Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
File:                     ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa (raw, json)
Hash identifier:          UlvUs5OD7d0VOHjvypNTVU4+8aCHbUeAfSWagzXHMPw=
Subject key identifier:   6E:22:C5:28:87:0F:19:6B:24:D2:43:46:86:40:00:71:94:3C:AF:75
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1611EB53A99DC7E503E8180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        68.207.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:1e:b5:3a:99:dc:7e:50:3e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=a48f5240-2392-4166-88a4-d8e580451098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:1d:db:52:12:7f:cc:3a:d9:9c:d7:f4:40:
                    93:a3:6c:d0:a4:c4:4a:bd:6f:27:a5:30:44:7f:61:
                    1c:5b:c2:cd:f8:7e:da:6f:93:1d:23:92:90:06:e2:
                    61:31:4d:ad:5b:75:4c:ea:b0:62:44:e4:df:90:49:
                    4b:4d:de:eb:7b:b1:2b:54:ec:a2:59:a0:70:d3:2d:
                    fd:29:f4:59:e0:cd:db:30:72:5e:fe:f8:da:32:e5:
                    20:54:38:6a:f7:2d:1c:d8:e2:94:51:ed:c3:e2:61:
                    ee:09:19:f8:cc:66:d6:7c:0c:63:2d:c9:87:19:17:
                    5c:d1:a5:50:f3:6b:4d:a8:30:ca:70:bc:a7:fb:35:
                    36:39:cd:e9:45:a1:dc:af:fb:5a:e5:5d:16:88:93:
                    7d:b2:49:c8:4a:a5:c7:a5:cc:8b:b6:90:ea:e0:89:
                    70:97:14:57:52:e0:4b:cb:aa:4e:b8:48:be:a4:a2:
                    6b:da:5c:6f:c9:ff:a1:79:a9:45:c8:9a:2a:3f:a1:
                    ba:64:e0:a8:f4:47:dd:95:b9:34:0f:e5:e4:6d:0f:
                    a7:e0:f9:b2:e2:02:5e:ab:dc:1d:7c:02:72:ce:71:
                    0e:94:1f:46:57:c0:d1:74:98:6f:55:07:d7:c1:de:
                    23:e1:fd:5c:34:8d:94:7a:68:38:2d:c8:ba:2c:48:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:C5:28:87:0F:19:6B:24:D2:43:46:86:40:00:71:94:3C:AF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:77:f0:04:c4:72:10:1c:7f:3b:7d:b0:a9:f6:62:fa:f5:24:
         28:a0:9c:90:29:db:cb:7a:2f:49:16:50:1e:e8:21:ee:5c:60:
         c4:3d:22:2b:5e:87:6e:57:8d:ce:ff:c9:44:af:34:65:ca:e3:
         51:d2:1e:03:7a:86:37:79:72:9f:65:8b:33:ed:38:8f:9f:34:
         2f:1b:0f:9c:e6:7e:8c:e4:22:19:5c:15:89:f8:d2:21:e9:d3:
         90:0c:3d:47:fa:61:d1:7a:5a:9a:07:69:3b:97:6c:81:f7:39:
         c4:97:9a:6a:40:e3:04:5c:88:16:d7:ae:46:23:74:28:5d:9b:
         bb:a8:95:85:28:df:38:46:c9:06:5c:3f:8c:2c:9e:b7:f1:1f:
         c7:be:7a:41:27:56:3e:2f:0b:5a:1e:3d:c8:43:e2:fb:85:1d:
         b8:b3:e5:69:73:98:f4:18:0e:a4:2d:e5:a3:24:2d:e6:fd:82:
         38:f2:bf:80:6f:20:4d:3e:27:94:ba:9a:67:99:2f:ae:05:43:
         f3:dd:f2:1e:16:99:f9:4e:9b:d1:dc:db:ef:6d:4f:03:8b:68:
         b6:51:a0:56:4a:a1:77:32:22:fa:34:d3:fc:a5:d7:f9:6c:0a:
         1d:67:5c:11:8d:13:6b:ca:f0:73:3b:48:65:c4:95:79:97:16:
         3d:0f:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:09:01 2025 by rpki-client