Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5331321e-0031-34f3-807d-270ba6ebb01a.roa
File:                     5331321e-0031-34f3-807d-270ba6ebb01a.roa (raw, json)
Hash identifier:          SpwmtDOtZKc/YxyNBvm6VKQM0QHD7tRL/0GV/b+7LCc=
Subject key identifier:   4B:9F:2E:18:75:CC:6F:64:5F:E1:F5:02:E9:14:CF:81:9C:0C:62:55
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618102134717C74292FC20
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5331321e-0031-34f3-807d-270ba6ebb01a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        24.33.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:81:02:13:47:17:c7:42:92:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e2bbefb5-b745-456c-883b-bf8a61ebfdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:9b:e4:9f:22:f9:dc:19:aa:4f:11:cc:b0:
                    cc:26:f7:95:5e:81:ed:05:7f:d1:6b:37:44:66:81:
                    31:84:bf:61:de:24:bd:66:dd:23:d5:a4:f0:bd:54:
                    bf:d3:19:0f:be:55:9f:79:3a:37:4c:df:15:51:8e:
                    72:04:f8:5f:2f:25:01:79:ca:59:50:e6:a7:c3:19:
                    52:95:d5:8d:82:8e:1c:20:64:af:bf:b4:4f:fd:c2:
                    d6:f1:97:ba:e4:fd:9c:cb:da:12:31:aa:0a:3f:b1:
                    63:32:e9:97:db:02:03:a9:35:1c:a3:90:2d:b5:4b:
                    f2:a0:b2:69:d4:34:42:75:b5:f3:30:31:dd:05:82:
                    29:88:15:77:5e:e8:c7:38:19:3f:4d:23:34:a5:ba:
                    82:40:89:82:f7:dc:b6:e1:db:67:6f:15:05:aa:4b:
                    0f:41:57:1b:59:c1:42:36:41:9f:7e:e6:70:5c:81:
                    f7:40:06:75:13:78:56:b7:b6:00:7e:4b:4d:6a:bb:
                    65:15:05:ca:15:58:87:aa:b7:91:64:5e:41:a1:6c:
                    3f:e9:d3:12:e5:b9:38:b9:56:d8:41:7d:ed:e2:4e:
                    56:6d:15:99:bc:9a:80:62:bd:48:9f:4c:be:6e:ae:
                    55:b6:0a:04:00:6a:ff:52:8d:19:e3:3e:e2:f1:0a:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9F:2E:18:75:CC:6F:64:5F:E1:F5:02:E9:14:CF:81:9C:0C:62:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5331321e-0031-34f3-807d-270ba6ebb01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:e9:c0:ef:0f:ca:e0:f0:e1:bc:97:0c:91:44:9c:6c:30:
         da:05:db:87:a5:14:1c:b9:d1:67:6d:be:bb:ee:a0:21:c7:2d:
         28:b2:eb:96:d8:cf:d9:e3:11:b1:4f:10:aa:0c:c7:53:aa:0f:
         f3:9f:c7:d6:79:dc:bd:4e:42:6d:9a:65:b8:81:d0:e5:79:cc:
         6f:99:33:44:26:43:79:35:5b:63:b9:1b:8d:fd:a2:de:aa:a2:
         9f:f5:78:de:18:21:d4:89:6e:65:bf:a4:2d:b0:5a:93:69:e9:
         3b:d9:3d:fc:93:79:21:df:b4:ec:b9:c8:88:32:56:bf:9b:2b:
         b4:90:d8:90:c1:d2:2e:02:23:03:ba:ef:91:31:69:2d:1c:1b:
         a7:8a:30:4a:95:af:f9:ee:f1:af:e9:94:8d:04:7f:9c:44:7d:
         7e:ab:2c:3e:0d:57:5b:2f:2a:95:d5:e4:6e:95:62:a7:11:22:
         f5:3d:6d:2d:17:72:52:55:e3:02:7c:b4:6d:99:f1:8f:97:63:
         9e:01:c9:c9:2c:c6:47:8f:8f:0e:d0:6e:88:f5:c3:32:bb:23:
         d8:8c:51:3b:54:db:7a:f2:e3:74:c7:7f:40:60:f7:63:99:a9:
         f6:19:4a:14:5d:ac:45:d3:e6:08:7e:51:a5:5a:f8:d6:5f:6d:
         60:9c:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:09 2025 by rpki-client