Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b70d655-73f7-3296-b01c-d4dda2d319ae.roa
File:                     0b70d655-73f7-3296-b01c-d4dda2d319ae.roa (raw, json)
Hash identifier:          mIHNqAiraMfqXoiWwZModgUeMaF8gny3AvfG4dSyb+Q=
Subject key identifier:   02:55:8D:7F:31:A9:EE:48:39:63:31:F8:4B:BC:10:F3:EC:DD:1B:40
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD2EAEC5126741B4FB680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b70d655-73f7-3296-b01c-d4dda2d319ae.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        24.106.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d2:ea:ec:51:26:74:1b:4f:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8b514634-2765-4f22-b626-3d64501c2a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:8e:00:01:16:36:8f:42:a4:3a:51:84:7b:
                    4e:90:70:bd:1a:dd:22:06:cb:61:00:20:03:6d:52:
                    90:0a:5b:cb:db:27:c7:4d:c9:84:86:a0:03:bc:13:
                    3e:db:d3:8e:36:cb:9b:39:46:0f:ad:b0:8f:d1:d3:
                    42:46:d4:93:af:af:de:99:9b:45:98:1d:f7:00:2c:
                    59:88:0a:ba:ad:7e:86:73:60:e0:2c:6f:46:02:e5:
                    57:95:9c:cd:1a:4f:99:21:52:a4:59:ef:ba:ee:30:
                    e7:88:e8:33:e8:d1:2f:9c:9c:10:78:ac:f5:86:01:
                    7b:be:be:7a:b8:d7:bc:0e:c6:b9:f8:5b:5d:fd:eb:
                    4c:ad:85:36:7e:96:f5:04:10:ab:a5:a8:41:3f:c4:
                    cd:04:f3:3b:39:fe:5e:91:bd:09:45:5d:63:37:9c:
                    f0:49:08:e6:f7:f9:68:d3:b7:c0:6a:9e:1c:0f:6f:
                    29:0e:1e:c2:32:d7:58:90:ee:27:f3:1d:95:9a:e8:
                    49:cf:45:bf:37:b8:4d:dd:45:84:a4:2c:f1:97:1c:
                    a9:f1:97:8d:8d:42:ba:e0:4b:ff:e8:77:59:2a:59:
                    56:f5:6a:fa:d3:38:10:eb:e8:27:27:02:2e:83:c1:
                    7c:11:1e:6a:d5:e1:dc:38:0c:fd:d1:47:e8:f0:7e:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:55:8D:7F:31:A9:EE:48:39:63:31:F8:4B:BC:10:F3:EC:DD:1B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b70d655-73f7-3296-b01c-d4dda2d319ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.106.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:13:59:a9:ed:9e:45:a4:a1:8c:91:4d:42:aa:e3:d1:b6:
         f1:37:85:ef:76:e6:04:e6:58:88:fa:e0:f2:91:96:03:f4:8d:
         0b:39:76:13:c3:b6:ff:62:e5:c6:63:c7:f8:b3:87:63:1b:90:
         c2:34:22:ef:4a:e4:66:0d:cd:5b:d3:a1:f1:be:16:0a:10:e6:
         1c:24:4a:27:99:c7:a3:f7:91:17:f6:05:ca:f1:b7:7a:f3:5b:
         86:22:26:bf:ec:53:71:5e:e4:60:07:5a:86:35:1d:dc:a5:d4:
         95:34:83:9d:bb:65:ed:01:84:21:c9:9e:86:19:b6:80:7b:bf:
         39:85:a2:50:b7:55:db:94:95:d9:d9:9d:d0:b4:d5:09:82:ae:
         25:c9:8c:3a:ae:61:a2:cc:25:5b:17:a7:2f:9e:7e:a8:30:81:
         f0:4e:ce:63:81:31:ac:79:2d:ad:7a:38:29:5b:22:f8:58:85:
         73:23:a6:df:db:44:e9:e2:74:86:c6:5e:82:5a:48:61:48:f3:
         a3:d5:b7:e7:1f:31:20:f0:20:80:05:1c:f7:7b:5e:b1:7d:26:
         53:14:91:c2:b5:37:c7:3f:70:41:66:c1:81:0b:47:ae:ae:ee:
         24:06:77:71:c3:ab:f4:df:f5:94:c8:28:f7:2a:66:5b:2e:7c:
         9e:e7:99:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCtLq7FEmdBtPtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
OGI1MTQ2MzQtMjc2NS00ZjIyLWI2MjYtM2Q2NDUwMWMyYTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPSOAAEWNo9CpDpRhHtOkHC9Gt0iBsthACAD
bVKQClvL2yfHTcmEhqADvBM+29OONsubOUYPrbCP0dNCRtSTr6/emZtFmB33ACxZ
iAq6rX6Gc2DgLG9GAuVXlZzNGk+ZIVKkWe+67jDniOgz6NEvnJwQeKz1hgF7vr56
uNe8Dsa5+Ftd/etMrYU2fpb1BBCrpahBP8TNBPM7Of5ekb0JRV1jN5zwSQjm9/lo
07fAap4cD28pDh7CMtdYkO4n8x2VmuhJz0W/N7hN3UWEpCzxlxyp8ZeNjUK64Ev/
6HdZKllW9Wr60zgQ6+gnJwIug8F8ER5q1eHcOAz90Ufo8H4URQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJVjX8xqe5IOWMx+Eu8EPPs3RtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGI3MGQ2NTUtNzNmNy0z
Mjk2LWIwMWMtZDRkZGEyZDMxOWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGGqoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKkE1mp7Z5FpKGMkU1CquPRtvE3he925gTmWIj64PKRlgP0jQs5dhPD
tv9i5cZjx/izh2MbkMI0Iu9K5GYNzVvTofG+FgoQ5hwkSieZx6P3kRf2Bcrxt3rz
W4YiJr/sU3Fe5GAHWoY1Hdyl1JU0g527Ze0BhCHJnoYZtoB7vzmFolC3VduUldnZ
ndC01QmCriXJjDquYaLMJVsXpy+efqgwgfBOzmOBMax5La16OClbIvhYhXMjpt/b
ROnidIbGXoJaSGFI86PVt+cfMSDwIIAFHPd7XrF9JlMUkcK1N8c/cEFmwYELR66u
7iQGd3HDq/Tf9ZTIKPcqZlsufJ7nmYI=
-----END CERTIFICATE-----
Generated at Sat May 10 09:52:10 2025 by rpki-client