Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c87dd0a-83cc-309c-a971-3cc87c3ed7cb.roa
File:                     5c87dd0a-83cc-309c-a971-3cc87c3ed7cb.roa (raw, json)
Hash identifier:          OeSijuW9qCtTGn+gCpHGbzIWzuZm4RkND6kQWOc3XKg=
Subject key identifier:   24:21:6A:99:CA:C8:91:49:E4:3E:28:13:44:14:40:FE:B1:D1:E7:31
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A43BEE33765FE248E23C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c87dd0a-83cc-309c-a971-3cc87c3ed7cb.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11426
IP address blocks:        66.56.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:43:be:e3:37:65:fe:24:8e:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=ab4fd08f-3dfb-4fb2-8be0-a6d3b71bbc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:85:3e:bb:e8:1a:07:c6:ca:ce:bc:01:a4:
                    97:6b:b2:11:ea:ed:dd:bd:5f:58:6d:09:8f:30:c7:
                    4d:f3:95:61:48:95:00:da:05:66:0c:42:99:9f:bd:
                    39:a9:08:7a:c5:19:31:59:69:79:d3:ad:b3:32:1e:
                    ce:29:b3:83:74:e6:57:ca:f0:2d:26:d1:50:f7:82:
                    5f:f9:b2:7b:ea:aa:63:39:b8:98:44:4b:98:ae:c4:
                    b9:4b:5e:13:41:e2:fd:bf:cc:fb:57:76:42:ab:fb:
                    68:01:90:a1:9d:ab:67:fc:d9:c4:96:e3:2f:dd:7f:
                    6e:2d:40:d0:00:d9:31:8e:96:ed:17:2e:34:99:11:
                    d1:e5:f5:49:55:3b:b5:c3:d2:e6:cf:74:52:6c:4b:
                    96:03:80:9a:8e:7a:1a:88:41:d9:9f:38:08:1a:66:
                    c3:3b:d0:8f:e0:f3:98:a8:f7:c2:48:f8:9d:08:e2:
                    82:c8:62:89:6d:bf:eb:63:0c:b6:1e:05:8d:4a:31:
                    cc:39:c5:b1:91:9b:3f:6f:79:97:81:b7:38:10:d1:
                    94:bf:c5:b6:33:c3:ba:92:40:7d:59:f3:84:98:94:
                    dd:4b:4f:eb:f2:98:5c:1b:de:3f:2b:b2:15:92:4c:
                    0c:35:8a:fb:79:67:bb:13:96:f1:6f:4e:fc:53:7b:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:6A:99:CA:C8:91:49:E4:3E:28:13:44:14:40:FE:B1:D1:E7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5c87dd0a-83cc-309c-a971-3cc87c3ed7cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.56.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:77:3f:46:ae:46:94:af:07:b9:40:3b:a7:a8:48:ee:73:dd:
         fa:ea:b6:bc:84:73:d4:62:7c:5c:de:a4:19:85:3d:c8:5e:c5:
         be:47:7d:87:42:0a:75:82:09:0e:4e:3e:b9:e8:b8:7e:d5:93:
         bc:cd:6a:d6:ae:ba:73:ea:d5:af:1a:14:6f:c9:de:7c:89:f9:
         24:5a:26:ad:7b:b8:6f:f6:1d:71:fe:5e:3c:e2:9f:e3:12:07:
         35:38:47:29:a5:09:49:e7:ff:da:5d:8b:e0:f1:59:8e:4a:c0:
         1e:0f:62:6e:ea:1b:c4:e0:4a:04:a8:69:9f:85:27:b3:41:18:
         f4:9a:81:5b:08:27:27:83:af:1e:4c:e0:7a:78:03:04:89:96:
         89:1c:68:94:f1:4c:22:99:b3:f8:39:7f:d0:33:32:59:5f:55:
         f9:cc:57:0e:e4:86:dc:ec:84:2d:dd:66:b0:d3:c5:cb:19:4b:
         cd:4f:7d:ef:be:97:8b:4f:3c:22:4b:ea:ae:e1:ae:26:3d:85:
         47:6b:70:1c:49:eb:c0:75:42:21:83:07:60:42:88:a7:a0:ef:
         7f:13:02:69:8c:b4:3f:82:f7:19:54:ff:2e:29:e3:53:3f:46:
         63:17:95:c0:2a:8b:c8:9a:e2:2f:01:fb:9c:e5:11:9e:96:15:
         4d:bb:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:13:22 2025 by rpki-client