Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
File:                     f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa (raw, json)
Hash identifier:          T9RzUQkLOksH6YzZMcbQ1FohQUftqwTZHfAza8TZl+w=
Subject key identifier:   D1:28:11:76:7F:64:80:67:0F:6C:ED:AD:38:68:E8:CC:52:C8:16:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16126D206FDA6CD679F0280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     393756
IP address blocks:        24.153.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:26:d2:06:fd:a6:cd:67:9f:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=885e14e2-52ca-40f9-bbe6-0b8089d4098c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:c8:b7:fd:17:43:7b:39:08:76:3a:44:b6:
                    2e:98:3b:33:cd:ee:a9:ee:5f:57:fa:10:29:16:a1:
                    84:e8:0d:29:f3:a7:42:2e:55:12:d4:e2:f4:20:89:
                    74:ca:b9:fe:f2:00:06:e0:24:98:80:a9:ac:4a:88:
                    9c:67:dd:d2:73:2f:69:a8:0d:aa:08:a5:a9:06:35:
                    38:21:17:72:b9:6e:9b:fa:df:85:67:c9:43:f8:33:
                    c0:c4:0b:1b:c9:39:21:bd:59:1f:81:f2:1e:1e:52:
                    61:6e:f0:97:5b:29:62:6f:4a:db:7f:a6:89:89:67:
                    eb:48:44:d1:63:8e:46:f2:9d:5c:6c:df:66:84:17:
                    56:80:67:5d:d7:74:71:81:e5:ac:55:8b:1b:7e:29:
                    95:5f:f2:23:51:b5:b2:07:d5:26:a0:83:22:95:20:
                    c7:b2:5d:5e:c2:84:91:7b:4e:b0:10:67:30:7f:b9:
                    c0:a4:13:f8:41:1e:12:ce:2d:86:90:d6:76:51:6b:
                    83:88:23:19:b2:c2:50:6c:2f:cb:cf:29:1a:ad:5c:
                    85:7f:7f:d5:13:31:39:60:e9:72:b1:01:1e:bf:82:
                    d0:48:2e:1b:68:56:23:cf:ae:fd:f3:42:63:bf:c4:
                    22:3c:9c:d0:bf:a9:9b:59:99:68:ad:ae:39:c2:14:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:11:76:7F:64:80:67:0F:6C:ED:AD:38:68:E8:CC:52:C8:16:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f3cdb582-b5cb-3a2b-9698-dc8ff8a4f69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:21:aa:c2:62:85:18:84:c8:85:b7:80:a6:2b:9c:05:d3:
         1f:e9:5d:fe:a3:e7:9d:f1:1f:e4:60:02:21:13:f4:d4:31:a6:
         6a:9b:02:0d:96:d5:b3:0c:5e:8b:45:a3:cd:4d:11:a5:13:f5:
         b6:fa:33:65:53:0f:a5:5f:36:2b:37:df:72:76:b1:06:59:b6:
         d6:3c:c7:88:24:04:b0:2b:f5:9c:25:7d:99:46:34:da:f4:d1:
         57:66:4b:b2:59:be:f6:71:d8:12:17:0a:bf:3e:5a:d2:85:8a:
         0e:2b:0b:f5:f6:b4:d0:e4:b4:21:1e:14:2f:22:31:bb:c3:33:
         4a:c4:eb:53:c8:62:a1:3f:53:64:da:3b:9b:99:d4:df:c5:13:
         a0:94:b4:b8:1c:d0:43:4f:aa:81:3a:79:5c:f2:85:84:e7:72:
         e8:41:68:6d:f1:fa:db:c3:d2:25:72:39:6a:22:d7:91:06:d8:
         37:40:e1:5a:96:b0:23:bf:a3:a5:bb:63:13:51:95:f9:82:a0:
         f2:94:1c:21:1c:ba:5d:07:c5:51:3d:7d:dd:7e:d4:9a:58:dd:
         63:e3:f0:ea:d2:96:88:e7:2b:04:ce:ac:1a:0e:90:d4:de:cc:
         80:1c:5b:72:a6:d5:7b:70:c0:1e:e7:ac:47:5a:d8:c3:b9:36:
         9b:6b:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:36 2025 by rpki-client