09:36:d7:e5:de:17:74:15:b3:98:dc:
                    b2:c6:b8:db:22:57:78:6d:fd:8a:37:36:58:ad:b4:
                    e9:34:83:68:0d:0d:11:0d:62:3d:69:1b:8d:c8:8b:
                    c1:20:25:a7:0c:fc:75:53:9f:78:05:c5:be:4a:70:
                    6a:32:ae:9d:36:d2:80:d1:37:21:97:2a:01:39:19:
                    bd:45:24:7b:0e:3b:2d:db:b6:9a:98:53:c4:08:0f:
                    ac:2f:ab:f4:22:3d:ef:c1:51:d5:8f:39:f3:7e:96:
                    0c:e6:a9:c0:e5:cf:82:9c:4e:24:42:b7:7b:30:19:
                    69:15:97:4e:9f:ef:8b:26:98:fe:f0:6e:84:0a:36:
                    19:08:b1:fd:c7:3a:42:c4:19:03:37:0c:7b:93:c7:
                    68:d5:37:08:88:b8:48:35:75:b0:4d:37:78:ed:fe:
                    7a:99:8d:a5:a5:2c:89:30:ae:4e:4d:41:74:d0:6e:
                    69:ef:eb:cc:14:43:a3:cd:06:3f:63:6c:88:1e:78:
                    1c:dd:ba:d0:59:5d:46:76:5f:95:da:46:a8:9e:ec:
                    7d:6f:5d:f3:76:03:3b:57:a5:b4:90:08:e8:a2:65:
                    e6:ed:c5:d9:03:49:f6:2d:81:11:9e:9b:12:fb:49:
                    08:ff:b6:cb:96:1e:dd:6d:5d:e1:b0:92:06:00:91:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:81:CF:6F:63:25:32:19:70:D4:57:A8:74:DB:44:4A:05:FE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/335ce4d7-0a1a-3f3d-887c-490c3e882093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.167.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:34:1a:00:02:57:7a:72:9c:c7:e9:4b:fc:87:e8:61:90:
         e4:58:92:cf:b3:17:ce:5d:ba:d2:18:b3:80:12:9f:77:85:69:
         ad:e1:3c:e9:b8:81:e3:ae:25:63:9e:99:c2:4a:53:d2:78:aa:
         c9:d9:9b:38:99:3f:78:33:d7:d3:e0:09:1b:0c:a8:33:cc:20:
         ab:1e:63:b9:18:6c:4b:3a:b6:e6:a6:b9:7c:a4:5e:ac:93:0e:
         f5:44:9a:80:69:1d:57:20:39:0b:3b:92:02:02:8d:df:5a:9e:
         0a:a0:51:dd:60:d5:14:f3:f4:c7:d6:e3:dd:53:07:46:27:d5:
         26:3a:ab:2a:8c:d9:5c:86:55:ff:93:9e:aa:93:ed:9b:b7:a2:
         ee:74:70:0e:cc:27:f0:2c:99:ff:ad:20:fb:b0:81:6c:f3:04:
         4d:de:09:02:69:a2:15:27:39:2d:0e:49:08:d6:50:f2:d8:4b:
         51:79:6d:ff:6e:87:62:24:bb:4b:53:57:46:d2:1e:32:ae:b4:
         06:27:33:26:53:d2:37:71:07:c2:4c:80:86:19:c1:c4:98:f6:
         7a:8e:1d:a3:a1:8c:3e:aa:9f:5c:1c:12:41:64:3d:b2:6d:4f:
         80:80:e1:05:88:66:ec:a6:d3:4d:87:50:d4:3c:0d:23:1f:d2:
         fb:7e:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:47 2025 by rpki-client