Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30a2bb2b-5f99-3aff-b5bf-fc9248c13347.roa
File:                     30a2bb2b-5f99-3aff-b5bf-fc9248c13347.roa (raw, json)
Hash identifier:          Z3IN7B2GyYx3uvADxzO6B2wSlEyr9AqXVRybzZwuW+0=
Subject key identifier:   00:61:F9:47:89:E4:2B:D3:10:35:C7:DE:4E:CB:0E:8E:64:5F:C0:06
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A61E444DC8DA0F06D4780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30a2bb2b-5f99-3aff-b5bf-fc9248c13347.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        67.9.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:61:e4:44:dc:8d:a0:f0:6d:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=748cadd5-f33b-4624-af8e-d8f32e183b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:94:9f:c3:56:48:9f:80:26:d9:8b:d4:96:
                    11:00:e9:46:16:13:67:c9:e1:3c:16:cb:0a:c5:e4:
                    40:52:d3:f3:f6:6a:7e:58:83:eb:b5:6c:2e:78:62:
                    22:82:65:16:ef:84:9f:1e:33:3e:2d:db:8a:fa:a5:
                    8d:f6:60:d4:54:53:42:d4:62:d7:ec:6f:bd:77:86:
                    92:76:a0:37:d5:41:40:f4:ce:11:94:bb:d3:5d:80:
                    e2:c3:2f:f5:d0:80:af:7c:f4:26:27:f0:d9:77:c3:
                    20:ff:5e:a0:f3:f7:e4:dd:10:eb:47:0a:44:48:2b:
                    de:e4:58:20:e9:af:8d:26:8b:63:06:b4:35:cf:b6:
                    bc:0b:43:44:89:40:cb:aa:8c:b7:0b:56:a7:bf:cc:
                    ba:92:c6:24:f6:0c:02:b0:2e:07:4e:29:35:01:4d:
                    48:71:bf:d0:01:08:d0:da:20:8f:2a:e9:07:48:99:
                    bb:02:0b:1f:81:36:2f:13:de:84:d1:bb:95:76:0b:
                    21:ad:62:ec:14:65:4c:65:35:93:cd:ff:1b:0b:96:
                    ad:5f:f0:85:82:f2:42:4c:04:c0:ad:45:ee:5b:08:
                    1c:0a:4e:95:59:cf:34:45:00:84:35:38:47:f0:c9:
                    2d:26:93:22:f5:22:5b:fc:6b:92:1f:a1:05:2d:02:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:61:F9:47:89:E4:2B:D3:10:35:C7:DE:4E:CB:0E:8E:64:5F:C0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30a2bb2b-5f99-3aff-b5bf-fc9248c13347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.9.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:62:35:8e:89:f4:a9:7b:bc:eb:6e:59:02:c1:8f:a7:ab:
         68:ee:f3:ce:cf:65:c8:af:e2:e4:63:dc:b8:fa:95:f7:86:3c:
         aa:7b:18:b2:19:62:5b:0d:bb:36:91:16:11:c5:59:fd:e6:fd:
         ec:b4:39:79:5b:51:e0:7e:9f:98:58:bd:bf:3c:64:31:2f:88:
         2c:68:2e:8f:35:4b:0a:93:9c:78:7e:99:ea:06:7e:e1:97:ce:
         39:d8:21:a2:b7:35:cd:c1:24:33:e1:5e:96:d3:bb:a5:7a:7e:
         93:c2:7f:30:d3:a1:3d:a9:6f:27:bf:23:f3:1b:7f:32:8d:9c:
         64:5b:d7:e0:f7:e9:3e:ec:01:cb:9e:fc:85:00:7b:76:3c:7c:
         53:1a:67:e5:60:a4:6c:25:c1:66:a8:8d:c7:44:fb:dc:0b:c7:
         91:18:0b:71:f8:3d:10:7a:7a:d2:d6:89:3a:b2:89:af:21:a5:
         70:40:ed:00:bb:00:3d:a4:27:a6:f3:12:24:c1:3c:7c:ae:d1:
         2a:59:fb:70:d2:3c:35:45:b4:ea:d3:c9:9f:ff:56:78:cf:a8:
         27:c8:dd:b0:21:08:cb:73:c4:d7:46:27:5b:92:93:eb:5a:c5:
         1d:dc:d7:d9:f1:17:2f:01:ce:0d:37:f7:7c:3c:55:bf:0f:83:
         c1:18:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:07 2025 by rpki-client