Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6c2ef43-5891-3764-85be-61bd2e2deb55.roa
File:                     c6c2ef43-5891-3764-85be-61bd2e2deb55.roa (raw, json)
Hash identifier:          cPh0+ZvwYTs/pgdxckAoPnUJGkLIzDduuxyg6mQdXnQ=
Subject key identifier:   54:E3:21:FD:6D:EF:D2:63:39:8B:51:59:95:8A:AA:E4:A7:02:7B:E5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161AA88AF38AC14EB24AE40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6c2ef43-5891-3764-85be-61bd2e2deb55.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        24.165.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:aa:88:af:38:ac:14:eb:24:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d454da7e-3514-4fce-be22-456eef44558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:a2:23:9e:b9:66:08:3e:cf:9e:9b:b4:14:
                    92:6e:d7:77:3a:5f:02:b1:45:35:52:9a:cd:9e:a2:
                    5a:8f:af:0a:07:59:83:40:a2:db:26:e4:3b:42:68:
                    e0:08:54:50:98:aa:9a:14:2d:c2:d7:2e:14:29:a0:
                    40:cf:1d:01:57:5e:aa:0a:96:b4:59:0c:35:e8:27:
                    ea:e4:22:66:a6:c6:3b:09:ab:50:9f:7c:90:0e:43:
                    cc:52:ef:ca:27:03:b1:a3:16:6f:a7:b5:46:c3:86:
                    39:05:50:53:8c:e0:f8:20:8a:87:5b:eb:c2:7e:1a:
                    f9:30:04:32:3d:de:4a:b1:17:8a:3b:a7:a7:a5:2d:
                    dd:d5:4a:c8:e4:4a:c4:5c:92:6c:67:ac:54:42:75:
                    ef:5f:b2:e3:12:4f:66:1b:3a:6c:e3:4d:64:b1:a4:
                    52:9e:c5:3e:2f:f7:d0:71:b5:35:27:ab:a1:53:9d:
                    47:b5:0c:83:59:80:4c:2b:6c:52:f1:0d:99:c9:0e:
                    b1:ec:3d:cf:04:23:84:c2:e3:00:32:2e:12:df:c1:
                    66:c6:fa:be:37:6c:41:d8:2d:f4:4d:50:34:18:ea:
                    d3:a5:f3:8b:59:e1:44:aa:f2:6c:a4:a3:1e:50:42:
                    ea:95:95:cb:e8:dc:5c:f3:a9:1c:63:cb:39:13:b1:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E3:21:FD:6D:EF:D2:63:39:8B:51:59:95:8A:AA:E4:A7:02:7B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c6c2ef43-5891-3764-85be-61bd2e2deb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.165.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:46:1f:b5:3a:06:ea:e2:37:e3:14:33:96:00:b2:a9:7d:a9:
         e7:fd:4a:b7:b4:15:1e:25:ee:62:85:d0:28:ac:11:1a:c7:56:
         7b:95:fd:06:f6:cf:10:c6:81:84:04:f4:59:92:12:cd:63:37:
         40:68:96:a5:64:6d:43:ba:12:69:07:7a:9a:64:e1:98:97:22:
         d7:36:44:39:21:ad:fc:15:11:16:e2:c9:82:c4:1f:ed:62:e3:
         cb:9e:19:d8:c1:70:04:0d:35:8c:c8:a6:e7:e5:59:85:29:f1:
         ab:63:c3:12:99:19:e9:a3:77:d2:09:66:9e:d8:20:63:f1:9a:
         dd:ca:5b:1f:db:96:09:80:f2:c4:97:07:43:68:f5:cd:af:25:
         59:a5:fd:6b:d6:83:2b:6f:f0:0b:c4:07:86:64:f5:9d:6a:1f:
         95:d3:93:08:d4:fc:8f:54:61:bb:9a:fd:a2:21:b7:c4:88:f4:
         14:04:ea:c4:34:d6:de:fb:06:89:b4:0e:94:7b:0d:50:1e:06:
         f2:32:8f:d8:2a:9c:27:94:ef:e7:a4:29:91:eb:9f:83:2f:bb:
         5a:bc:59:b7:5a:46:25:bb:2f:90:52:40:37:a2:fd:41:34:00:
         7a:64:bf:57:df:08:3b:83:1d:43:8c:e0:72:34:fe:ec:9f:41:
         f2:f7:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:56:21 2025 by rpki-client