Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dd41691-527e-3d5f-99d4-a633d8b558ec.roa
File:                     5dd41691-527e-3d5f-99d4-a633d8b558ec.roa (raw, json)
Hash identifier:          O24TWt10rOl8iur8eBi0w7v3gJU6IR4KfQ6wSTKYavE=
Subject key identifier:   B3:01:8C:0D:FE:1D:53:E9:BB:15:22:AF:A9:F2:2F:AB:99:BC:72:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328583932187942F57B6F3439B07A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dd41691-527e-3d5f-99d4-a633d8b558ec.roa
Signing time:             Tue 09 Mar 2021 05:00:00 +0000
ROA not before:           Tue 09 Mar 2021 05:00:00 +0000
ROA not after:            Tue 02 Mar 2027 05:00:00 +0000
asID:                     33127
IP address blocks:        67.53.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:32:18:79:42:f5:7b:6f:34:39:b0:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 05:00:00 2021 GMT
            Not After : Mar  2 05:00:00 2027 GMT
        Subject: CN=6fa0f404-9558-43e8-8fa7-420966e05688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:b6:ce:f1:a0:80:84:22:6a:5c:89:36:6d:
                    a0:ed:99:1f:c9:25:5e:88:5a:77:af:19:48:d2:9a:
                    24:aa:fc:c2:3e:30:22:d3:da:e6:68:bb:bb:26:26:
                    ba:1e:89:2c:9a:e7:b4:fb:5f:c3:2c:14:8f:e1:ec:
                    01:35:26:57:1e:d9:86:9d:0e:ab:cc:68:9b:74:44:
                    4c:cd:40:08:72:60:f0:66:6e:37:56:8d:70:4b:92:
                    71:83:f7:e9:68:bf:67:31:30:fa:3f:fd:a0:eb:e6:
                    d4:8a:18:3c:a5:4d:d6:3e:ff:7e:bd:3b:a8:15:40:
                    44:25:61:37:59:1d:d9:55:c3:47:dd:b4:c3:fa:39:
                    7c:17:d5:77:4a:39:cc:f9:81:7a:96:90:4c:fe:0c:
                    b3:77:54:50:8e:8f:87:b4:bc:3a:34:f6:7e:b8:ef:
                    10:e9:a2:84:55:dc:1b:b2:d5:e6:cb:14:9b:92:8d:
                    e4:8b:c1:a7:b6:3c:eb:49:c3:b8:16:99:4f:23:37:
                    bb:1c:97:85:69:c3:2b:eb:f8:fb:69:80:a4:aa:56:
                    45:ac:60:3f:2d:40:74:b5:50:20:12:05:52:b5:bd:
                    7e:e1:af:17:ae:41:ef:76:ea:10:7b:c4:19:69:85:
                    2f:7e:a9:ed:d5:ee:b0:ef:80:fb:6f:a1:c3:f6:48:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:01:8C:0D:FE:1D:53:E9:BB:15:22:AF:A9:F2:2F:AB:99:BC:72:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dd41691-527e-3d5f-99d4-a633d8b558ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:ae:db:f4:d8:c3:be:f1:0b:3d:e6:a8:68:20:41:d5:9a:
         e6:0e:e1:43:5f:d4:f3:af:b2:90:1c:5b:a3:b5:aa:1c:a0:cb:
         67:d2:30:e4:70:85:cc:74:73:63:eb:4e:b8:17:5f:8f:6e:37:
         ad:eb:1f:8d:6d:d0:47:e5:ab:4f:f2:6e:e8:8d:99:32:44:63:
         88:67:21:1c:7b:5f:27:8c:24:8b:b3:40:bb:03:8d:43:f3:10:
         b0:63:79:ad:e1:96:3a:73:b3:74:50:15:4d:75:1a:86:73:71:
         66:fd:03:e7:52:f1:b2:eb:8c:8e:e6:b2:61:30:24:8d:47:7d:
         a0:1b:53:98:e8:20:71:ae:88:93:2c:61:79:ad:20:c8:43:5a:
         d9:01:23:0c:c6:db:54:79:c0:19:63:71:6a:fb:2f:83:79:bf:
         7b:5e:d8:43:31:a9:a1:16:98:44:8d:be:74:55:af:d2:94:39:
         b2:fa:ec:66:fe:5c:df:19:cc:bf:36:9f:6c:27:bb:0d:51:e0:
         96:f2:21:39:01:38:dd:24:7a:a9:b7:8f:80:33:62:e9:19:30:
         fd:b5:60:6a:93:b0:62:6c:e8:2f:a4:01:79:31:9a:35:3f:f2:
         fb:ac:14:2e:50:25:b1:9e:4f:f8:36:c0:01:32:3d:ef:97:8b:
         e1:b1:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:27 2024 by rpki-client on console-fra.rpki-client.org