Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/caa97b4f-408d-31ea-800f-9d751cb62ffb.roa
File:                     caa97b4f-408d-31ea-800f-9d751cb62ffb.roa (raw, json)
Hash identifier:          hGriczOQ+Lr+XHtrQPOPgPluubvvCvltAO5qiZqvgVo=
Subject key identifier:   6C:B6:C7:8A:4F:9A:7C:41:9C:B3:6F:4B:0F:23:92:76:1D:E2:BA:6E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160FFAC351815667398A400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/caa97b4f-408d-31ea-800f-9d751cb62ffb.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11351
IP address blocks:        72.43.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:ff:ac:35:18:15:66:73:98:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=fb365a7a-82e8-41d0-9458-b6533c1ce545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:36:6d:7d:9f:3f:52:9f:d0:58:6d:12:c4:
                    5c:d3:02:b5:12:cc:7a:f5:e5:24:c3:4f:9b:7d:86:
                    34:d6:54:37:bd:60:6b:37:05:18:0e:35:38:28:2d:
                    59:f4:39:f4:60:92:66:57:38:2a:ce:74:97:92:0a:
                    2e:c7:af:be:82:d5:3b:d0:92:af:f8:1d:47:68:2c:
                    22:8d:b8:58:2a:3b:d1:99:25:1f:63:10:3f:f5:4a:
                    87:a4:71:3e:91:a1:0e:91:13:41:d9:fd:bd:01:14:
                    cf:f5:7b:25:e9:c4:38:8d:80:f3:75:9e:d3:51:f3:
                    ac:29:aa:bc:81:c6:29:95:aa:09:06:07:1a:15:e7:
                    c0:74:c0:62:69:af:32:5b:53:1c:38:8c:d6:8f:a2:
                    95:85:aa:4d:4f:55:3f:cc:da:b6:69:ae:4c:39:a2:
                    e1:c4:94:df:01:56:84:62:b9:11:f5:32:2e:79:0d:
                    24:ef:cf:74:a8:e5:6f:3f:d6:7a:b3:96:44:73:9e:
                    05:84:a1:5d:ca:c0:e9:d7:45:60:14:25:0d:bc:43:
                    05:0e:ef:e0:b3:c4:99:5b:a9:a5:80:af:65:4c:6f:
                    6a:ab:95:bc:00:cd:77:81:ca:7e:f7:eb:9c:0d:37:
                    91:23:af:5c:03:ff:61:8c:f2:62:7b:92:93:7e:e0:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B6:C7:8A:4F:9A:7C:41:9C:B3:6F:4B:0F:23:92:76:1D:E2:BA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/caa97b4f-408d-31ea-800f-9d751cb62ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.43.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:74:f0:ba:2f:ba:ec:ae:1e:eb:ec:d6:9c:73:d2:87:88:
         b0:27:3e:67:b7:d7:68:2e:43:15:b3:9e:12:93:a1:53:e3:87:
         67:e7:fc:b3:68:1e:d8:45:78:d1:b5:af:00:a9:84:f1:a2:c7:
         8f:22:79:f3:e4:fc:a0:d6:36:c0:cd:cd:26:e7:92:8b:97:e0:
         8d:91:10:58:64:a5:77:7c:3c:d5:50:8b:55:65:8b:f7:d4:31:
         80:4c:6a:18:46:e4:35:a2:e9:60:25:75:d7:ba:d4:49:33:88:
         2f:c3:64:95:0e:7f:1d:a0:22:84:31:ac:03:e7:79:d5:9c:4a:
         02:b3:00:86:7a:ee:5a:3b:ea:b5:0a:58:1a:2a:9b:5b:42:f1:
         bb:63:fc:9b:89:ea:29:70:f5:b5:36:2f:ed:d1:bc:29:98:ca:
         83:24:04:bf:c1:37:dd:99:9e:d8:e6:6b:a2:7a:16:43:e0:a9:
         ae:40:f0:bd:3e:01:51:58:b2:75:24:5b:8c:24:c5:76:48:d5:
         1f:09:69:e3:d9:79:15:d9:84:03:49:56:af:1a:09:68:62:c0:
         87:bc:8a:53:67:c5:22:37:7e:9b:2f:a1:7e:e8:12:6b:c8:94:
         59:e2:88:d2:a2:7f:d3:4d:dd:60:29:2a:ab:31:71:17:0e:26:
         9c:31:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:37 2025 by rpki-client