Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32984079-ef44-3f19-b3dc-79063f95ec3a.roa
File:                     32984079-ef44-3f19-b3dc-79063f95ec3a.roa (raw, json)
Hash identifier:          gdhTFPRkm+eN2iWKU0NjbuT9ydddANlWcFVB+Jc8j10=
Subject key identifier:   C2:68:93:51:D3:EC:5F:13:D4:51:49:B6:3B:16:DB:48:12:7F:BE:92
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC3AF8D5C6A44F633BB78
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32984079-ef44-3f19-b3dc-79063f95ec3a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.95.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c3:af:8d:5c:6a:44:f6:33:bb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1ce4b8ed-d63c-474e-94e2-a51f8c515a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:08:ad:fd:f9:36:fc:94:f8:94:b8:ae:a8:
                    dc:80:68:49:35:ad:8a:d4:b0:8a:47:19:82:70:2b:
                    a1:5d:0c:29:c3:1b:1c:65:16:98:1e:bb:3c:33:83:
                    62:61:e6:2c:e4:76:72:fb:81:4d:ff:69:60:61:3a:
                    f9:94:c3:4f:1c:95:7e:99:f1:50:68:db:c3:b1:68:
                    d9:93:2e:a5:04:cb:10:a0:b7:fc:9c:9e:d8:49:1e:
                    d8:91:ee:d1:d7:5d:4b:18:bc:d7:f2:32:4b:04:79:
                    b9:6d:e0:a1:15:9c:d9:13:f1:ed:a2:ef:c6:28:42:
                    43:c4:5f:d1:a3:cd:18:bc:4f:66:96:56:f3:e5:94:
                    65:6d:1b:18:a8:35:fd:aa:1a:c9:df:d2:30:78:77:
                    61:d7:7e:17:f2:14:fe:cf:76:5a:93:ef:f9:85:17:
                    d3:c3:8f:39:65:58:99:a5:a4:38:67:51:e0:ae:6d:
                    f9:14:66:09:69:85:38:1d:79:58:06:92:3e:2f:4e:
                    e5:dc:bb:5d:f5:80:f2:43:2f:59:03:cd:9b:8b:16:
                    cd:d9:1b:ef:d9:f9:56:7f:ca:a7:a2:04:69:7f:7a:
                    91:19:a5:7e:39:a7:b4:b9:9e:87:61:c8:82:5a:b9:
                    26:ea:df:1d:41:33:38:c8:9f:0e:91:b0:5d:9c:c3:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:68:93:51:D3:EC:5F:13:D4:51:49:B6:3B:16:DB:48:12:7F:BE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/32984079-ef44-3f19-b3dc-79063f95ec3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.95.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:c1:30:c5:18:1c:e9:91:48:b2:f1:b5:fd:7d:4e:02:5a:
         1c:38:f3:09:e1:c3:1d:02:3c:14:a7:de:35:64:03:e5:e6:79:
         e7:f9:62:b4:5f:81:f6:53:40:b4:7a:cc:38:32:6f:37:65:72:
         cf:39:ed:53:b2:e6:93:56:59:58:fa:c2:ef:8c:68:f2:d4:b8:
         68:93:de:94:22:ec:2c:a7:42:21:52:72:17:8c:68:a1:ee:cc:
         2e:b8:45:94:01:10:41:67:7d:44:73:fc:fa:12:fd:4e:40:4e:
         9a:cb:ea:8c:38:51:d4:2c:ba:e6:f1:db:26:23:8a:26:24:79:
         49:b0:d3:4f:6d:5d:d1:95:2e:b3:40:1b:10:50:51:0f:1e:a4:
         91:e7:34:ca:db:26:91:59:87:37:f9:50:2e:91:19:d3:c5:cd:
         08:0d:10:13:2e:30:30:59:b8:e8:fb:52:f2:bf:a2:83:22:32:
         45:6a:ba:b5:7b:39:4a:69:0f:f5:d1:04:b5:6b:f3:79:90:6d:
         f4:59:71:5b:66:c8:e3:e8:5a:e9:20:a9:d4:bd:d7:88:67:3b:
         7a:fa:fb:ce:84:ac:08:22:e9:cc:ad:1c:0d:30:0e:48:77:f8:
         4c:c5:44:3b:76:e6:4f:0b:8e:a2:53:1f:5d:10:41:8a:ae:84:
         be:67:a8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:11:45 2025 by rpki-client