Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85e71494-19c8-399d-b2e9-550bed594777.roa
File:                     85e71494-19c8-399d-b2e9-550bed594777.roa (raw, json)
Hash identifier:          +0Y4Uw5qW9uNZgdfJX3aATz1SPxXuyO9a899C8cgahc=
Subject key identifier:   C0:B3:4F:0D:25:A5:58:CC:E1:E0:01:B9:07:26:27:72:52:78:28:FD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A5A8AA61F80DAFD589500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85e71494-19c8-399d-b2e9-550bed594777.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        69.63.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:5a:8a:a6:1f:80:da:fd:58:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a4e9595d-ae89-4613-b683-33b3a5704965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:2f:61:58:3a:b3:83:e6:ef:16:e6:97:51:
                    8c:01:59:c0:85:c8:35:10:98:f3:33:b9:9c:08:2c:
                    9d:6e:45:40:e0:11:d1:f3:65:b9:88:6e:99:b3:0e:
                    47:42:58:39:6b:e4:82:54:bb:0e:92:c2:65:96:a3:
                    e3:3b:0b:4a:69:0a:14:4e:39:9d:2f:9e:14:6f:f6:
                    a7:10:07:cf:34:4c:c9:90:a7:47:17:8e:fa:69:91:
                    b8:4e:ea:da:c6:a1:d3:6f:03:8e:c7:33:7f:ca:84:
                    90:b3:3c:a5:dd:4c:bc:c9:18:dc:da:65:a7:b9:10:
                    e4:db:64:1e:46:f1:8a:e5:97:fd:39:cd:b1:11:2f:
                    36:f2:2d:62:cc:ad:b7:8f:11:20:df:91:b8:59:5c:
                    cc:46:18:ce:b3:e9:92:c5:fd:f8:7e:ac:a7:65:12:
                    ac:78:cd:d4:83:53:f5:19:5a:24:dc:6a:94:a6:ce:
                    52:63:a2:66:43:0c:e6:f1:6e:10:c7:e9:69:39:ec:
                    7d:11:0b:aa:8b:1c:9c:b8:61:2a:b8:ea:70:d6:87:
                    65:e1:f4:83:26:68:d1:15:46:2c:f0:e4:db:dd:7e:
                    0d:08:56:fd:62:64:b9:a1:d9:50:77:23:45:dc:c6:
                    4a:07:06:64:ce:6d:c6:a0:08:98:53:db:cd:60:86:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B3:4F:0D:25:A5:58:CC:E1:E0:01:B9:07:26:27:72:52:78:28:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85e71494-19c8-399d-b2e9-550bed594777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:61:27:27:59:82:7e:c0:4e:ea:7d:42:d9:eb:ed:6d:50:a8:
         1d:3b:9b:e4:6f:79:b2:57:28:f5:bd:cb:41:a3:fe:0b:36:ba:
         8c:49:be:4d:be:68:33:a0:5b:30:f2:8b:c5:3c:d1:f7:bb:21:
         73:de:85:27:8b:d0:9e:70:8d:5d:51:4c:95:b7:51:d0:1a:86:
         03:28:0b:a9:70:5e:b2:55:32:78:d1:3e:51:40:f6:a9:52:10:
         0a:4d:98:79:30:c3:13:5f:73:93:7e:2f:8e:87:18:bd:bf:91:
         ec:87:41:c1:c3:90:93:0c:9b:28:6a:f4:60:7c:1f:70:1a:46:
         06:dc:32:4b:de:f8:5a:06:05:1b:8f:ae:e1:f4:fc:e7:3f:ba:
         22:9e:c4:bd:fe:e4:a7:21:af:16:44:1d:a2:33:e8:54:cc:1f:
         a1:10:a0:07:81:f2:12:ef:35:8f:81:1f:83:7a:88:1e:b4:6a:
         3f:84:96:c9:84:ba:69:68:a5:59:70:dc:f0:e1:ab:06:72:2f:
         d2:21:c1:1a:30:e0:4c:de:0a:c3:ee:be:ef:fd:c5:fc:1a:ce:
         30:de:92:f6:fc:f7:06:47:69:e5:c2:6e:90:2d:6a:5b:c6:99:
         ad:f5:a1:1d:81:20:bf:f1:89:d6:63:ff:09:2d:8a:97:6d:47:
         99:8d:95:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCClqKph+A2v1YlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YTRlOTU5NWQtYWU4OS00NjEzLWI2ODMtMzNiM2E1NzA0OTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlovYVg6s4Pm7xbml1GMAVnAhcg1EJjzM7mc
CCydbkVA4BHR82W5iG6Zsw5HQlg5a+SCVLsOksJllqPjOwtKaQoUTjmdL54Ub/an
EAfPNEzJkKdHF476aZG4TuraxqHTbwOOxzN/yoSQszyl3Uy8yRjc2mWnuRDk22Qe
RvGK5Zf9Oc2xES828i1izK23jxEg35G4WVzMRhjOs+mSxf34fqynZRKseM3Ug1P1
GVok3GqUps5SY6JmQwzm8W4Qx+lpOex9EQuqixycuGEquOpw1odl4fSDJmjRFUYs
8OTb3X4NCFb9YmS5odlQdyNF3MZKBwZkzm3GoAiYU9vNYIaQvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCzTw0lpVjM4eABuQcmJ3JSeCj9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODVlNzE0OTQtMTljOC0z
OTlkLWIyZTktNTUwYmVkNTk0Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRT9eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBhJydZgn7ATup9Qtnr7W1QqB07m+RvebJXKPW9y0Gj/gs2uoxJvk2+
aDOgWzDyi8U80fe7IXPehSeL0J5wjV1RTJW3UdAahgMoC6lwXrJVMnjRPlFA9qlS
EApNmHkwwxNfc5N+L46HGL2/keyHQcHDkJMMmyhq9GB8H3AaRgbcMkve+FoGBRuP
ruH0/Oc/uiKexL3+5KchrxZEHaIz6FTMH6EQoAeB8hLvNY+BH4N6iB60aj+ElsmE
umlopVlw3PDhqwZyL9IhwRow4EzeCsPuvu/9xfwazjDekvb89wZHaeXCbpAtalvG
ma31oR2BIL/xidZj/wktipdtR5mNlSg=
-----END CERTIFICATE-----
Generated at Tue May 13 12:33:23 2025 by rpki-client