Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa
File:                     e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa (raw, json)
Hash identifier:          KQsn/MZuCfH++6JYPOOIH11mKVMIfLrRqBFwx4Ny+wM=
Subject key identifier:   7B:87:38:E6:4A:56:57:19:15:DA:93:25:B2:DA:BE:39:ED:C6:F8:F6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B2CFC9D43EC01F451600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        24.94.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b2:cf:c9:d4:3e:c0:1f:45:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=1339f8bf-de77-4b39-a488-a7bd8c38a5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ce:0f:e7:1a:38:a8:35:af:2e:df:5c:88:dd:
                    0d:7e:f8:21:82:cb:e0:89:5c:f0:14:bd:18:13:1b:
                    01:15:ba:a5:79:e8:9f:e2:8c:16:00:63:9b:44:bc:
                    75:8b:7c:5d:ea:9d:5c:0e:43:12:f6:b0:12:48:06:
                    5b:a4:7d:78:41:11:74:b1:5b:f5:eb:11:b8:6d:87:
                    47:71:89:72:4a:f5:5c:a3:4c:3a:81:4e:fa:d2:42:
                    a7:38:fe:84:20:86:89:88:1d:ad:17:13:51:0a:07:
                    66:b4:d1:24:c5:df:50:56:37:43:9b:c1:69:46:21:
                    ca:bb:27:69:de:e7:e2:3d:9b:da:16:85:5a:4d:71:
                    b2:4e:ce:3e:4b:40:5e:31:bf:a1:88:ba:31:42:06:
                    ec:59:0a:17:f8:17:f6:8a:ba:00:5e:0d:a9:a6:42:
                    71:ab:6f:a0:07:5c:4b:c3:e8:90:0c:a9:b4:d0:82:
                    4f:9c:49:90:bf:09:8f:ec:6b:e3:31:fb:91:f8:4a:
                    cc:69:e3:00:c6:a2:57:60:cf:ad:57:08:aa:87:59:
                    f1:9b:29:31:57:13:8f:4c:62:2f:fd:20:b0:61:b6:
                    d5:45:d0:09:7d:6e:61:36:4f:70:08:15:be:1a:76:
                    30:fc:32:33:2f:31:6c:14:19:ea:70:2e:e7:94:3c:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:38:E6:4A:56:57:19:15:DA:93:25:B2:DA:BE:39:ED:C6:F8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:db:18:ae:d6:f8:b3:44:e1:53:8c:a3:2c:2c:a8:5b:17:31:
         18:db:68:02:da:22:e7:5f:f1:09:e5:34:0d:bd:ea:fe:32:7b:
         68:b7:32:32:c1:ce:91:d7:97:45:fa:c3:b1:46:30:b7:64:c3:
         9f:4e:76:e9:62:60:f7:b3:ca:11:bd:b8:10:65:65:8d:b2:6e:
         d5:83:cb:b6:ab:2d:b2:b5:60:ef:8f:4d:fd:16:a3:bc:25:18:
         0f:e2:39:c3:c6:fe:08:bb:56:92:bd:67:83:72:cf:2d:2b:c8:
         3d:9b:d8:04:89:5a:25:4d:7a:a3:58:dd:b5:b9:2d:21:28:86:
         14:50:c4:8d:25:46:d6:0a:49:a1:d7:3e:f6:e4:19:fa:9a:59:
         62:67:88:02:bf:23:f1:dd:13:8d:e7:da:2c:49:f7:d8:b6:59:
         2b:02:b4:d7:9c:2c:f2:ae:b8:87:d6:c7:3e:56:00:d8:0e:16:
         c9:a7:c6:da:c2:c1:81:5b:24:3d:3a:02:ef:79:6c:89:50:db:
         43:03:1e:29:16:2a:5b:1f:2b:0f:f5:37:f5:8c:93:21:df:dd:
         fb:30:f5:fe:2c:74:16:13:80:3d:c0:1f:18:35:5d:f1:e8:64:
         c5:10:6b:f4:fb:6f:3f:3c:d9:de:f3:68:39:47:7c:10:05:1a:
         36:e0:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:43 2025 by rpki-client