Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/708fff30-90d0-3302-99dc-5d5f101347b1.roa
File:                     708fff30-90d0-3302-99dc-5d5f101347b1.roa (raw, json)
Hash identifier:          GnXfXeTTYxoz4c57GyZLWtGzHMbWgWvNe4NjiXKM4us=
Subject key identifier:   AB:4B:29:7D:A2:36:BA:8A:AB:39:34:F1:48:DE:E0:54:1B:9C:91:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A60EBFFFB404015839280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/708fff30-90d0-3302-99dc-5d5f101347b1.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        97.100.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:60:eb:ff:fb:40:40:15:83:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=295fccca-2442-4c50-97c4-49bbd004f842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:a2:26:ee:eb:5a:61:ea:ed:37:dd:36:8a:
                    7a:2f:b2:bd:e2:60:1f:16:9c:64:e7:c5:47:1b:79:
                    69:e1:64:57:00:9d:87:c9:92:4b:78:b2:d7:52:51:
                    c0:a9:f2:99:c1:e7:7a:1c:dd:5a:7e:f0:92:1d:6b:
                    e7:8c:f3:57:a9:6f:1d:e8:05:83:b8:a2:b8:0a:e9:
                    4d:e5:0b:32:3b:94:da:83:2f:a6:95:4c:e0:f0:d4:
                    2d:9c:6c:4c:fa:14:ba:9e:ca:49:83:19:d7:fd:3d:
                    23:77:e4:e5:7b:37:a1:df:2a:fc:d9:78:eb:90:c4:
                    54:48:93:e4:24:f1:26:1b:de:42:c3:84:bc:35:db:
                    44:ca:6b:f9:50:26:2c:02:31:e9:01:ff:1a:85:a2:
                    af:4d:ec:89:99:4a:b9:d6:73:6b:a0:74:15:f2:b6:
                    34:8d:27:35:57:80:6d:d0:d0:51:ca:b9:ea:4c:9c:
                    3b:b8:f4:7d:ff:09:12:c4:33:3c:86:47:03:a9:5e:
                    03:bd:2b:98:37:30:a1:17:a6:6a:f6:58:73:88:c1:
                    09:c4:37:a7:f6:63:e8:a6:e6:c6:93:cf:d3:c5:3e:
                    fc:02:a0:20:eb:9a:0e:a7:2f:af:02:ec:69:36:86:
                    f7:dd:f9:12:ae:35:37:3c:d0:0a:be:17:95:07:75:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:29:7D:A2:36:BA:8A:AB:39:34:F1:48:DE:E0:54:1B:9C:91:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/708fff30-90d0-3302-99dc-5d5f101347b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.100.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:47:95:39:6c:19:ee:7f:b3:75:40:3e:c1:30:6b:b7:b8:eb:
         8d:d0:04:de:c9:1b:eb:45:ec:1c:e8:88:2b:33:be:6d:b3:8f:
         38:14:12:b3:bd:a4:12:95:5d:a4:84:e5:5b:63:e6:c0:77:9c:
         76:46:32:25:a4:0f:61:40:aa:f0:44:a7:cd:fd:47:6e:05:e9:
         37:74:cd:ac:18:47:35:41:4e:57:31:a9:91:31:12:66:9d:de:
         d9:02:0b:03:02:e5:2a:24:ba:06:ba:70:8d:39:c9:7d:6e:19:
         27:93:3e:80:c6:60:3b:b9:79:c4:43:07:ae:b5:ab:18:78:c1:
         cd:9e:a6:32:3a:98:7d:63:da:75:d2:ac:8a:7a:a8:82:e3:74:
         c3:42:10:25:33:11:5a:85:7c:e5:17:20:ea:01:54:e2:e1:32:
         18:46:c5:63:93:1a:3a:c7:e5:8d:27:ad:66:25:11:97:df:e9:
         ab:91:cc:78:66:57:b1:27:c6:f3:dd:e4:bb:d3:d7:2e:33:40:
         0e:17:de:cf:71:62:cf:99:1b:97:28:a2:a0:44:83:46:fb:45:
         4c:58:c6:dd:29:51:44:2c:1d:f6:c7:40:ed:d0:33:4c:47:8b:
         9b:43:f7:a3:5b:3c:0c:bc:31:9b:af:20:14:0f:d3:bd:2f:94:
         fa:7c:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:53:48 2025 by rpki-client