Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/228a6588-e26b-3c65-a415-04a693424a50.roa
File:                     228a6588-e26b-3c65-a415-04a693424a50.roa (raw, json)
Hash identifier:          xPOaqtwcPUOGzD1BrpvtXd2ct624qorpgQN7+2xUlSU=
Subject key identifier:   86:34:59:F0:15:80:AE:3C:E5:7A:A4:88:04:61:9D:D0:BA:02:73:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B8FC71065F07F22D5000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/228a6588-e26b-3c65-a415-04a693424a50.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        67.52.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b8:fc:71:06:5f:07:f2:2d:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a6972ff5-af1a-4156-b1e2-64b78963e1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:71:72:6b:db:bc:15:13:67:dd:5e:da:9e:
                    89:08:e7:8e:8d:cf:3e:98:85:75:cf:31:07:cf:67:
                    5d:3a:3a:4c:73:21:32:a1:2a:0d:ab:ff:49:05:52:
                    05:45:89:cf:d6:8f:25:21:65:2b:63:04:64:7f:6a:
                    01:a7:0a:cd:15:32:a7:a5:7d:93:b1:41:aa:ef:fc:
                    94:b8:6d:be:97:d2:85:58:ac:e1:bf:d6:63:06:4a:
                    f7:68:e5:68:c4:48:71:8e:8f:17:24:76:1b:3a:4a:
                    a8:40:55:73:7b:a9:dc:a4:97:83:34:b2:44:18:37:
                    95:d5:a1:be:bb:eb:b6:50:2d:f4:bc:a0:06:06:ac:
                    e5:5d:f6:88:ea:78:cd:00:d0:33:95:30:79:9e:ce:
                    60:cf:ba:7e:10:e9:92:26:0b:4b:6a:f2:ff:f0:48:
                    b2:45:d9:c1:87:22:a3:ad:a4:e4:3a:85:da:dc:05:
                    28:8c:ce:d3:2f:3d:e0:8e:e8:21:d0:a6:f5:3c:b3:
                    21:82:d9:24:ac:8e:0a:37:6a:15:8b:e8:a2:a4:05:
                    e8:46:28:da:4c:80:f4:36:e1:6f:80:09:38:93:45:
                    38:09:46:51:b5:36:99:bc:cb:57:a0:b8:63:3f:a6:
                    97:a2:13:05:4a:a3:a7:52:b9:44:17:e8:f6:33:64:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:59:F0:15:80:AE:3C:E5:7A:A4:88:04:61:9D:D0:BA:02:73:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/228a6588-e26b-3c65-a415-04a693424a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:d6:11:88:5f:9c:ca:0c:7b:e2:10:a1:30:7a:41:16:31:
         0a:0d:6c:6f:ef:e2:9d:a5:59:68:e5:03:9b:2a:ed:07:a6:ff:
         dd:e5:d0:ce:c8:1c:08:29:95:54:c3:f1:b0:1c:33:f8:20:37:
         31:72:b2:48:ca:82:14:14:1c:33:f4:2b:b4:37:a0:a8:f9:2f:
         cb:a5:c6:db:7c:f8:18:50:92:95:d5:99:15:b8:98:fd:3d:6e:
         ce:5b:d5:14:11:0b:d6:a0:7b:f2:1d:c7:4a:a1:5d:e9:4a:5b:
         7f:20:78:fa:73:aa:83:81:b4:67:7a:44:b0:4c:59:a2:22:90:
         ef:c2:7b:40:f8:39:50:3c:a0:f8:ef:94:f6:ae:02:81:9b:f3:
         01:b9:92:cf:66:20:19:4c:75:4d:c7:ee:d6:f3:b7:82:18:d5:
         af:24:a3:51:04:a0:73:e9:f8:40:02:a3:9d:61:de:cf:38:26:
         7d:e7:9d:13:c6:7b:ea:e8:46:48:95:e5:a9:dc:32:da:32:6c:
         c1:7a:fd:69:fc:b3:99:98:ac:2d:ae:2d:44:4a:3a:d6:d1:d4:
         16:d7:4a:c1:6f:25:5a:55:4e:91:3f:5a:0a:30:5b:d3:b2:4d:
         10:fd:1c:2a:26:d8:c8:9f:be:0e:2f:37:e0:8a:0d:92:4f:fb:
         91:05:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:53 2025 by rpki-client