Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
File:                     ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa (raw, json)
Hash identifier:          XtEzweS02FAfA3Fdio2Mxj7EWRFKF5/5Jmilk49yDwo=
Subject key identifier:   54:3A:0A:20:15:C6:5B:23:65:BD:95:65:88:B6:3F:7C:73:E9:40:DC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A610F3305F744A2AD41C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33363
IP address blocks:        68.207.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:61:0f:33:05:f7:44:a2:ad:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=8d755f3d-6b12-4b5f-95a6-69cf3f08cf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:05:23:26:8c:82:9b:fa:42:1c:58:a3:b8:
                    44:0f:97:55:01:af:ba:65:a3:9d:8f:ea:2c:f8:e1:
                    f0:62:2c:a3:87:6d:6f:cd:6f:86:38:09:41:8e:01:
                    9d:03:d1:a4:a7:93:0c:21:d2:53:3b:31:9f:78:5e:
                    40:37:96:b2:0c:d8:6d:e6:0b:4c:b3:80:3e:f5:02:
                    99:74:09:ad:91:b7:b2:c1:3a:78:3c:b6:14:54:31:
                    f2:83:fb:25:9e:d0:16:b3:8b:66:ac:62:3a:04:c5:
                    6a:19:94:bd:2c:52:72:e4:e5:ba:c4:c0:86:14:f9:
                    8b:bb:bd:7c:51:71:3c:02:3a:00:13:24:8e:00:20:
                    7e:a4:ae:17:33:32:6d:c9:95:ca:14:88:c2:ff:af:
                    64:d1:38:d8:bf:06:49:13:f7:2d:69:28:79:c5:9c:
                    3c:d0:ec:06:d6:34:18:da:3e:07:c6:2c:97:b2:cf:
                    8a:34:07:cf:c9:4d:be:a2:60:94:62:9c:af:7b:2e:
                    79:62:c0:16:c6:98:be:d5:72:0b:a3:7c:b8:60:93:
                    5f:e7:3f:62:1c:af:e6:c7:69:25:fe:cd:56:04:0f:
                    df:64:c6:50:c0:0e:38:20:2f:ee:88:ec:50:70:2e:
                    48:bf:0b:bf:30:72:93:b8:df:94:a5:13:be:cd:37:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3A:0A:20:15:C6:5B:23:65:BD:95:65:88:B6:3F:7C:73:E9:40:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac6ed5b5-7181-345b-bea7-38a871d4eddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:ff:68:e2:be:84:73:12:9f:58:b7:b0:47:12:e9:b6:03:
         5c:9f:ab:7c:df:b7:52:f5:06:54:04:0e:26:87:57:22:4e:50:
         3c:6a:8d:f5:90:5a:87:b2:a9:ac:b5:f5:f0:ac:af:24:ad:1c:
         64:44:fd:4f:81:77:8a:85:2e:66:0c:d6:e2:8b:7f:0a:09:57:
         a4:b9:be:d5:41:a3:27:1d:50:68:2d:5c:ab:39:c0:07:9d:81:
         47:80:c4:41:47:9d:4f:33:57:4c:df:28:8d:f2:9a:76:03:ad:
         f6:25:b0:07:94:3a:13:4f:91:e6:a7:7d:4e:73:34:39:54:c9:
         94:6f:7c:59:5d:14:bc:69:07:75:37:ff:3c:e9:25:d1:0c:a0:
         ad:d6:02:49:b6:4e:e0:76:62:fe:b4:66:ca:d1:4e:ba:e1:d6:
         19:c0:41:28:3e:ba:69:a2:86:6b:cc:86:b5:fd:2e:5a:52:27:
         6d:4e:7e:86:12:f6:83:8b:b2:f0:1e:b0:55:ae:e2:ce:c1:9f:
         ea:75:05:4a:f4:42:37:21:0a:99:8d:0a:dd:fc:5f:17:33:05:
         47:3b:5e:c6:2e:53:cd:82:25:2d:e2:11:64:9a:b4:32:f7:de:
         2c:24:42:8d:22:72:5b:74:56:33:2b:f8:b5:c8:81:1c:de:63:
         21:16:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:50 2025 by rpki-client