Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/35eb5f9a-e007-3a52-9e26-e55c68cccaf1.roa
File:                     35eb5f9a-e007-3a52-9e26-e55c68cccaf1.roa (raw, json)
Hash identifier:          aeKQ6pRRGofJLGR5JUNmWDftoU5Hp+lqJ6gJh2cPzas=
Subject key identifier:   03:72:CD:3D:1C:B5:D5:4E:13:65:7F:B0:83:E9:D4:6A:15:76:DA:FD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4D4CD941F1F236438848
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/35eb5f9a-e007-3a52-9e26-e55c68cccaf1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        74.68.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4d:4c:d9:41:f1:f2:36:43:88:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1594fd6d-12ad-498f-bd3b-5981c7aaa5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:be:d1:25:aa:b3:a7:a8:51:68:0d:50:68:
                    42:a7:fb:ca:53:5c:15:1f:ed:a0:cc:dc:1f:02:75:
                    c0:b9:7e:94:d4:83:19:e0:7e:aa:dd:3c:72:92:b1:
                    22:77:8c:63:ac:c4:70:27:b7:74:3a:4a:a0:2f:69:
                    44:58:b8:54:fb:15:74:d8:6d:d2:4f:91:d5:66:1b:
                    03:1a:dc:b0:11:1c:0f:c6:5b:24:ca:82:ae:af:72:
                    b1:00:9f:c7:ea:ba:9c:9b:8f:15:7e:af:a9:dd:44:
                    9e:a9:d9:b2:63:66:d8:e2:30:a3:91:55:3f:64:72:
                    d5:77:29:f5:b6:6b:70:99:20:ae:8e:bc:eb:70:d0:
                    3b:6a:82:ad:21:35:49:1f:f8:5e:d9:52:5c:1a:be:
                    14:23:6d:b3:c2:35:7c:e4:bf:dd:75:8d:d3:dd:35:
                    79:66:72:14:6c:ae:5d:e0:75:1d:27:2c:ff:77:90:
                    15:ec:c1:31:19:dc:65:7e:5f:f1:2d:a6:78:8f:a7:
                    b1:86:92:55:22:f1:3a:20:79:37:e7:bc:33:e7:68:
                    8a:ec:53:b7:90:eb:1c:22:98:39:36:3c:a8:5f:b4:
                    cc:61:82:16:2a:9f:e3:9c:de:51:f7:c2:55:b3:f4:
                    7e:42:fc:8b:24:a1:da:cd:55:ac:18:9c:5b:4a:47:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:CD:3D:1C:B5:D5:4E:13:65:7F:B0:83:E9:D4:6A:15:76:DA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/35eb5f9a-e007-3a52-9e26-e55c68cccaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.68.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:92:c2:ab:f5:7c:ef:87:7f:43:4d:75:c4:a1:d1:6f:ba:
         3c:aa:7a:de:23:1f:d1:48:28:b1:0a:62:e4:6c:1b:1b:7e:22:
         17:9d:f0:64:54:33:30:b0:56:40:a8:a7:b7:58:83:6f:aa:22:
         18:38:cc:69:e8:98:cd:4a:36:aa:aa:17:95:14:ae:be:02:3c:
         b1:1e:63:c8:d7:fe:e4:c8:d0:6d:51:49:6b:7f:10:f2:75:cb:
         dd:3c:63:0e:5c:e1:e7:3e:60:5d:da:a1:56:96:2a:43:24:a4:
         32:58:2d:62:b7:7e:7e:f2:4a:b1:70:10:e4:e1:ec:22:fa:49:
         36:16:56:90:f7:49:5a:18:5d:6c:e2:66:ac:37:58:4a:03:b3:
         a4:31:54:20:63:a0:3f:32:84:6a:17:28:83:c3:d7:e4:2d:0a:
         22:f2:14:69:97:61:c8:c0:7f:68:7b:12:12:51:33:50:da:84:
         5b:cb:32:c5:2c:30:2c:b7:41:2d:bf:25:52:ed:7b:7d:2c:93:
         65:10:6a:40:b2:eb:10:18:f3:4f:27:93:3d:18:e8:44:f0:84:
         36:9c:46:08:f0:96:58:7b:4d:2a:2e:2f:3b:1a:6d:58:26:e0:
         19:1e:44:21:46:08:66:93:30:24:0d:6f:eb:a6:a1:b6:1b:55:
         48:c2:6a:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCk1M2UHx8jZDiEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MTU5NGZkNmQtMTJhZC00OThmLWJkM2ItNTk4MWM3YWFhNWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUO+0SWqs6eoUWgNUGhCp/vKU1wVH+2gzNwf
AnXAuX6U1IMZ4H6q3TxykrEid4xjrMRwJ7d0OkqgL2lEWLhU+xV02G3ST5HVZhsD
GtywERwPxlskyoKur3KxAJ/H6rqcm48Vfq+p3USeqdmyY2bY4jCjkVU/ZHLVdyn1
tmtwmSCujrzrcNA7aoKtITVJH/he2VJcGr4UI22zwjV85L/ddY3T3TV5ZnIUbK5d
4HUdJyz/d5AV7MExGdxlfl/xLaZ4j6exhpJVIvE6IHk357wz52iK7FO3kOscIpg5
NjyoX7TMYYIWKp/jnN5R98JVs/R+QvyLJKHazVWsGJxbSkcaHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANyzT0ctdVOE2V/sIPp1GoVdtr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMzVlYjVmOWEtZTAwNy0z
YTUyLTllMjYtZTU1YzY4Y2NjYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSkQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaaksKr9Xzvh39DTXXEodFvujyqet4jH9FIKLEKYuRsGxt+Ihed8GRU
MzCwVkCop7dYg2+qIhg4zGnomM1KNqqqF5UUrr4CPLEeY8jX/uTI0G1RSWt/EPJ1
y908Yw5c4ec+YF3aoVaWKkMkpDJYLWK3fn7ySrFwEOTh7CL6STYWVpD3SVoYXWzi
Zqw3WEoDs6QxVCBjoD8yhGoXKIPD1+QtCiLyFGmXYcjAf2h7EhJRM1DahFvLMsUs
MCy3QS2/JVLte30sk2UQakCy6xAY808nkz0Y6ETwhDacRgjwllh7TSouLzsabVgm
4BkeRCFGCGaTMCQNb+umobYbVUjCatk=
-----END CERTIFICATE-----
Generated at Sun May 11 22:42:41 2025 by rpki-client