Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/923de5d1-9f1e-3d33-9e65-25557db37f27.roa
File:                     923de5d1-9f1e-3d33-9e65-25557db37f27.roa (raw, json)
Hash identifier:          c9RJtXcdoYlEQJEyzz8cW0AO2mXvtQH17jH/NMYgYMQ=
Subject key identifier:   4F:63:A8:A1:47:12:D0:1C:41:7C:91:4B:13:40:B5:C3:97:C7:DA:92
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A65ABEF528CFBB95E3D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/923de5d1-9f1e-3d33-9e65-25557db37f27.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        97.76.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:65:ab:ef:52:8c:fb:b9:5e:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=103b89b9-711a-4e95-84de-53459fdfa371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:6f:6c:37:e6:7f:84:62:5b:bd:a5:ef:98:
                    2a:95:26:85:c5:cf:af:87:17:6e:11:9b:04:1f:2d:
                    0b:d9:10:8a:29:cf:2e:ce:2d:2c:83:88:93:ad:d2:
                    3c:36:e4:b5:3b:c1:23:6f:a3:c4:0b:ef:e8:68:82:
                    3d:37:cb:97:39:ce:92:51:f1:c3:3b:93:de:26:fb:
                    10:f0:f7:fe:e7:2f:86:ac:31:e4:49:38:e5:12:ed:
                    c4:27:e6:fc:f0:bf:05:0c:54:0f:3b:c3:e8:2f:63:
                    e4:1a:cf:3d:73:ef:00:00:9e:31:62:68:92:1b:65:
                    ee:ce:8e:9f:ea:ce:5e:23:0d:1c:ff:07:cb:27:96:
                    e3:06:97:29:3c:51:f4:ce:88:48:31:59:ab:66:61:
                    d6:7e:c2:76:3d:02:15:6c:ac:89:f7:ea:34:d9:c7:
                    6f:6b:09:15:72:7f:2a:31:7f:f8:fc:4e:dd:e2:f1:
                    ff:a2:22:8c:c5:f8:01:9f:c7:2c:1e:f6:99:ae:4e:
                    7b:a4:4a:d1:64:19:a0:d8:9d:9a:71:26:35:28:ef:
                    78:39:38:ec:84:82:23:93:32:c4:4d:93:6a:b5:58:
                    b5:06:42:b0:95:de:0d:cf:d9:0e:fc:0e:8d:a2:ae:
                    f2:32:8b:f7:51:58:ab:b5:3c:82:9e:27:9f:6c:1d:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:A8:A1:47:12:D0:1C:41:7C:91:4B:13:40:B5:C3:97:C7:DA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/923de5d1-9f1e-3d33-9e65-25557db37f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.76.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:14:f9:fe:ff:7c:e8:63:b1:87:65:62:87:b9:d8:5d:cd:e5:
         d5:c9:be:2e:64:af:c0:26:d9:6b:24:98:9d:1a:94:48:0a:8a:
         38:42:28:03:73:7e:2b:d0:89:10:c8:69:a0:86:fc:e3:ae:ef:
         3c:46:3f:66:1e:29:97:56:c9:28:c7:64:88:f0:4e:b1:d0:57:
         c4:38:da:46:57:11:fc:20:27:af:2a:12:53:dd:e4:18:4d:b8:
         53:3a:7e:1d:9d:40:a9:3d:50:7f:80:90:94:10:78:d6:c8:d6:
         0d:8b:94:5a:c3:db:f9:5f:ba:8f:56:73:c8:82:31:cb:d0:75:
         58:fe:15:17:2c:49:7a:07:9f:00:69:09:70:00:f8:4b:2c:7b:
         c5:38:d0:61:29:d1:08:56:bd:cf:5e:ca:44:98:95:e0:cf:e6:
         d8:04:1c:94:9c:aa:9e:11:03:55:4b:56:66:b5:2a:ce:73:5a:
         4d:70:0b:a2:e7:09:d4:e3:1f:f9:ee:d2:4c:3b:89:c2:f9:53:
         a8:38:30:e7:aa:8a:9b:57:53:a9:f6:ef:61:4e:b6:69:ab:98:
         2b:8b:0d:fb:1c:1d:9b:b4:af:f0:4e:d5:94:67:02:8a:4d:c5:
         84:e9:96:8a:19:ce:21:00:84:c9:4e:99:4c:52:89:71:04:55:
         39:e6:53:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCmWr71KM+7lePQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MTAzYjg5YjktNzExYS00ZTk1LTg0ZGUtNTM0NTlmZGZhMzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKBvbDfmf4RiW72l75gqlSaFxc+vhxduEZsE
Hy0L2RCKKc8uzi0sg4iTrdI8NuS1O8Ejb6PEC+/oaII9N8uXOc6SUfHDO5PeJvsQ
8Pf+5y+GrDHkSTjlEu3EJ+b88L8FDFQPO8PoL2PkGs89c+8AAJ4xYmiSG2Xuzo6f
6s5eIw0c/wfLJ5bjBpcpPFH0zohIMVmrZmHWfsJ2PQIVbKyJ9+o02cdvawkVcn8q
MX/4/E7d4vH/oiKMxfgBn8csHvaZrk57pErRZBmg2J2acSY1KO94OTjshIIjkzLE
TZNqtVi1BkKwld4Nz9kO/A6Noq7yMov3UVirtTyCniefbB1HjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9jqKFHEtAcQXyRSxNAtcOXx9qSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTIzZGU1ZDEtOWYxZS0z
ZDMzLTllNjUtMjU1NTdkYjM3ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUzsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUU+f7/fOhjsYdlYoe52F3N5dXJvi5kr8Am2WskmJ0alEgKijhCKANz
fivQiRDIaaCG/OOu7zxGP2YeKZdWySjHZIjwTrHQV8Q42kZXEfwgJ68qElPd5BhN
uFM6fh2dQKk9UH+AkJQQeNbI1g2LlFrD2/lfuo9Wc8iCMcvQdVj+FRcsSXoHnwBp
CXAA+Esse8U40GEp0QhWvc9eykSYleDP5tgEHJScqp4RA1VLVma1Ks5zWk1wC6Ln
CdTjH/nu0kw7icL5U6g4MOeqiptXU6n272FOtmmrmCuLDfscHZu0r/BO1ZRnAopN
xYTplooZziEAhMlOmUxSiXEEVTnmU3E=
-----END CERTIFICATE-----
Generated at Sun May 11 15:09:42 2025 by rpki-client