Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa
File:                     11602b37-c071-3dc7-a256-44b24da1d026.roa (raw, json)
Hash identifier:          pu5HQg0ZvTUD030pF5/l5pHYrvNFHMUPbS5bertlZps=
Subject key identifier:   FD:D7:91:76:62:E7:DC:06:F4:7B:0D:B0:0A:A6:33:D9:4D:72:18:85
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C405E5355AC472E4FD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        68.207.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c4:05:e5:35:5a:c4:72:e4:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=89c8777f-23cf-4cc8-8bc8-cb9e121c147d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:f6:52:5b:86:25:69:b7:6c:b8:55:df:99:
                    2d:4a:ba:12:2d:90:cd:65:a7:29:e9:b4:48:2a:13:
                    fc:74:00:ca:03:3c:e7:57:84:fa:28:c8:ff:d7:3f:
                    19:7a:69:7a:39:9b:c6:a3:cd:2e:b9:15:9a:ce:5f:
                    26:5e:92:e3:1b:7c:4f:ef:cd:17:3b:c5:fa:00:0b:
                    ba:6f:2c:22:27:8e:52:f9:c8:5e:4f:3d:b2:e7:74:
                    b7:30:dc:8f:e7:67:06:3c:5b:99:e2:bd:28:bd:c7:
                    7f:0d:a2:e5:67:7a:41:36:70:ef:49:7a:7c:b3:23:
                    02:37:bf:8e:57:e2:d3:2a:21:b6:ea:83:96:5e:da:
                    68:a4:c4:6a:e2:29:35:14:ec:57:93:67:9b:c0:47:
                    67:5e:bf:71:11:0f:0c:19:48:6e:59:ae:67:db:c9:
                    c7:eb:14:68:dd:02:00:80:ac:73:51:cf:98:0d:05:
                    38:47:53:80:cd:ae:58:0e:34:9f:5d:24:52:f4:b1:
                    9a:c5:8e:3a:ae:cb:73:e5:4c:f1:63:95:bf:e9:16:
                    f7:b1:40:29:0a:bf:04:04:a8:02:94:ed:b1:95:d9:
                    49:94:74:14:ed:49:f8:d3:4c:9e:74:1c:1b:3c:26:
                    64:29:63:5d:9d:5b:a4:e7:c9:eb:1d:fa:44:26:f2:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D7:91:76:62:E7:DC:06:F4:7B:0D:B0:0A:A6:33:D9:4D:72:18:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11602b37-c071-3dc7-a256-44b24da1d026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:ed:76:c9:2f:94:85:55:a2:cd:ac:d7:c6:ad:5f:f6:36:
         29:e8:ff:30:c2:e1:59:3b:ca:77:cc:69:4f:c6:39:c7:06:6e:
         41:59:38:7d:89:eb:1d:61:44:db:c2:60:36:f9:3f:26:1a:c4:
         7f:8f:25:cc:ce:5c:c3:fe:de:1b:e8:38:84:e2:00:e7:dc:f9:
         98:8c:ef:4e:d0:1b:f6:89:98:3b:0e:a0:4d:1a:da:89:8f:98:
         f5:27:ea:9c:fb:fc:e5:fe:26:d3:9b:d7:ce:d9:09:12:49:33:
         4b:13:a7:23:46:c3:78:53:3f:5f:49:74:11:55:65:54:ba:85:
         8d:08:6a:a5:54:90:59:4e:f3:82:74:c5:fb:c7:f0:03:93:19:
         bb:8b:94:2d:f4:46:88:9b:5b:5f:62:78:b8:13:03:a9:2c:42:
         99:27:da:09:7c:2d:71:fc:4a:05:a9:db:5c:26:f4:ca:cf:a1:
         c7:bc:41:74:2b:ba:37:96:c8:9a:84:c4:52:0c:8d:1c:69:e8:
         19:9e:95:fb:a2:a2:54:18:ea:1d:25:61:87:a0:3a:17:11:39:
         f2:29:03:fd:5e:9a:dc:fa:e0:ab:1b:5f:12:de:90:ce:6d:20:
         c9:2f:58:ec:38:93:74:0d:ac:07:44:f1:19:0c:ac:4c:71:81:
         e9:50:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:48 2025 by rpki-client