Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b3b3a64-5491-3ee2-96ea-208becad7aaa.roa
File:                     4b3b3a64-5491-3ee2-96ea-208becad7aaa.roa (raw, json)
Hash identifier:          23q3DKL/wrD3N7h8m4lacYlXOfzq1V8n5pxu3GRSw8g=
Subject key identifier:   26:F9:02:83:E2:63:B9:E0:F6:E4:27:3F:70:B3:46:6A:39:EB:D7:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A276D6934A2A2FCBB9300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b3b3a64-5491-3ee2-96ea-208becad7aaa.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     7843
IP address blocks:        107.14.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:27:6d:69:34:a2:a2:fc:bb:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=00f0dd61-2fb5-4ffe-8352-8ca767cf3cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:38:73:16:bc:05:eb:ce:f6:07:ef:e7:16:
                    85:66:c1:de:8c:2f:8f:7b:30:eb:29:d8:1e:1e:e0:
                    e0:74:ea:ab:0b:1e:a6:76:62:a5:1b:24:81:a0:0d:
                    c1:9c:2b:55:d2:56:ea:de:18:63:42:8e:95:4f:98:
                    3b:1c:83:c1:4f:b3:42:8a:c1:c9:d1:05:07:90:df:
                    f8:b7:8f:d2:fd:08:6f:98:8a:b4:ae:9a:dd:b4:ea:
                    9a:bf:47:c5:0d:0c:5d:5d:1a:40:47:81:15:ed:ff:
                    35:9d:84:40:58:88:fa:5d:a3:83:c1:0e:33:e0:f6:
                    3e:ab:96:17:0e:66:68:f4:f7:a4:57:0b:6d:46:80:
                    ff:d8:75:f5:c0:fe:5d:31:fc:fb:82:34:1c:c7:ed:
                    b9:cf:c3:4b:e3:b8:3f:47:6e:fa:06:fa:f3:df:19:
                    af:2d:21:df:14:1a:4d:0a:b0:95:c3:28:67:ba:a0:
                    7e:f2:7b:ca:5d:45:0c:66:d3:76:72:ce:64:da:b0:
                    cd:88:50:a1:49:56:03:ce:6a:c8:c1:71:53:e3:5a:
                    cd:cf:10:56:f7:79:62:32:5c:40:c6:3f:26:c1:b0:
                    f1:f7:22:8b:5a:d7:87:91:60:1e:02:61:31:64:b5:
                    02:94:fc:23:ff:e8:bd:a7:e9:99:48:87:cd:5f:bf:
                    b6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:02:83:E2:63:B9:E0:F6:E4:27:3F:70:B3:46:6A:39:EB:D7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b3b3a64-5491-3ee2-96ea-208becad7aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:24:b8:2a:4f:20:2f:cc:e6:20:a0:07:17:e4:4f:0d:1d:
         c2:9f:fe:e1:8d:a5:21:c7:3a:86:f8:e2:1c:94:27:20:82:78:
         4b:8c:aa:0b:da:d4:f8:48:a5:63:45:b6:16:98:40:d4:9e:db:
         b1:d6:15:7b:9c:c8:0a:80:d9:08:79:6c:dd:09:5d:48:fe:44:
         95:0a:01:ac:ac:c1:10:24:69:95:2d:40:bc:30:43:d7:ff:59:
         f2:d3:91:98:7f:1f:95:43:59:90:b0:69:90:00:fe:ac:12:1c:
         fa:d8:7a:6f:e0:de:55:bf:21:4f:13:20:7f:c9:86:c5:31:14:
         c2:5b:b0:c8:b9:ff:53:93:5c:99:df:62:e9:f4:24:11:2f:b2:
         98:39:b2:a8:70:1b:59:36:ec:69:7e:b9:05:d0:97:cf:01:5c:
         fa:3b:c7:e5:2c:41:c9:b5:a6:67:6e:eb:6e:fc:19:d0:43:67:
         ec:a2:17:c7:db:d2:98:77:05:dd:a4:1d:14:3d:65:aa:cd:d8:
         a8:b9:d3:66:fa:ce:03:6c:c1:30:b0:91:39:24:d5:5a:5e:aa:
         f0:e1:b4:e9:53:21:27:7b:ee:3d:39:bc:b3:d9:b9:1e:94:df:
         3e:3f:9c:52:74:c6:b0:c1:33:53:79:fd:ed:94:69:79:6a:80:
         6d:ee:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:56:00 2025 by rpki-client