Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26d0ec63-dc17-3e78-aece-a6d578edd17a.roa
File:                     26d0ec63-dc17-3e78-aece-a6d578edd17a.roa (raw, json)
Hash identifier:          EtUSYo1eSKUxP071PW7Q2Rli47tIY8kaYmTThuO+W4s=
Subject key identifier:   F8:EA:F2:33:DD:AA:55:9C:D5:0F:05:35:EF:D7:44:11:D3:ED:0D:31
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584A698B1B063F0EA9BA27E72A60
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26d0ec63-dc17-3e78-aece-a6d578edd17a.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        204.235.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1b:06:3f:0e:a9:ba:27:e7:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=759a648a-d658-4b63-83c7-1b85fdb3b7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:25:e5:0d:d5:1a:a9:9f:e2:ef:b2:45:6d:
                    9f:9b:34:8a:b5:a4:92:ce:0d:01:64:f0:ec:fa:40:
                    23:a4:e4:e3:6d:89:3c:48:7a:b2:0b:96:62:91:3d:
                    33:6c:e3:56:af:9a:d1:0f:40:c4:bd:5d:2e:0e:95:
                    82:dc:11:6a:44:9e:4f:d1:90:1f:22:d4:78:46:02:
                    bf:7d:1f:83:fc:e8:49:a9:69:b5:f6:3e:21:8f:a7:
                    78:b8:49:7b:2d:0e:b4:63:b3:7e:db:e0:03:c9:9c:
                    62:84:e4:27:27:87:be:ed:09:92:b5:a5:df:91:0d:
                    54:fe:25:9a:9c:de:84:cf:25:9f:13:81:b2:17:d1:
                    ca:25:7b:e0:64:36:26:f2:ea:4d:cf:6a:cc:6b:5a:
                    00:a9:d8:0c:d3:f1:60:db:33:19:3e:c2:ea:9f:2d:
                    49:96:ee:28:41:b7:39:24:33:e9:03:3c:44:06:d1:
                    d2:03:a0:78:22:71:d2:ba:1c:5f:5e:6b:22:bd:b2:
                    aa:a8:2a:0a:d3:08:12:2e:39:fd:2c:4f:2e:80:c4:
                    d9:0a:c5:1c:06:13:81:c8:2b:55:c4:52:d0:53:31:
                    bc:fe:ad:5d:56:6e:b1:38:38:91:10:0b:1d:3a:00:
                    7f:d8:6c:1c:a8:e6:1e:93:42:72:dd:f9:87:d0:2a:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:F2:33:DD:AA:55:9C:D5:0F:05:35:EF:D7:44:11:D3:ED:0D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26d0ec63-dc17-3e78-aece-a6d578edd17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:50:b8:8c:ed:22:e0:c0:8c:c3:a7:43:b1:32:cc:e3:ae:e9:
         2b:1e:9d:6e:15:00:88:10:6f:2e:30:d0:8f:62:0c:eb:f4:5c:
         47:4c:c1:27:63:8b:8d:27:7d:e7:81:1e:b5:b4:d0:7a:31:9d:
         95:7f:2f:f6:ba:ca:fc:ba:4c:d4:b3:88:15:5f:80:8e:48:da:
         8e:d7:7b:a5:ef:7f:33:ea:e0:96:5b:46:5d:56:9d:aa:1a:af:
         fc:dc:82:db:7b:90:09:31:cb:8c:90:6b:89:ef:59:ae:40:78:
         8a:e7:b0:b9:e3:86:40:bc:18:2f:b5:d8:71:39:fb:ed:ef:f6:
         fa:55:25:6b:23:f3:07:52:e3:c0:15:a8:6d:85:43:cd:a2:79:
         15:21:34:75:96:c2:35:2e:e0:18:b6:3f:96:fd:f7:8a:5e:45:
         0f:ce:6f:e5:38:4b:1e:cb:75:57:50:87:ec:4d:0c:95:15:0c:
         a1:f6:2f:54:1b:f2:94:3b:d1:01:06:f0:e2:29:8f:07:d0:0b:
         43:f3:62:1f:6b:a0:d3:53:9a:33:d4:cd:c4:e1:34:ee:85:d6:
         e4:3b:41:9d:2f:a2:84:fa:d2:88:03:3a:2e:93:c9:4f:9b:80:
         d7:a2:9e:0f:ed:46:2d:22:5f:38:b0:77:9a:78:20:7d:9c:c3:
         7a:ad:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:24:17 2025 by rpki-client