Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42de8e99-dbd6-30bd-9cc2-364139e27dab.roa
File:                     42de8e99-dbd6-30bd-9cc2-364139e27dab.roa (raw, json)
Hash identifier:          GLyqIcK+ip9VTId5cXjs7xSmkTVG1jV+muVtn41CKeg=
Subject key identifier:   6E:1C:D6:DA:AB:3F:33:D3:D1:1B:DC:A5:70:D3:95:0E:D3:C9:3F:C1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618985E1D710937B8ECE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42de8e99-dbd6-30bd-9cc2-364139e27dab.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        24.29.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:89:85:e1:d7:10:93:7b:8e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a6e6fcf4-698a-4003-abe5-81dea43baa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:2d:c5:05:94:62:08:a3:27:65:cf:9f:81:
                    26:e3:c6:a4:46:1b:a3:71:ea:d3:e9:a4:f7:c8:9c:
                    86:56:f5:80:cb:6d:c8:00:ba:33:4d:a2:f4:bf:83:
                    26:5f:7b:0c:c2:43:24:76:ed:5c:2b:58:09:5c:03:
                    cf:3f:51:73:7f:1c:8f:32:3d:8b:17:4c:cc:f6:44:
                    de:9f:36:c4:eb:b7:a2:eb:28:c6:bb:0c:05:0f:aa:
                    a8:3f:de:3c:86:e8:1c:d4:22:7c:a2:d5:19:66:7b:
                    3d:2d:39:dc:87:db:d9:c8:aa:d1:76:14:35:ca:08:
                    22:3e:e9:49:46:eb:d0:2b:a9:e1:07:76:5f:59:25:
                    63:b7:ec:52:01:05:49:f5:71:50:e8:b3:cd:14:e3:
                    ab:c1:22:04:81:21:13:1e:45:d4:e2:62:c6:e5:3d:
                    fd:a5:78:5f:93:25:17:2b:c0:78:db:53:37:fe:09:
                    b1:45:47:c6:3e:e1:60:71:f1:4d:86:eb:56:70:18:
                    6d:4f:99:e5:9a:d3:80:46:db:72:d1:c9:0e:1c:bb:
                    e7:1a:02:bf:10:a2:06:e1:e1:fb:70:97:a8:dc:d1:
                    13:6d:8c:8f:9c:90:d1:4f:20:10:fd:94:84:7d:f3:
                    88:c5:c8:b8:1b:6e:34:8c:21:a8:bd:b5:b1:7a:83:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1C:D6:DA:AB:3F:33:D3:D1:1B:DC:A5:70:D3:95:0E:D3:C9:3F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42de8e99-dbd6-30bd-9cc2-364139e27dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.29.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:10:4b:3a:06:2f:8e:82:87:f4:0a:c0:3c:3f:f5:8a:8c:8d:
         07:cc:a8:f8:f0:94:8a:d2:f2:e3:f6:2a:30:57:60:08:f1:4c:
         71:00:c5:1d:98:fd:f3:3c:47:5f:7d:38:cd:63:f8:25:f9:af:
         57:85:3b:18:0f:0d:ee:c7:e1:92:a9:24:b1:fa:ba:62:f8:e6:
         ac:ec:d2:8f:c1:3a:70:51:7a:51:ba:5e:35:7a:98:5d:bb:eb:
         11:c9:06:c3:f8:bf:71:be:3c:97:22:01:31:d3:a4:f1:8a:5a:
         4a:83:74:77:b2:c9:f3:1b:08:46:99:a6:da:c9:96:a5:92:2e:
         8d:98:3e:e7:b5:5c:3e:37:24:31:b2:12:fb:33:d8:32:4c:e4:
         bb:ad:67:fc:45:0c:f9:e4:bf:a0:b4:31:72:2d:18:88:14:6d:
         d2:cb:e1:97:c1:29:79:93:78:85:ea:4e:3e:14:6a:a0:67:45:
         ae:65:d0:44:21:00:ab:10:f4:21:d7:d0:f8:de:69:04:bc:e5:
         77:fb:ff:8b:84:2e:e9:23:ed:38:f0:48:6c:35:70:89:b8:b1:
         52:85:b3:d8:eb:64:ff:28:aa:05:89:8b:e4:b9:11:22:06:5d:
         40:20:81:28:40:fd:6f:f8:d2:c7:d0:5b:e5:5f:26:24:ea:b0:
         47:e4:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:05 2025 by rpki-client