Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa
File:                     9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa (raw, json)
Hash identifier:          hYn1el3IVcJdnljNka+RU7zLJX/O6g/MueudzaDSA8w=
Subject key identifier:   AB:26:C8:74:D2:C0:9E:61:CA:5D:BC:AC:37:00:14:CD:B9:AC:69:5E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A37EABE6B2F5D61854900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        70.60.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:37:ea:be:6b:2f:5d:61:85:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=323e8d77-4d79-4c46-8e19-cd23a70a9cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:64:ea:1f:58:f9:81:d6:db:f9:c5:82:0e:
                    85:ed:a2:9f:9b:69:14:d8:b7:74:55:0d:95:81:63:
                    2e:e0:2d:aa:6d:4c:1c:f9:f0:80:60:13:72:7e:37:
                    cc:a6:6c:c2:c2:d1:4a:af:d3:92:c1:2b:02:6f:20:
                    2e:eb:7c:5f:e8:a7:7f:2f:63:f1:42:44:71:66:81:
                    61:d2:e0:27:88:38:4a:89:10:1a:a2:93:01:72:98:
                    2c:a1:b5:f7:83:18:61:28:f7:8d:5d:ad:42:db:91:
                    76:ce:cf:78:ee:b0:34:e9:46:ee:23:c9:74:13:fa:
                    ae:85:f4:d2:b6:49:85:27:11:a6:9d:53:1e:50:e4:
                    a6:8a:a6:19:83:bd:ad:37:ea:c5:90:6e:34:ff:e4:
                    cf:cd:47:9b:dc:47:03:cf:15:c8:9a:a0:d0:40:02:
                    a6:2a:40:cb:7b:56:33:4d:2a:28:ab:4e:05:6d:1a:
                    6e:a3:a4:1a:e7:06:6c:15:d1:e8:1d:ce:8c:7c:4c:
                    f9:85:a7:e4:31:0e:9e:7f:4a:34:46:b9:6c:8f:81:
                    d7:eb:8a:07:90:0a:48:33:09:7c:fb:52:e2:69:d3:
                    29:e6:66:86:a3:f8:33:13:d5:ea:72:1c:fe:31:fa:
                    90:2c:e3:39:68:81:f9:89:ab:44:a5:44:95:94:dc:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:26:C8:74:D2:C0:9E:61:CA:5D:BC:AC:37:00:14:CD:B9:AC:69:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9e6ad873-0e0b-3fa9-9d17-624d68ec4d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:ce:0c:47:92:46:1b:c1:58:53:e3:01:dd:bb:4e:6e:50:
         d5:08:d3:08:ee:30:a3:c0:66:be:83:2a:b8:95:c5:6e:8c:e8:
         62:80:94:33:1e:4d:d8:23:8c:ac:54:f4:af:3d:f0:96:f5:4e:
         a9:8b:8d:ba:e8:72:f0:49:10:41:02:0f:06:20:12:c5:47:5b:
         cc:f9:86:ca:f6:17:cb:75:28:b7:2a:12:17:c4:72:7b:b1:26:
         8f:da:bb:3e:41:c8:af:23:67:a7:83:1b:de:6d:80:bf:1e:0f:
         8f:72:c3:54:7f:19:2c:51:16:33:a2:70:21:81:83:8d:6a:15:
         fe:82:eb:07:c5:44:85:f9:c8:74:3a:41:11:82:25:4a:00:34:
         15:91:18:3b:b1:da:76:f9:e3:08:a9:2a:c2:07:ea:19:c1:03:
         22:aa:3d:04:db:ea:71:d7:12:03:15:6e:34:4b:b5:67:c3:c2:
         9f:06:03:22:02:80:20:85:df:14:b5:7f:b8:86:2c:67:f3:49:
         27:9f:03:20:cc:d3:c0:24:8b:5f:b0:7f:13:d4:58:44:95:86:
         a6:11:be:08:60:1c:03:8a:95:f4:4f:bd:e2:56:87:53:f7:32:
         a2:cc:9c:86:1d:8b:d5:3d:f1:0a:2f:07:f8:e2:f9:92:b6:4d:
         64:09:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:10:50 2025 by rpki-client