Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85d14340-470f-390c-a561-b4158898a7e6.roa
File:                     85d14340-470f-390c-a561-b4158898a7e6.roa (raw, json)
Hash identifier:          anJnfeshTY5jfobP47IC2l+ry9FgdF0Px+aSUtBnDaI=
Subject key identifier:   03:6B:1B:4E:E5:5E:5F:F7:52:52:E5:20:7A:49:4F:2E:05:52:B0:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D125A369972CC5BC013A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85d14340-470f-390c-a561-b4158898a7e6.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     8052
IP address blocks:        69.76.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:25:a3:69:97:2c:c5:bc:01:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=bc24ef7a-e72f-4947-814d-f0922c430e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:9f:84:67:fa:4e:88:e9:aa:8d:d7:dd:c2:
                    1f:4d:89:2b:18:05:a5:95:c0:fb:a0:d0:b2:1b:bb:
                    b1:cf:61:bb:d8:47:23:12:d3:81:2f:5b:54:f2:5f:
                    f9:a5:67:10:3f:46:11:7b:63:f7:da:4c:e0:e1:db:
                    05:f3:0e:72:c9:19:fa:e3:ef:b7:5a:a9:3d:45:4d:
                    76:49:2f:45:87:40:8d:28:b1:a3:c2:5f:68:43:5b:
                    37:52:e2:be:72:0d:23:0a:c0:b8:e1:d3:63:67:06:
                    b6:00:db:d8:2a:55:fb:1c:dc:1e:31:dd:8f:3a:a8:
                    fa:db:4c:37:f1:1a:72:99:fb:da:82:e1:d0:c2:2b:
                    1d:e9:a5:61:e0:da:c4:09:7c:57:c8:93:c2:bc:73:
                    0f:9c:1b:37:38:ad:19:45:89:af:0a:c5:b9:aa:d8:
                    9f:13:82:43:46:35:14:19:d6:6b:af:89:33:68:79:
                    b5:44:de:0a:31:5b:4c:e2:43:da:cd:12:9f:d2:2f:
                    07:5d:2e:24:ed:0d:f4:da:23:33:28:01:e1:90:79:
                    8c:31:87:c2:4c:87:d4:e5:16:87:dd:00:cf:a2:27:
                    d9:b4:d9:19:47:15:ed:0e:8c:68:c1:45:1b:72:f4:
                    43:cc:6d:fb:af:c4:27:2d:1c:a7:97:bb:24:ad:e4:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6B:1B:4E:E5:5E:5F:F7:52:52:E5:20:7A:49:4F:2E:05:52:B0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/85d14340-470f-390c-a561-b4158898a7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.76.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e2:75:74:40:d1:46:82:14:15:e2:d0:64:bc:66:7b:a8:de:
         bd:1d:31:c4:95:ff:28:ef:56:ad:09:24:25:87:c3:da:f0:b3:
         75:f2:90:84:16:d5:06:47:1a:98:df:3f:1f:11:91:8a:2d:9c:
         f4:63:8b:0c:bd:bf:67:a2:b8:45:82:88:5f:db:e7:bd:5d:8b:
         e2:f0:9e:27:8a:8c:7d:8e:e2:6e:37:14:2e:be:9f:8d:d5:07:
         db:81:20:89:08:35:fc:1c:b3:35:69:8d:a0:42:3d:8f:79:ad:
         78:bd:b6:f7:b7:4c:71:95:f5:ce:ff:56:be:f8:c9:85:0f:32:
         30:d6:d9:16:4a:96:29:34:23:25:f9:99:c7:24:8c:cb:74:ea:
         49:7b:0e:ef:05:eb:d7:4c:4a:9b:8f:eb:54:f9:82:0e:75:0d:
         37:b1:94:fe:f7:6b:f8:30:44:6b:87:f5:b6:2e:77:ca:d3:ec:
         cc:15:f6:10:cb:af:e7:5e:c9:a9:14:a3:6d:70:cf:d9:b4:ad:
         29:1d:39:62:76:56:ef:ee:b7:18:3b:ae:cc:f3:62:a6:6e:30:
         08:f2:60:5d:3b:43:1a:c8:43:00:1d:71:d6:66:20:52:36:b2:
         d1:4f:b5:d0:3c:54:10:6d:a3:47:a3:b0:07:91:92:d0:1f:65:
         3d:aa:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:37:41 2025 by rpki-client