Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b93a691-ffa4-36d6-9da9-c5fa6c651edf.roa
File:                     5b93a691-ffa4-36d6-9da9-c5fa6c651edf.roa (raw, json)
Hash identifier:          eZYICXd8izCsmTXIrPrCrOd4AgVylOn8d9pyuRfTdjc=
Subject key identifier:   91:CF:16:7D:2F:24:FD:57:F1:BA:50:E8:57:5F:CA:6B:AF:AB:4B:DD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849E4EFBAB996256B574FAB01C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b93a691-ffa4-36d6-9da9-c5fa6c651edf.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     16787
IP address blocks:        2001:1998:380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:ba:b9:96:25:6b:57:4f:ab:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=5cb370fe-ee5a-4415-b53b-29e27ce3e7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:31:4e:2f:f0:36:63:7f:17:33:58:4e:0d:
                    c0:bc:cc:66:49:53:14:6a:1e:60:a0:f8:4c:15:61:
                    c7:ab:76:3f:2a:b0:12:b5:b0:5f:78:8f:38:36:9c:
                    3e:dc:38:40:7a:f4:dd:3b:3d:af:0d:6c:bf:21:ad:
                    65:ca:38:ae:1a:75:bc:23:ce:73:73:78:c8:2c:85:
                    ba:cf:6c:4a:ef:b1:8b:1f:2a:05:34:14:86:50:a4:
                    ff:ae:2e:91:a4:37:c6:ab:fa:a6:aa:c8:71:d9:65:
                    32:ed:14:60:8f:27:f4:42:67:f8:3e:4a:10:5b:76:
                    95:a0:61:16:6f:d9:a8:94:48:95:82:62:78:77:9f:
                    11:d3:c9:b3:b8:98:c1:f4:72:13:df:7c:b0:ea:7c:
                    66:70:bc:9c:15:74:05:eb:44:db:b7:4c:35:89:6b:
                    62:23:2e:ae:d3:b6:c0:79:01:39:2f:12:12:39:7f:
                    ab:88:5b:f5:c6:43:c9:ac:3e:f0:55:79:f6:db:fe:
                    f3:1d:0b:13:68:3f:19:04:83:95:34:3b:e6:f2:be:
                    12:dd:2d:5b:96:a8:9f:e7:55:29:61:f5:25:62:88:
                    b1:84:39:1f:b3:d2:8f:8b:81:2a:2c:30:a3:f6:a8:
                    91:e4:48:1c:fb:77:ef:e3:7f:81:5d:b1:80:29:ae:
                    55:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:16:7D:2F:24:FD:57:F1:BA:50:E8:57:5F:CA:6B:AF:AB:4B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5b93a691-ffa4-36d6-9da9-c5fa6c651edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:79:86:e6:a1:5d:9a:d1:10:c7:1f:f4:5d:ef:6e:ba:26:
         df:4a:ec:77:11:44:a9:2a:b9:06:22:c6:54:76:7f:5d:f3:92:
         f1:9d:de:34:74:61:5f:1f:a3:2b:c6:1b:bc:7d:c6:79:eb:da:
         cc:a5:45:06:4b:cc:ec:60:aa:33:5e:0f:39:ab:87:34:54:45:
         3f:a2:34:11:0d:e7:16:10:c1:21:61:9b:3a:7b:30:71:0d:ba:
         79:fa:4a:c0:cb:9b:cd:97:f1:a8:32:3d:18:d1:5b:36:1c:ab:
         97:cc:e0:13:32:79:a2:f4:1a:ae:f8:67:35:36:13:b1:2c:59:
         6d:3a:95:0a:0d:e8:c6:d9:a1:7c:b0:22:21:49:66:d4:32:52:
         60:2b:f3:76:eb:68:2b:96:e1:98:7b:04:5b:54:2a:e2:83:de:
         30:b8:1b:bb:15:c0:78:7b:6d:a3:0b:39:bd:4d:15:74:80:52:
         fd:07:5d:6b:c2:cb:9a:04:16:c9:4d:e4:e0:57:4e:38:12:ab:
         5c:c1:90:88:76:05:a0:97:9f:89:c5:b6:49:60:e4:dd:2c:28:
         ee:e0:e0:d2:64:d5:20:c8:cb:53:87:3c:fe:01:a3:69:1f:1b:
         09:78:09:22:b6:41:13:13:56:bf:c6:1b:80:c1:42:1c:13:19:
         40:3a:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:47:10 2025 by rpki-client