Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/765bd393-3851-3458-96f8-419424a2829e.roa
File:                     765bd393-3851-3458-96f8-419424a2829e.roa (raw, json)
Hash identifier:          BknjfV4Vm6KQ+Mlu4TIi6NFrk3LVoqfkGhVRQPrRibI=
Subject key identifier:   21:77:E0:64:F5:72:AB:A2:8A:19:E4:93:D5:32:DF:2A:AD:76:50:75
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A613FFB9FF687E94DED00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/765bd393-3851-3458-96f8-419424a2829e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        68.202.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:61:3f:fb:9f:f6:87:e9:4d:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e5693ea5-f02a-4e15-a3ce-6417cbb714a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:9a:34:d8:a6:62:aa:33:5d:f2:d9:86:8c:
                    d2:a9:57:e5:c0:fc:55:a8:eb:93:2a:f1:35:34:d4:
                    cd:aa:66:86:73:ec:56:c5:e2:ed:34:d5:85:ff:74:
                    66:e8:85:bc:52:89:a6:d0:0d:62:05:89:de:8a:1c:
                    de:77:0e:49:ec:01:a1:b5:14:ca:30:b5:de:1e:02:
                    19:10:75:f5:6c:39:3b:48:80:3b:4e:30:2e:cd:d3:
                    e0:72:51:e3:74:11:80:ce:7e:bf:74:7a:cd:09:9a:
                    66:e9:24:19:77:0b:8b:d1:0f:78:23:bb:1f:83:25:
                    66:55:a9:21:82:90:64:da:a6:15:27:33:35:57:29:
                    e7:73:8b:5c:70:3b:e2:2b:4d:c3:b7:c0:46:40:93:
                    5b:70:10:4b:cf:33:41:fc:8d:33:a5:19:e3:4e:0a:
                    2b:bd:c0:c8:2a:c8:84:2c:7e:77:07:54:40:a6:aa:
                    5f:9d:a6:a1:b9:0a:3e:82:94:15:b5:fc:f1:5f:48:
                    29:26:e8:35:aa:0c:00:b9:e7:2d:f9:b4:7c:88:82:
                    7a:67:39:d2:21:03:db:4b:ed:6b:a0:98:b2:c4:09:
                    99:b4:b2:fa:a1:d6:b4:99:48:12:81:f8:82:6a:1b:
                    c3:19:27:49:e6:58:b1:2c:1b:74:d4:04:26:41:68:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:E0:64:F5:72:AB:A2:8A:19:E4:93:D5:32:DF:2A:AD:76:50:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/765bd393-3851-3458-96f8-419424a2829e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:3b:0d:99:1a:20:75:0d:08:83:a1:7b:e2:1d:f0:11:bd:e4:
         6c:41:d4:3a:e0:e0:3c:40:d1:b9:91:68:2b:8b:f3:6d:4e:0b:
         c3:a6:db:9b:84:68:4a:f9:0d:6d:df:30:3f:2f:a5:1b:43:73:
         4d:22:31:e5:8a:6e:be:53:0a:99:1b:06:5f:de:96:76:2c:60:
         e8:d0:d4:e9:00:3a:b7:04:0d:8a:95:9d:92:5a:de:05:35:0f:
         3f:9b:25:36:f2:bb:7e:68:5e:65:18:e4:d2:aa:86:7d:7d:16:
         69:28:19:f7:ca:c3:d6:78:94:59:f1:06:8b:23:f8:60:16:91:
         55:80:c4:f2:db:90:27:ca:7d:65:0f:07:e3:2e:29:61:d6:ad:
         0d:00:b9:f9:4f:94:03:28:2c:44:c9:44:5d:73:51:4b:17:f6:
         04:dc:d5:e1:89:3e:f4:22:b4:ee:30:5b:61:94:f5:5d:c0:42:
         03:51:ef:39:70:7f:35:de:fe:5c:00:d0:d6:78:a5:bf:b8:e7:
         35:ff:fc:35:78:68:7b:fb:3a:37:75:cd:2f:41:7a:86:d6:37:
         25:ce:21:c5:b0:fc:71:be:31:4c:a1:88:eb:85:0b:57:7c:8f:
         74:30:52:95:a0:24:8d:55:0b:fd:db:3d:f9:af:2c:55:38:b6:
         24:9c:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:36:47 2025 by rpki-client