Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc35ad97-73c8-33f5-ad43-923e27575c2f.roa
File:                     dc35ad97-73c8-33f5-ad43-923e27575c2f.roa (raw, json)
Hash identifier:          gydhcWXDnyt017OmK1e7vKJtBg0SabnIfh8dwLQn6yE=
Subject key identifier:   9B:F6:7B:71:97:E2:85:06:1E:2A:93:4F:AB:8E:A3:F5:3E:93:02:65
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A5B41E18F7FFD58B95E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc35ad97-73c8-33f5-ad43-923e27575c2f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        67.52.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:5b:41:e1:8f:7f:fd:58:b9:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2155ad3a-15c5-4c3d-8626-78ece63bd84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:28:93:c5:f9:16:11:29:2b:12:a9:85:23:
                    36:0b:d9:07:25:cb:c1:2c:b3:8e:25:b6:79:49:31:
                    ca:46:55:6f:eb:cc:53:ff:50:23:cd:8f:09:52:16:
                    94:d9:4b:7f:17:d3:9e:0a:f2:79:5d:33:c1:7d:a4:
                    d8:d0:11:6d:20:de:f9:ba:54:89:25:42:09:73:d1:
                    2a:43:dd:3a:5c:d2:51:a4:85:d2:a2:6b:f0:a1:92:
                    0d:c3:fc:22:58:24:ed:11:fa:58:81:c2:f9:8a:b5:
                    a7:50:ba:74:9d:26:97:91:f3:42:47:d0:2e:6e:b7:
                    17:2b:78:1b:c8:ff:19:9a:b9:6f:a6:a6:7b:fc:e9:
                    d0:d7:0c:25:20:be:de:5d:8a:3f:55:28:3e:52:20:
                    82:e8:9b:51:4a:cf:b4:17:d7:fc:7e:d0:41:1a:8e:
                    46:23:df:e5:f8:b8:31:46:f2:ae:f9:f8:df:1d:9f:
                    82:34:4e:99:9b:4e:1b:ee:6a:61:25:e6:d1:30:ff:
                    be:3e:4c:38:35:bd:52:e0:b1:0d:d2:f2:51:12:6a:
                    c7:94:e3:34:a0:7d:4a:83:83:f0:b2:f4:81:e8:be:
                    00:ac:2b:8e:2f:ff:ce:ec:28:5e:cc:7e:e0:ae:59:
                    a1:86:b9:11:0b:cb:2e:10:a5:02:e3:ca:fe:06:66:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:7B:71:97:E2:85:06:1E:2A:93:4F:AB:8E:A3:F5:3E:93:02:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dc35ad97-73c8-33f5-ad43-923e27575c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:31:fe:04:5a:40:78:0f:83:42:fc:1c:9f:3a:33:4e:e3:
         71:dd:3a:48:5c:69:7b:26:1d:3c:12:43:cb:3e:70:c3:3f:39:
         21:69:17:45:85:03:f9:63:43:7f:9c:a8:e4:a0:5d:70:e9:a3:
         cd:19:c5:e7:8c:2f:7b:17:8d:18:8f:a6:32:c7:b2:0a:b8:9f:
         b8:53:ab:64:ce:3c:10:ba:1a:fb:62:36:5a:2e:8f:5b:f0:31:
         ac:c5:fa:20:eb:e2:38:6f:cc:eb:31:c0:65:ef:10:0a:df:9b:
         c9:5f:f1:94:9b:6b:c6:49:31:79:f0:fe:7c:0a:28:f4:b8:bc:
         b0:a1:8f:db:c4:4f:8c:54:0b:49:bd:7a:cf:31:cc:8c:07:0b:
         a8:c5:76:c2:49:ab:66:85:3a:c2:ea:5c:8e:f9:9a:10:82:fe:
         3f:32:53:75:78:84:24:2b:35:01:4a:c3:dd:0f:ba:0c:d9:7b:
         b8:1a:26:45:48:24:67:73:f9:d9:85:30:04:e0:13:7b:63:0a:
         fa:de:0b:6f:96:fa:9f:44:11:e9:3b:11:fd:cf:a9:4c:27:39:
         7c:c6:22:2c:b8:c3:1a:e9:cd:78:08:de:7a:6f:30:72:2d:e5:
         e7:04:82:28:d1:19:cf:7a:c2:37:db:4a:d7:9e:6e:7b:8f:b3:
         bd:97:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:00:29 2025 by rpki-client