Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54cb1d52-2a8d-37df-b2b1-c7f4037669de.roa
File:                     54cb1d52-2a8d-37df-b2b1-c7f4037669de.roa (raw, json)
Hash identifier:          vH+TMQ2RJCcGCtWN5zGbQ+xF+t5h7Po1ffLjiphziJc=
Subject key identifier:   1D:17:F7:53:4E:C1:35:24:C5:57:DC:A9:9B:F2:19:D8:F1:49:6C:4E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A302059DC33DE6AC2BF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54cb1d52-2a8d-37df-b2b1-c7f4037669de.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        71.79.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:30:20:59:dc:33:de:6a:c2:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=abe33245-9051-4686-94c8-e5f5553b29bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:84:93:03:6e:85:99:b6:21:b7:d9:3e:60:
                    9f:f5:66:95:75:a3:64:b5:ac:9f:45:37:58:b4:80:
                    b2:34:02:71:34:26:86:a0:48:73:dd:fa:69:9d:42:
                    58:15:b6:25:db:a2:f0:d8:dd:86:46:18:83:5d:a4:
                    75:84:01:5b:0f:20:b7:37:be:68:ca:bb:ab:3b:e2:
                    38:dd:98:16:81:27:e2:15:b9:63:f5:02:d7:26:4a:
                    88:5d:80:67:88:f0:2a:4f:e3:9e:be:22:50:69:3a:
                    0b:a5:60:42:08:88:9d:99:93:de:37:f7:e5:2e:9f:
                    6e:28:eb:f3:55:b0:0d:df:9e:26:f5:6a:31:38:b1:
                    f5:15:97:89:fe:31:db:7e:c7:47:d5:62:b0:38:b2:
                    aa:0e:24:d4:cb:1e:df:2a:f8:8a:83:ef:ff:bf:f5:
                    71:91:25:54:b7:f7:55:34:3c:f9:93:13:67:76:ad:
                    9d:dd:ec:d3:b0:79:45:08:37:fb:18:f4:eb:d4:81:
                    79:33:d0:10:3e:00:cc:56:f9:b1:63:14:3f:c7:71:
                    9d:6d:60:0a:1d:6d:24:a3:c6:c5:4b:e1:e4:11:70:
                    a7:cc:b5:50:97:4a:d1:24:7b:21:29:20:e3:c9:b7:
                    e7:ae:77:c6:22:5f:d0:bb:73:bf:53:3d:8f:c3:2b:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:F7:53:4E:C1:35:24:C5:57:DC:A9:9B:F2:19:D8:F1:49:6C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54cb1d52-2a8d-37df-b2b1-c7f4037669de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.79.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:f5:1f:d0:34:a5:5f:23:26:41:f4:a9:56:81:67:80:1f:
         cb:0b:7e:92:b8:68:84:b9:f5:4b:2e:84:d0:72:e1:0a:5a:86:
         47:ec:96:7f:38:8f:d5:a5:52:b0:dc:0d:77:17:a9:8c:c0:44:
         99:07:0f:46:7f:77:4d:31:dd:1d:db:21:86:86:82:f6:a9:5d:
         a6:d1:64:2a:08:bb:cc:fb:a5:e2:ed:d2:e4:72:ab:62:23:7e:
         e6:8b:b5:a4:53:20:98:0f:ce:28:37:26:6e:45:14:9e:cb:0b:
         44:a6:95:ef:fc:62:7c:fd:e8:ff:0b:ce:4c:04:36:f3:be:3d:
         68:2e:64:f9:e6:40:a2:b4:95:1a:e9:e0:ff:7a:88:fd:8c:cd:
         96:d7:1b:40:b8:b8:8d:df:ed:1c:2f:df:3c:06:a8:ed:fb:b5:
         45:d6:a8:1b:e9:fc:51:aa:72:41:ce:2c:78:b5:fd:5e:a2:76:
         10:60:6a:90:ac:9e:5b:18:3b:2c:26:a6:c6:c3:c7:48:2b:9a:
         1b:11:4a:30:9b:29:5b:1c:80:e4:1c:b5:be:ea:f5:d1:2f:92:
         dc:be:9f:fb:62:ea:ec:96:23:23:6e:85:50:dc:bd:39:c2:8b:
         9b:6a:73:ce:51:fc:cd:b7:5e:3a:96:5d:84:dc:61:37:50:03:
         9c:bd:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:26:19 2025 by rpki-client