Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa
File:                     2a16a396-2c27-3987-8c67-8adede3e55eb.roa (raw, json)
Hash identifier:          TNcwv6l8gZk2BqAkU5hdWdt70Jj09opNM5wJxJdGdN4=
Subject key identifier:   20:AA:24:0D:7B:84:5C:DC:C1:73:0D:99:57:22:75:AA:DE:53:BF:E8
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584A374AD70936681557F5699C80
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     61317
IP address blocks:        64.113.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d7:09:36:68:15:57:f5:69:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=3d965fbf-f669-48db-b92b-8cdd0615a1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:58:5e:bb:8f:ac:b8:95:35:3d:8a:4c:81:
                    54:83:10:5f:ea:2e:2d:a9:23:20:d3:6b:56:7b:6b:
                    ee:d9:ca:10:17:0f:fa:14:2a:06:dd:fe:8f:b9:af:
                    ab:cf:6a:a2:9c:87:c1:77:bb:94:20:02:fc:50:e0:
                    33:f3:dc:e0:3e:e0:60:34:96:f5:86:8d:6f:0e:14:
                    81:40:fd:ff:9b:e9:6f:e9:4f:ca:48:f4:f4:30:66:
                    9f:be:3e:60:a9:5c:2b:ce:b8:73:9e:0f:16:b6:c3:
                    95:2d:59:6c:53:a1:ec:d7:f1:1e:bf:b8:a8:a0:0c:
                    7a:15:1a:e3:15:f4:78:97:38:54:fd:ca:f9:68:28:
                    f0:a9:3b:ed:36:06:24:c9:20:dc:21:32:1a:2d:c1:
                    12:7a:c0:88:82:ee:f8:b4:30:3f:19:f2:bf:b4:7a:
                    0a:d2:84:74:ef:4d:e8:72:92:13:b3:f9:95:53:ae:
                    c6:a8:50:d1:5f:0f:c7:f0:06:cc:1d:10:93:6e:9a:
                    7c:7e:37:c5:8a:17:47:8d:d1:8e:52:89:e9:3d:49:
                    a9:a3:a1:73:c7:77:7f:5d:9f:be:4f:b9:56:48:26:
                    53:eb:15:8d:57:61:08:eb:d3:13:94:cf:23:6d:80:
                    40:90:a3:e2:62:7e:ce:e0:aa:aa:97:8b:a5:e6:f8:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:24:0D:7B:84:5C:DC:C1:73:0D:99:57:22:75:AA:DE:53:BF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fb:66:39:44:70:a6:0a:3b:3e:52:82:b8:bc:c4:3e:65:9d:
         f3:3d:f0:63:7c:42:ca:61:06:cf:00:55:2e:2b:f8:62:a2:b8:
         62:82:3a:b6:bd:16:40:78:bf:b1:16:c5:d8:90:7a:b0:b7:4b:
         0d:e3:4e:b2:99:6c:43:9d:c5:cd:eb:88:bf:d2:1d:48:6b:e7:
         cd:da:e9:0e:b6:41:25:90:3a:5a:1c:00:23:3c:7a:ff:6c:98:
         3a:c5:0c:aa:3f:b0:74:cd:2c:69:8c:71:69:c6:9c:05:e9:e5:
         7d:4b:11:fd:33:a8:79:54:b4:3c:f8:7d:68:a5:f6:41:ef:e3:
         6b:8c:eb:6b:62:67:82:ea:fc:d7:ff:ec:8c:56:c4:d8:d1:c5:
         d2:3c:8d:47:f4:44:8d:68:4e:a7:93:74:01:e1:94:05:98:ea:
         29:a1:ef:02:90:48:a2:20:8a:0e:08:f2:a2:b0:ea:15:51:61:
         0e:6c:e3:c6:a7:39:79:a8:38:89:98:b4:de:83:c5:00:a4:72:
         ff:c9:00:75:11:8a:1d:a6:3c:72:8e:29:3d:7e:e8:d1:30:dd:
         ab:31:1a:fc:52:54:57:3f:b2:ea:33:3a:be:92:69:bb:c5:69:
         f1:3b:8d:0f:89:69:df:85:a4:8f:4a:5a:86:2f:1f:a6:9e:3f:
         c9:5d:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:54:21 2025 by rpki-client