Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08bcff8d-8056-3db3-97c6-dd0d9305d6df.roa
File:                     08bcff8d-8056-3db3-97c6-dd0d9305d6df.roa (raw, json)
Hash identifier:          8LNht6C9v1gdlsqHAsJjv16lBkziYkS8E5Pz9nRMSHA=
Subject key identifier:   F9:8E:93:F0:E7:19:F0:A4:75:90:BB:68:FF:88:48:5E:54:18:27:7E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849E0BF8B21C7C08DDC4B7B1700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08bcff8d-8056-3db3-97c6-dd0d9305d6df.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        66.91.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8b:21:c7:c0:8d:dc:4b:7b:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=52935aad-1eac-4dc2-b663-79ed5d50f6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:35:2a:ba:f3:89:f6:71:13:52:6b:5f:14:f7:
                    1a:62:94:60:06:77:5f:4e:9e:96:d0:d6:cc:97:bf:
                    5f:32:e1:c7:b4:3f:01:0d:fa:c4:67:a1:0c:3b:45:
                    c1:48:94:29:fe:75:31:8d:0b:1c:5c:83:39:f9:b8:
                    2e:bf:f3:ed:59:77:f5:c9:a5:b2:35:4a:c5:23:42:
                    c7:53:28:83:d7:01:89:60:4f:4a:f9:95:5e:9b:7a:
                    f9:94:2f:c0:16:e8:c1:29:57:64:e5:a3:1e:e3:94:
                    19:79:85:72:6e:c3:be:d4:87:bf:ad:47:f6:b2:af:
                    d1:f1:9f:ac:c9:d8:75:72:3f:97:fc:a5:10:11:3d:
                    33:86:c4:53:ec:f8:f6:1a:a4:fe:57:5b:3c:32:bc:
                    de:81:3e:35:19:1a:ea:7b:48:e9:9b:78:76:0d:a4:
                    6b:db:aa:96:df:f5:8e:75:14:0b:a0:bb:c1:93:3d:
                    d3:f3:23:a7:75:c2:93:65:4c:f2:97:e3:50:9f:3d:
                    b2:f0:ed:5c:e1:34:da:76:4e:df:6b:d2:f7:87:25:
                    c0:fc:b7:39:1b:a8:5d:cb:4a:48:d2:3f:65:f5:35:
                    3e:1d:25:ee:5c:80:7a:f2:81:31:ab:59:7b:e6:39:
                    a1:12:81:4d:f2:c6:fe:d2:2b:51:ad:ac:14:f4:85:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:93:F0:E7:19:F0:A4:75:90:BB:68:FF:88:48:5E:54:18:27:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/08bcff8d-8056-3db3-97c6-dd0d9305d6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.91.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:de:5b:2c:8e:08:20:88:c1:a2:db:a7:a4:f3:eb:73:c6:
         be:b1:b9:04:e9:a9:c8:85:36:5d:5c:5d:ef:44:c4:49:6c:fc:
         73:11:01:f6:f6:e0:26:63:fa:1d:53:fc:57:64:51:ec:53:1d:
         19:1b:77:11:10:6b:03:a4:31:b8:ca:94:0a:b1:09:ba:52:89:
         bd:8a:0e:d7:ce:b2:9d:65:b6:d1:0e:0b:b2:a8:98:e6:a8:c3:
         67:14:65:82:12:0c:46:d8:12:56:35:e8:21:66:65:67:67:83:
         e0:42:ce:75:a0:f9:4d:42:1f:46:66:34:66:03:89:77:d5:1f:
         c2:0d:72:44:84:d3:da:70:3a:48:a1:af:bf:6e:2a:58:06:69:
         ab:e1:6e:0f:f9:79:cf:a7:a7:80:af:54:0f:23:d7:7f:e8:a1:
         e7:57:fc:1c:ad:0d:35:3e:99:9a:7d:46:81:79:9e:37:b1:60:
         60:47:3c:36:a4:e7:05:7a:63:67:5b:b2:44:e1:29:b0:f6:f4:
         13:86:c9:70:e6:c4:99:bd:87:fc:80:1e:c9:c2:59:bb:86:d9:
         5f:ff:bb:7e:fc:02:08:ea:01:7a:a6:58:78:be:f7:d2:03:76:
         24:ba:91:2e:c0:76:a6:da:99:8c:cf:05:e8:ca:72:87:54:51:
         a9:ca:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:41:29 2025 by rpki-client