Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c11355bf-f7ac-362b-9878-828a7392a133.roa
File:                     c11355bf-f7ac-362b-9878-828a7392a133.roa (raw, json)
Hash identifier:          daxWHDkbj78PA87SnZWmnBgqCWzaBGXXDYitg8T7Lfk=
Subject key identifier:   34:30:38:5D:9B:D5:DF:A9:15:10:09:E0:8B:52:DE:F5:6B:64:CE:6C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160E53A6DDE0602F0638F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c11355bf-f7ac-362b-9878-828a7392a133.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        24.27.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e5:3a:6d:de:06:02:f0:63:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=f9d4fbe4-3a35-4334-b605-e072609cad06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:e1:f4:69:d0:2d:d1:05:e5:ed:f6:b6:eb:
                    e6:ee:7a:74:4a:42:f3:fc:e9:dd:62:76:d4:49:7e:
                    dc:a4:3a:75:d0:fe:37:df:02:44:4d:94:6a:8a:2e:
                    20:98:31:14:d5:48:f2:44:9a:fe:5f:d0:eb:48:6f:
                    0b:01:25:a4:38:3c:18:f3:61:79:26:59:fa:2c:27:
                    d5:92:57:39:c4:03:e1:a8:78:6a:49:e4:78:1d:26:
                    52:2b:77:4c:3d:b2:f5:9d:09:f2:35:dd:33:9e:8b:
                    27:d2:6f:bf:d1:b3:f9:d8:1e:a9:50:f9:b5:3c:47:
                    a6:7f:1b:37:da:03:13:f0:ed:7d:8a:c8:3c:fc:51:
                    1d:23:36:77:74:af:26:0f:5f:5b:80:27:4a:23:3b:
                    2a:2e:bc:00:65:99:b1:e7:e4:2c:dd:6c:ba:b5:86:
                    bc:82:84:b0:27:97:01:31:fa:04:1a:45:d8:37:b6:
                    b7:c4:23:74:13:57:77:08:f3:f2:b7:33:8d:c9:5a:
                    af:ec:a8:8e:ee:f2:48:71:e8:e0:cd:47:9f:f1:06:
                    08:ba:f1:0a:7d:dd:a5:db:9d:3f:d8:33:d3:b8:dd:
                    06:4c:43:73:05:01:c4:1f:30:a8:24:22:2d:06:38:
                    2d:f5:4a:51:c9:6c:0d:bf:cc:84:cb:bb:4a:0e:b7:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:38:5D:9B:D5:DF:A9:15:10:09:E0:8B:52:DE:F5:6B:64:CE:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c11355bf-f7ac-362b-9878-828a7392a133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.27.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7a:88:3b:ca:66:89:ab:8c:f4:c9:6d:f4:d3:31:26:8c:64:
         ee:6b:db:19:81:a8:21:fc:33:c1:3a:93:cf:86:4a:4b:63:1d:
         cf:c7:bb:ad:67:85:8f:96:79:7b:f7:30:14:c4:07:a2:80:5b:
         d4:3a:21:a5:2f:30:c2:61:03:42:f5:94:96:27:83:f2:6b:23:
         bd:1c:7c:2c:68:fe:9a:50:00:6c:3b:8a:4f:22:7d:7e:36:ad:
         e0:48:7d:41:b9:2f:34:10:4e:bf:49:e5:23:ee:2a:27:93:5e:
         96:a4:94:f4:27:b3:46:db:d3:93:c4:41:c8:bc:10:32:cb:20:
         56:32:9f:f9:fb:ab:96:cd:9b:4f:b6:42:f4:63:62:d0:68:e1:
         e3:e7:1e:97:db:98:95:b8:61:86:26:a3:40:e4:ed:15:56:51:
         31:c8:5d:89:99:83:a2:bc:fc:60:45:5a:2a:a0:b5:30:1c:f7:
         91:a1:fd:32:f5:18:cf:7d:36:d9:08:7a:b6:4b:ec:3a:ba:d9:
         23:10:98:35:eb:80:71:91:b5:e6:2e:28:09:05:10:90:96:15:
         ff:9a:cb:55:d2:03:50:c0:f4:d0:f3:d7:aa:76:1d:59:51:98:
         ae:9c:a9:9c:28:41:8c:85:1b:02:fb:b6:33:16:4c:b8:1f:55:
         23:6b:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:01:59 2025 by rpki-client