Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c3aae3a-8a4b-3f3e-be90-9266a7ee4210.roa
File:                     9c3aae3a-8a4b-3f3e-be90-9266a7ee4210.roa (raw, json)
Hash identifier:          LfY8GiI7VASBUJje32+3gvF9/uu3hwzJVEj0ZpspWf8=
Subject key identifier:   72:4E:A8:FB:F2:CA:30:7B:EC:52:53:89:C1:BC:45:85:05:AE:BB:50
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1618E9D1C126A17B29D5100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c3aae3a-8a4b-3f3e-be90-9266a7ee4210.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        24.123.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:8e:9d:1c:12:6a:17:b2:9d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=55155dd8-a3ea-41c3-88af-d1b7b15380d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:59:53:e4:56:5f:eb:a9:7d:e6:57:ab:16:
                    90:20:46:20:d9:6c:bf:c1:ee:4b:e2:41:ce:e9:8f:
                    8e:cd:16:0a:e1:48:ee:2f:6d:dd:9d:ec:de:ae:a4:
                    0a:4f:fd:a3:df:de:2b:60:b7:df:73:97:5c:7e:13:
                    74:dd:cb:55:1b:27:2e:43:1c:fc:65:7d:cd:25:d8:
                    90:ea:ca:2f:b6:59:9b:e9:a6:4c:52:2f:2a:08:5a:
                    47:36:64:65:a5:8a:a8:5e:a8:96:8c:1e:73:e6:fc:
                    b3:05:11:99:c7:95:36:4b:41:f7:e3:eb:28:1e:f0:
                    23:d3:00:dd:eb:72:c3:f7:a9:de:48:90:ad:af:fa:
                    cc:1d:cf:58:3b:42:c7:6e:b8:9b:e3:fe:c4:b9:bd:
                    e1:f1:e3:c5:53:31:f9:f7:4a:75:70:fa:46:56:cc:
                    80:29:98:b5:55:4d:42:af:80:6c:4a:48:53:7c:12:
                    37:c9:d9:4e:13:a0:7c:f9:f5:df:27:30:c1:51:3d:
                    6e:3a:b4:e2:5a:e1:3f:be:39:11:30:6d:b4:3e:0f:
                    b4:8e:c9:59:a4:b1:75:f4:d2:3b:a1:d7:78:38:cd:
                    c1:30:d8:ad:d8:b6:b9:cc:8b:1b:da:2c:3c:1c:dc:
                    95:82:be:ec:6e:82:6d:ef:f3:c1:ab:f2:2e:88:79:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4E:A8:FB:F2:CA:30:7B:EC:52:53:89:C1:BC:45:85:05:AE:BB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9c3aae3a-8a4b-3f3e-be90-9266a7ee4210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:43:ce:1c:8c:a8:be:3d:b2:b8:4a:ed:24:1c:41:be:89:
         35:ab:39:ba:17:02:9e:4a:75:eb:8f:15:fe:08:4e:c9:ce:d2:
         00:e5:91:b3:9e:ea:dd:a8:be:7e:c5:87:7b:67:e3:a9:dd:c5:
         be:53:12:fe:77:9d:94:78:15:6a:63:d0:61:bb:da:df:b4:32:
         4f:9a:90:a3:34:76:ee:c5:1a:1b:94:04:4e:a9:1f:79:7e:5b:
         3f:f1:63:23:74:86:3d:4e:e5:0e:27:7d:e3:12:32:84:dc:b5:
         2e:81:48:8b:c8:6a:60:35:bd:d8:d5:0b:e0:34:89:83:56:8c:
         73:1a:d4:9a:01:ba:2f:c7:f0:65:ac:4c:0c:4e:fa:5c:5d:89:
         7c:28:d0:2f:e5:40:24:e5:c8:31:32:6c:b3:63:a4:03:53:e8:
         1b:f5:b6:66:ca:8b:ab:b3:75:e3:e5:56:16:83:bd:32:f1:12:
         43:34:59:e4:c0:b3:da:8e:c6:07:74:a3:48:a7:a2:0f:21:48:
         78:83:70:8c:1b:f5:ae:a6:5b:e8:3d:fa:5d:ca:e0:31:ec:9c:
         2d:12:af:86:9b:23:43:26:8f:75:0b:0d:0b:50:40:36:d1:74:
         69:00:ad:25:23:d2:13:e2:00:92:2f:58:d8:8e:ee:6f:66:9a:
         f3:03:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:23 2025 by rpki-client