Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94ca6bfa-dfa7-37df-ae19-b63be306c929.roa
File:                     94ca6bfa-dfa7-37df-ae19-b63be306c929.roa (raw, json)
Hash identifier:          g7BrzPvxg0krRKg9e8I7x42XDrQb/319tDu42rdf/6g=
Subject key identifier:   E1:6B:1F:DC:51:56:03:83:FF:EF:E7:82:E5:84:18:A2:82:9D:AF:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A52D5F0662F29720FB280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94ca6bfa-dfa7-37df-ae19-b63be306c929.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     19115
IP address blocks:        24.169.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:52:d5:f0:66:2f:29:72:0f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8ec76487-d4a1-4479-bce0-e16a465136a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:cb:25:33:5a:11:ac:01:64:f0:03:7e:b6:
                    b8:76:cf:53:54:3b:25:33:4f:30:a6:8f:f5:5c:4f:
                    d4:4d:a7:75:5e:45:18:23:80:c1:fb:18:0f:bb:0c:
                    36:d6:31:7e:b2:b7:1b:9c:f9:cd:0a:36:1c:99:9d:
                    f5:af:64:81:1f:59:c8:82:1d:57:33:50:9f:eb:e0:
                    86:a0:cb:88:09:84:7e:34:7f:49:d2:7b:eb:cb:5d:
                    82:36:62:5a:0e:19:1f:60:ad:dc:df:87:eb:26:c2:
                    ae:86:03:92:06:65:61:a2:13:1b:82:d2:12:c9:1f:
                    69:7a:32:30:70:c6:f5:a0:2e:3e:86:f5:31:cf:e8:
                    11:dc:e8:38:34:93:1f:d5:cf:e7:c8:2b:5c:32:c8:
                    97:1a:f8:12:32:96:82:99:c5:a5:6a:8a:4f:43:24:
                    ca:e7:ed:97:5a:00:ba:61:fa:45:fb:e3:68:96:a4:
                    e3:c7:1e:a5:6f:fc:3f:6e:a8:a6:8a:b9:46:8d:3b:
                    c9:0b:63:1f:67:35:64:86:89:57:d2:f2:fb:09:b5:
                    d7:93:61:50:09:91:e1:5f:ca:c8:e5:aa:1f:49:bf:
                    56:86:85:8c:2c:9a:e6:6c:88:2d:32:c6:49:fa:41:
                    4d:17:a8:5c:b5:f1:34:fc:43:10:8a:4d:8c:89:69:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6B:1F:DC:51:56:03:83:FF:EF:E7:82:E5:84:18:A2:82:9D:AF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/94ca6bfa-dfa7-37df-ae19-b63be306c929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.169.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:96:44:f1:2e:cc:48:4e:ac:c0:f4:df:b0:7d:4b:56:e2:6e:
         c3:75:31:e9:c5:59:10:70:29:16:af:84:4d:83:c5:c5:68:50:
         3e:d2:9f:18:83:ca:a4:8a:82:06:94:6a:a0:70:c7:09:60:18:
         28:59:fb:c0:6e:f9:da:6e:b1:c4:5d:00:26:2b:e5:0f:d6:fa:
         e5:cd:de:31:3d:76:9e:44:29:3b:da:85:f2:af:61:c3:6c:71:
         ff:dc:22:f2:5a:10:c7:ba:90:0b:fd:a1:50:53:8f:c0:39:4a:
         e5:38:7d:50:df:94:6b:dc:46:de:c4:c4:82:ec:83:50:7f:d2:
         eb:99:04:87:ac:9a:14:2f:d4:a2:0a:b2:68:7f:20:2e:bf:31:
         22:67:8b:4f:8e:d7:5a:f2:8b:35:db:8b:0f:6d:40:ef:23:c0:
         14:bb:6e:a7:70:f6:45:26:53:8e:8c:71:1c:39:41:23:cc:b3:
         e6:38:5a:17:5d:b9:7b:f3:ff:ed:fc:53:ff:8b:08:e7:92:ac:
         59:e4:e4:42:55:6c:99:2f:9a:f9:49:00:9c:43:4e:81:18:47:
         2e:8e:b9:e9:ce:06:c9:9f:98:02:d7:ae:95:b9:c3:4a:79:88:
         31:28:94:fe:76:8f:7f:bd:28:a2:7d:73:b2:a7:ae:af:f9:a5:
         88:cd:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:43:24 2025 by rpki-client