Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa
File:                     11b35ce1-5e53-38df-9ea1-38d466407bfb.roa (raw, json)
Hash identifier:          8BrUEbnVhVhGN5+VN+tEZ7I03Ihnl2epEbUM3Y6ULnI=
Subject key identifier:   2B:12:4E:D3:9F:DD:E1:1B:C1:31:F5:FE:3A:DA:93:2D:E1:5C:73:CB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849E2253B359B08CFBCAE526670
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     45671
IP address blocks:        172.111.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3b:35:9b:08:cf:bc:ae:52:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=45cc6e70-8a8d-4f81-a906-d5c176321f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:40:67:87:5b:16:0d:ec:60:f2:8e:c5:06:
                    96:df:52:49:77:70:7c:31:a3:56:75:ad:bf:c8:d9:
                    bd:21:80:dc:f6:2b:2d:77:84:5b:14:6f:90:b9:d6:
                    79:c6:1e:5b:ff:d9:45:e1:d7:af:73:9b:2d:c7:5b:
                    11:00:0f:17:3d:86:69:1a:bb:48:41:24:55:6d:a8:
                    59:74:2e:e5:59:42:57:24:54:e9:9c:10:94:3d:1a:
                    19:d3:c4:b1:41:25:c1:1a:81:2a:a7:bb:61:18:d7:
                    25:18:e9:5d:8a:ee:32:c9:36:68:e3:8b:72:56:07:
                    0d:77:a4:77:e1:aa:40:10:3f:21:55:e8:b4:56:00:
                    d8:0b:f0:ac:af:e4:c3:69:85:d5:08:8c:50:9e:8c:
                    de:36:93:c0:2f:a3:93:4a:76:4c:f6:b1:7b:34:bb:
                    4f:34:3b:67:14:51:0d:9e:f5:de:82:3e:83:b0:4a:
                    4e:d3:a7:16:11:3c:f4:a4:e1:98:61:c4:40:8c:70:
                    b8:7c:90:22:25:df:a1:4e:56:17:85:ae:17:89:8a:
                    9d:27:12:04:e9:14:7c:43:85:5f:e2:ad:82:b1:bb:
                    57:69:a1:b3:0f:77:31:16:d2:de:37:8b:fa:c8:6e:
                    4a:5d:74:1a:d5:66:30:70:e0:71:48:6b:4c:7c:d3:
                    fc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:4E:D3:9F:DD:E1:1B:C1:31:F5:FE:3A:DA:93:2D:E1:5C:73:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b35ce1-5e53-38df-9ea1-38d466407bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:9f:c3:e7:d7:f9:45:3f:92:34:2f:02:ec:be:f8:86:8f:
         5a:e3:b7:21:81:8d:e8:2d:70:23:40:c6:8f:c4:88:20:eb:3c:
         36:e4:fc:7b:84:aa:ca:a2:0d:7c:56:9d:70:d1:49:e5:e3:b3:
         49:51:7c:98:c5:4b:6c:96:c3:ec:e8:2e:24:97:1a:15:f9:1c:
         93:cf:ee:72:7c:dd:a2:99:78:0b:45:83:1c:80:e4:ca:b7:08:
         e2:e9:b5:99:4c:6b:a2:93:59:b0:70:fa:09:6f:49:f1:1d:38:
         1b:9d:86:76:72:0c:c4:88:07:bc:21:e1:c7:b2:a2:0e:27:ed:
         6d:d1:97:43:be:21:5a:e5:60:0b:dd:e1:a7:8a:88:1b:af:af:
         22:60:6c:41:b9:54:5b:39:fc:11:0f:79:4e:3b:21:49:58:70:
         a9:d9:cc:c7:e3:a7:29:e4:7f:d9:80:b4:94:e1:76:9d:bd:7e:
         77:58:70:cc:fa:23:52:c3:58:e1:48:af:4f:88:fb:bb:68:e1:
         78:4b:6f:5b:3c:ac:b7:ec:e1:06:7d:57:95:ae:b2:08:d4:cc:
         6f:d8:a2:82:c7:1a:9c:21:80:0b:3d:5d:c7:a9:8f:9b:45:99:
         60:ed:18:02:d9:28:16:1b:03:21:f6:97:ad:12:a2:f9:5a:55:
         08:4c:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:57:32 2025 by rpki-client