Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f6d53240-d63a-3fea-8437-30c57e70f742.roa
File:                     f6d53240-d63a-3fea-8437-30c57e70f742.roa (raw, json)
Hash identifier:          3xnW8i9BAcYC3EfWEF6lIiDQMe8Fpu7x8sobI5+nqSs=
Subject key identifier:   83:50:76:F2:28:5B:9F:8A:51:72:10:13:41:A9:E3:75:C5:49:E1:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1611759F999113294896A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f6d53240-d63a-3fea-8437-30c57e70f742.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        173.198.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:17:59:f9:99:11:32:94:89:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=40280c90-ccde-4ca1-a56f-61054624b646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:91:a1:4d:dc:29:e8:aa:7e:75:6f:a7:67:
                    43:ba:6e:47:d6:44:fe:d5:46:00:1f:81:2d:35:56:
                    35:2f:64:77:57:21:f5:33:ed:bc:c9:76:02:bb:c7:
                    53:d4:16:ed:46:51:03:d2:01:5d:05:aa:71:91:0f:
                    e5:bd:25:0a:4b:45:7a:88:93:c1:0f:bc:ce:8b:4b:
                    ed:01:67:ae:7f:5d:08:1c:57:39:88:d3:b5:1a:cc:
                    e9:c3:3c:5c:c0:2b:b7:06:4e:d4:69:51:e2:a2:23:
                    83:29:47:79:1d:39:f1:fe:da:be:83:29:e7:8d:27:
                    96:99:ef:7b:d9:87:b2:7c:cf:c0:8c:6a:da:a2:28:
                    99:08:f9:d6:06:af:c4:83:81:1b:57:70:56:18:10:
                    b5:eb:b5:5d:84:1e:cb:a6:5e:fe:b9:46:3c:9b:eb:
                    69:3f:91:2b:87:7b:01:06:b1:4b:fc:75:87:68:84:
                    ff:58:8b:d7:b3:12:0e:d8:00:cb:03:e7:47:96:d5:
                    f0:1f:89:2c:22:eb:51:ff:41:42:2e:3c:39:84:23:
                    64:70:6d:8f:67:37:96:dc:fa:3f:4f:81:86:37:ab:
                    30:31:79:c4:a3:ea:6f:48:1a:40:79:9f:5a:9e:0c:
                    c1:41:c2:64:73:c1:10:c1:f6:cb:b0:f3:b0:65:98:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:50:76:F2:28:5B:9F:8A:51:72:10:13:41:A9:E3:75:C5:49:E1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f6d53240-d63a-3fea-8437-30c57e70f742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:73:5d:64:e7:ce:ee:cc:f8:e4:35:61:7b:48:55:98:4f:03:
         96:37:68:66:25:c4:e2:c6:72:2b:52:39:24:08:de:14:7d:29:
         99:e2:c9:dc:92:7b:1f:a0:87:19:72:af:c0:42:bb:06:82:87:
         1b:52:e7:29:a4:bb:2e:23:ad:16:43:02:cd:cf:14:07:70:68:
         28:29:62:02:05:dd:12:2a:6e:ff:22:cf:7d:51:2d:d5:79:c6:
         91:7e:c3:7c:2e:8f:ee:c3:93:d1:c1:03:0f:2f:a6:3f:39:0d:
         cd:ef:ba:8a:52:d4:93:14:bf:15:95:d4:f9:08:c7:22:0d:23:
         1b:fb:3f:10:8f:b7:e6:95:6a:43:3a:81:c7:ff:c5:33:df:32:
         d8:f9:5c:94:65:97:13:06:e3:5a:91:fb:34:20:aa:73:69:0c:
         fa:df:99:31:46:4b:58:0d:f0:75:5f:8f:3b:03:42:fe:d1:18:
         4d:6a:f0:2f:60:31:99:9e:8b:80:5c:5f:42:85:c8:5b:ec:cb:
         84:ee:bd:8e:cf:54:f1:bf:3f:47:89:54:62:6e:e3:61:34:3c:
         5a:87:fa:e1:07:34:f8:eb:01:42:92:02:94:4f:8a:69:7a:8d:
         89:36:2c:28:e7:8e:8a:75:e5:b2:04:33:d0:cf:e9:62:a6:0d:
         11:7b:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:01:39 2025 by rpki-client