Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05f4cb4d-128c-3676-a028-06d566019c41.roa
File:                     05f4cb4d-128c-3676-a028-06d566019c41.roa (raw, json)
Hash identifier:          1byTyojaIcHkEhjLdBHjUyqs1YwuFp693gByIDnOfxU=
Subject key identifier:   6B:7A:4E:9D:E4:D8:E1:30:3A:BE:1D:D8:9E:87:5D:C7:87:B8:11:07
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A936B5C7084B316349F6E3200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05f4cb4d-128c-3676-a028-06d566019c41.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        192.154.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5c:70:84:b3:16:34:9f:6e:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=a9911b22-1382-4210-95fc-a65c4cb6e3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:87:cf:be:89:b5:01:b1:e0:c1:c0:74:79:
                    66:0e:08:c8:e6:b0:a7:d3:31:86:b8:c5:3b:6e:29:
                    1a:c8:73:25:53:8f:65:75:5e:14:c5:b1:93:a0:ed:
                    28:d2:31:e8:28:21:f6:e0:79:7a:67:0f:c8:7b:31:
                    f7:d4:75:6f:04:e4:92:76:1c:2a:1a:59:5c:42:e7:
                    54:bd:b6:55:e3:d2:24:9a:ea:6b:7a:32:1a:2d:b0:
                    25:fc:ed:f1:4c:4a:c1:f3:55:d2:2c:c0:b6:60:ce:
                    0e:af:17:0d:1b:99:b4:bf:20:17:07:5d:bb:af:a3:
                    12:e1:3c:24:97:8a:35:aa:22:16:01:e4:65:1d:4f:
                    74:9e:48:dc:8b:8c:c3:3f:82:c7:6c:fe:15:07:c3:
                    32:60:9f:49:fe:52:b6:ba:6e:17:20:ae:22:7c:eb:
                    b8:8a:07:61:44:da:cf:a8:4d:68:d7:4b:08:f2:9f:
                    11:51:5f:b8:cc:46:0b:56:ca:67:fe:87:bc:22:52:
                    09:71:d9:82:93:b0:23:fd:14:bd:1a:86:dd:e7:4e:
                    19:bb:f3:16:b5:9e:72:57:6c:cd:84:59:1d:6d:7f:
                    ee:cf:8f:88:60:9a:92:c7:87:0e:7c:f6:5e:72:06:
                    50:01:9a:91:4b:af:c7:f2:94:43:2d:1d:64:3a:97:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:4E:9D:E4:D8:E1:30:3A:BE:1D:D8:9E:87:5D:C7:87:B8:11:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/05f4cb4d-128c-3676-a028-06d566019c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:76:30:c4:15:ec:47:db:76:ae:46:99:3e:5c:73:f8:4b:89:
         3a:89:91:2b:1a:36:da:04:3f:7f:28:00:84:3a:0e:78:64:1d:
         cc:30:76:51:08:99:a7:f6:f3:3f:2a:c0:69:44:ba:78:73:71:
         e3:98:b4:bf:ea:62:ed:dc:86:b7:d0:94:6e:ee:58:ca:57:69:
         27:7f:8f:33:13:7d:1c:54:79:bd:8e:91:c9:78:c7:80:f2:0e:
         e5:84:65:e1:7e:6c:39:78:e5:e9:ed:43:9b:09:17:bf:46:94:
         59:ca:b0:02:41:a9:80:f9:e2:cd:45:74:96:fb:c6:d1:be:7b:
         50:71:38:14:9b:97:33:39:f4:69:6f:99:68:97:35:ad:16:83:
         b8:2f:9c:b4:c9:8f:a5:8f:6c:af:b9:b6:db:11:2b:ba:56:a8:
         25:b5:6a:1d:a8:eb:66:ca:18:af:05:2b:8c:1b:ef:69:9f:07:
         92:2f:c0:37:1f:36:b9:31:e5:a4:00:90:52:31:54:8b:fa:4b:
         72:f7:62:6a:3f:1d:0c:ae:fb:56:94:3e:a1:1d:1c:57:6c:8a:
         da:67:bf:1d:cc:cb:80:af:89:67:d9:50:70:31:d9:c1:40:8f:
         68:23:44:55:30:ff:1a:f5:e3:21:30:d7:07:db:d1:af:b3:22:
         73:c1:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:18:01 2025 by rpki-client