Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b72954d-008f-345b-a262-c31c4d9d71b1.roa
File:                     8b72954d-008f-345b-a262-c31c4d9d71b1.roa (raw, json)
Hash identifier:          zXzFf/Ev7E57305vbrRvD6xz0/4bklh9vlN3cCUBDD4=
Subject key identifier:   C9:07:C6:31:6E:DD:C2:1C:BA:5A:0C:C7:60:4C:A1:CB:14:1A:7F:BA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16199564810537956A55100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b72954d-008f-345b-a262-c31c4d9d71b1.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11426
IP address blocks:        24.211.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:99:56:48:10:53:79:56:a5:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e99c443e-d115-4b95-a72e-cea9a75ba7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:31:e4:d5:02:8f:d2:c2:29:e8:17:d2:b1:
                    09:05:84:79:84:b1:d9:dc:bf:34:65:86:39:0b:d1:
                    1b:e2:48:1d:d3:a2:fc:90:dc:ca:4f:b5:4b:92:9a:
                    e4:da:3f:49:f2:8c:41:10:53:df:be:fd:34:99:70:
                    e7:6c:67:0f:8c:6b:53:73:fd:c4:d6:56:85:63:99:
                    60:e5:91:c4:ae:84:a5:27:75:91:62:a1:ca:e6:b1:
                    2f:75:51:e6:50:03:bb:7c:79:c6:bb:bc:ab:37:d4:
                    19:e3:df:6e:5d:69:e0:e9:63:90:61:56:c7:e4:70:
                    c2:12:ed:24:3f:5d:ad:91:3b:c6:aa:10:ae:1a:d0:
                    d0:43:1d:5b:9b:46:f3:c8:89:3d:98:de:b4:e6:27:
                    5f:25:b4:da:a6:ac:79:97:58:25:ad:63:46:69:43:
                    a7:1c:69:64:c1:e5:3c:46:ab:64:cf:a8:80:93:71:
                    a9:8b:ba:fc:02:48:69:76:b8:bf:84:a4:e8:08:e4:
                    bf:a7:6a:83:fd:56:14:69:d2:3d:6b:c6:db:cb:ad:
                    50:98:c5:a5:84:89:b5:2b:d1:2d:1b:b9:40:5e:26:
                    f2:60:7e:72:eb:5e:71:c5:3f:6c:31:01:b6:8c:d8:
                    4c:f5:81:0b:20:e6:60:f1:e2:a3:4a:ce:e0:18:92:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:C6:31:6E:DD:C2:1C:BA:5A:0C:C7:60:4C:A1:CB:14:1A:7F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8b72954d-008f-345b-a262-c31c4d9d71b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.211.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:28:e5:04:6e:45:0a:06:5c:20:5a:28:1c:d4:d6:c2:8d:7a:
         b1:c7:ae:9f:66:29:85:e8:9b:0f:91:3e:73:ef:bf:4b:ee:54:
         a3:a2:d0:b5:d4:a1:11:01:bf:3a:b5:2d:0f:3d:57:ab:f7:ca:
         08:bf:89:7e:2c:25:e4:04:35:e4:e2:9a:fc:d1:80:c5:b4:65:
         36:61:11:e7:58:31:22:98:83:db:29:3a:3e:55:19:0c:9e:e5:
         85:b7:44:56:eb:f3:f2:aa:a0:17:52:0d:2f:11:da:18:14:b3:
         ad:c9:02:10:4b:ef:23:57:89:72:eb:57:6c:d2:02:dd:d3:83:
         43:f2:4a:a8:81:74:1e:25:04:20:9a:52:d4:7d:0c:ee:37:9b:
         7c:e7:2c:c4:1d:18:67:44:34:eb:5b:8e:42:90:0b:b6:bd:9a:
         dc:d4:80:27:99:cd:6c:8d:53:f7:3f:8e:02:d3:e7:1e:a3:1c:
         1b:15:4c:b1:06:9b:0f:5f:14:ab:c8:f5:f1:ef:0b:6f:2c:fe:
         16:d4:a8:cd:9a:37:45:ee:48:43:09:0b:5a:8c:29:cb:16:67:
         5d:81:78:47:5c:19:05:ff:1b:4a:15:2d:30:d5:0b:53:4c:d2:
         6e:d4:7c:9a:67:e2:34:1a:f3:f9:ab:d1:f9:81:3a:56:25:cc:
         3c:dc:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:38 2025 by rpki-client