Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b5e4994-e7ec-33c6-a7c2-ff9d709df03a.roa
File:                     6b5e4994-e7ec-33c6-a7c2-ff9d709df03a.roa (raw, json)
Hash identifier:          5nR/ZLFvbyfQkYodlroZMWN+iqAjzuFcfBsfxLICG7w=
Subject key identifier:   E9:3E:6C:64:96:FE:38:C9:73:6E:97:1E:25:74:1B:6D:80:DC:6A:FF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A2FE995C0C4D21A856E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b5e4994-e7ec-33c6-a7c2-ff9d709df03a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        24.33.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:2f:e9:95:c0:c4:d2:1a:85:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=14dd5d90-a5df-4161-be66-7acca8ee6941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:34:32:bf:98:ae:8d:c1:2d:de:40:f5:43:
                    79:6d:cf:a5:4b:34:59:c2:3f:98:f5:c1:23:e7:05:
                    23:90:1b:49:33:7d:f8:85:f8:aa:e7:71:cc:ea:86:
                    2e:20:00:a2:b0:6d:6f:2b:8b:40:ed:cd:f0:17:96:
                    a9:17:c4:be:2d:e9:13:60:75:2f:c6:7a:ee:e3:92:
                    e7:fc:23:e0:22:c5:99:49:1b:4b:6d:6f:13:7f:09:
                    af:43:97:32:5b:60:bc:7f:a9:79:44:54:0e:ec:47:
                    af:9d:07:4d:79:b2:22:46:09:f3:3c:a9:a3:08:7c:
                    e7:19:02:96:80:ac:12:8c:c2:7d:d4:92:7c:ab:85:
                    04:0a:bc:08:3d:74:78:5f:b4:d7:45:81:d3:19:65:
                    79:0b:fb:8d:8b:03:c8:1e:a9:c9:c0:36:95:cf:6e:
                    db:a9:45:28:04:1a:64:31:2d:ba:c1:46:6c:ec:74:
                    59:13:4d:8d:7b:75:dd:79:f5:aa:82:3a:82:f1:16:
                    a6:ed:9c:90:62:4b:90:31:bd:14:6b:a0:79:09:0f:
                    33:3c:5a:7b:8f:0a:e7:8c:fe:5b:a5:00:22:ee:a5:
                    37:d4:c3:d6:bf:ac:79:b6:5e:e2:26:fe:01:73:2c:
                    29:e3:e0:d7:61:22:32:a6:58:8a:bf:c1:42:f0:91:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3E:6C:64:96:FE:38:C9:73:6E:97:1E:25:74:1B:6D:80:DC:6A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b5e4994-e7ec-33c6-a7c2-ff9d709df03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:f2:35:ea:66:16:68:1e:b0:8b:a7:78:8f:76:f8:bf:b2:
         8f:ff:37:31:4a:cb:ed:ca:a0:d8:8c:40:41:b4:4e:fa:d3:be:
         da:08:3b:96:a2:06:12:ff:ca:96:3a:03:dd:87:bc:c3:37:2a:
         fb:71:5f:7a:33:fa:54:80:83:87:62:58:91:4b:63:35:c9:82:
         61:37:a9:2e:58:15:93:21:5f:ce:b8:cb:12:06:64:f0:fe:fa:
         78:35:67:64:e0:94:ef:ce:99:61:a6:75:42:bd:7a:33:47:6f:
         32:73:2f:d5:ab:50:25:b6:6b:ef:7d:6f:6f:b3:ff:eb:2f:6e:
         df:93:a5:29:5c:40:ba:be:f6:0a:7b:82:59:03:b8:cd:66:23:
         6f:53:bd:71:de:7e:9b:66:56:e0:7a:fc:1a:c4:d9:bb:3a:20:
         09:01:2b:05:38:59:65:0c:5b:fa:e3:8e:db:5a:da:b7:ce:6b:
         04:25:89:97:ba:6f:b0:72:e6:4f:0c:b1:74:86:08:3b:6e:dd:
         27:45:20:b4:27:92:44:68:68:a2:71:3e:ae:2a:32:9b:a6:56:
         03:5b:9f:d0:82:f9:3d:0e:28:fa:00:74:44:87:93:f9:50:38:
         11:6f:cc:6e:e8:d6:e0:33:2f:a0:41:39:23:85:d4:53:dc:5e:
         8e:df:eb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:38:10 2025 by rpki-client