Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
File:                     5955d366-6b28-3275-bd88-28b0af8fbd81.roa (raw, json)
Hash identifier:          u4qMYWU51vniMXVII66eEl1UG0YMY6nX5W+v6/FScBQ=
Subject key identifier:   07:91:94:CC:FA:3E:5A:E2:72:95:B1:CE:8E:A5:0C:8E:D5:0D:D7:4D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CE42EFBACD191993D300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        172.248.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:ce:42:ef:ba:cd:19:19:93:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=de99a667-6f19-4e64-a9a8-e2d6fe359bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:ff:ea:0c:db:8f:ab:dc:c7:fd:a5:21:97:
                    cd:e4:a3:78:76:70:6a:8b:32:b5:01:1b:e5:90:31:
                    cc:2e:fa:4c:65:2d:9c:10:8f:1f:6a:1d:88:44:d5:
                    ad:f8:d6:e5:82:34:9c:f5:a1:a7:16:2b:5b:e5:e4:
                    eb:7c:ab:ae:66:f2:f8:7b:3e:a1:db:f8:93:f6:08:
                    29:28:49:99:38:12:fc:81:1b:2b:e8:06:45:e2:8f:
                    f2:a0:61:e3:71:b3:5d:73:7d:c4:fa:71:e3:58:37:
                    d9:b7:f1:f4:89:09:f2:17:34:78:89:3c:97:75:4a:
                    e2:0d:b5:a2:1b:42:ab:ae:aa:0b:72:ed:ba:eb:ee:
                    15:9a:f8:00:ab:d0:09:5b:7b:5b:20:c2:37:08:58:
                    f0:a5:9f:e0:5e:56:48:2a:8f:68:21:99:74:f1:c1:
                    22:f5:1b:44:b7:52:96:97:d9:03:1f:17:42:a8:b5:
                    36:e8:2a:d3:67:7a:03:7a:9f:77:e9:3b:0b:d3:ec:
                    9c:52:a1:c9:1c:55:a1:08:fd:e0:d4:63:17:d0:7f:
                    74:d9:30:1e:48:54:6c:7e:2b:00:a3:78:df:16:71:
                    a7:b1:81:bf:5d:b7:0d:6e:b4:d7:9c:a1:3b:f9:0f:
                    f6:7f:f0:88:34:96:e4:a7:8e:73:28:ab:61:56:ee:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:94:CC:FA:3E:5A:E2:72:95:B1:CE:8E:A5:0C:8E:D5:0D:D7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5955d366-6b28-3275-bd88-28b0af8fbd81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.248.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:91:0a:e4:b5:dc:8f:41:92:8a:93:52:e7:e5:c1:39:9c:
         8c:9e:74:61:e2:8a:ab:69:4d:74:c7:1c:dd:28:fd:68:3f:fd:
         36:33:7c:27:70:45:f9:77:aa:3d:89:cf:1c:cb:e4:92:3e:2c:
         10:52:91:ef:29:75:34:0a:1a:7e:2d:5f:27:f1:84:ac:50:a3:
         1b:f2:ca:d1:8d:68:6c:45:d3:7b:67:95:89:95:c9:6a:c9:4c:
         a6:6e:0d:4c:e2:c5:1a:2d:6e:db:2c:f3:17:c8:f3:4f:c8:2e:
         08:73:2e:06:77:b8:69:69:19:12:e0:5b:16:db:9d:b3:53:20:
         62:1f:d9:7c:10:15:8c:e2:5d:be:38:85:3a:f9:34:20:65:c0:
         da:1a:5f:64:0b:58:d7:21:cf:c2:33:d2:b9:8f:31:db:64:94:
         f3:cd:ff:c2:72:54:59:74:14:fe:52:b5:5a:e9:7c:2a:50:d5:
         21:01:9c:e0:82:03:92:13:29:22:ba:4f:fc:7e:2d:f5:5f:5b:
         95:08:80:53:c9:c3:e0:1c:f6:31:6e:1d:36:72:19:e7:64:85:
         2f:09:66:d1:5c:bb:e7:6b:36:ce:db:ab:ab:51:2b:2e:63:a6:
         c7:1f:f4:95:27:ad:a2:8d:33:38:ba:75:76:4b:ec:56:86:34:
         6f:f8:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:24:10 2025 by rpki-client