Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea577f4e-36c9-3401-9b30-aece10c64bef.roa
File:                     ea577f4e-36c9-3401-9b30-aece10c64bef.roa (raw, json)
Hash identifier:          OG812P+Av2+3hH/zJKIM1y+EU5WfeFVoJEBPNNIxCRE=
Subject key identifier:   DE:35:AE:04:37:59:3D:DC:28:EC:70:D1:F6:53:6C:5D:23:5A:DA:24
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A36B53838167AD76C1100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea577f4e-36c9-3401-9b30-aece10c64bef.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        67.53.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:36:b5:38:38:16:7a:d7:6c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4549730e-156b-4cf6-80e7-ef167967cea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:76:24:d2:cb:36:7c:91:0c:94:92:b2:bd:2e:
                    25:02:51:e9:de:10:cf:8c:07:2d:45:27:4b:2d:a0:
                    f7:77:34:e8:12:c7:d7:3a:ee:6a:2c:29:5a:42:31:
                    2c:0c:47:e4:65:c4:b9:02:30:b9:0a:5a:ff:21:50:
                    2d:f4:9d:c6:3a:49:f8:bf:f0:b4:82:db:69:e5:69:
                    e6:a0:6a:8b:11:fe:b3:35:7d:3e:4b:87:c0:56:16:
                    da:8a:60:60:9d:88:5f:0f:e5:a1:03:09:d6:d5:69:
                    1d:02:c1:b0:9d:94:ed:3b:29:e9:39:3b:cd:3b:35:
                    2c:44:af:a9:84:41:09:87:4f:b4:05:52:ef:68:13:
                    9b:74:37:51:89:1c:96:cf:af:e1:8b:7a:bb:67:b1:
                    48:c5:31:ce:3a:bd:7e:52:b1:f9:e9:74:fe:a0:f6:
                    73:8e:2a:f9:2d:eb:e4:c0:a8:d2:e5:12:36:e8:27:
                    fd:00:85:31:12:0d:36:04:6c:43:c2:f0:97:01:34:
                    3b:f9:a7:89:4d:ce:ef:19:ef:52:82:0f:c7:4a:de:
                    ed:f4:9d:6d:dd:1e:e3:b9:ba:54:ac:95:42:3d:03:
                    b5:38:b4:19:f8:00:83:0c:88:f1:83:eb:b9:89:0f:
                    26:54:46:9b:80:c3:ea:56:9e:40:00:66:b5:d2:37:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:35:AE:04:37:59:3D:DC:28:EC:70:D1:F6:53:6C:5D:23:5A:DA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ea577f4e-36c9-3401-9b30-aece10c64bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:10:ec:aa:25:1f:82:aa:fb:0d:8d:3d:75:0a:f8:4e:04:16:
         2d:39:9e:7e:9b:72:cc:fa:9d:c0:13:d5:42:3a:a8:39:33:a8:
         a6:2a:f2:95:0e:f6:bb:2c:39:73:0b:57:77:a7:03:e7:5f:2a:
         26:38:9f:cc:56:d4:24:d7:f8:78:05:36:73:73:74:5d:35:66:
         78:c4:03:3d:1a:c9:5d:5c:58:3c:75:5d:a8:e1:49:8d:fd:be:
         83:1d:8c:fa:17:55:32:c2:89:26:9c:64:31:ad:aa:9c:1a:b0:
         48:c9:23:fa:4b:60:93:dc:16:27:b6:38:71:59:86:23:9b:02:
         b8:ca:04:eb:4a:24:f0:0e:43:d5:46:b1:c5:c9:e8:0d:0a:ac:
         7c:c4:6b:86:ae:83:76:28:4e:f1:e4:75:20:3f:22:c4:d4:d5:
         df:90:ff:a9:b7:aa:ab:56:45:4f:62:23:5d:52:1e:fd:09:11:
         10:a0:18:40:11:21:61:2e:28:27:20:2d:1b:01:ee:3b:f6:d2:
         e3:6f:38:18:4e:72:b8:a4:36:fe:73:be:0b:1f:43:66:9f:5b:
         f9:13:ee:22:19:65:af:98:86:55:3e:36:0b:a8:4d:6f:d8:28:
         c1:47:0f:c8:f9:64:b0:27:f2:c7:f0:3b:be:8d:47:ff:fc:27:
         e4:89:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:38:56 2025 by rpki-client