Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa
File:                     8fc3434c-d2ec-354d-b65b-901fe926927e.roa (raw, json)
Hash identifier:          fpgJD56rb1ZUBOM7dqW3rUosFReCHgDPLvDPP3jENBI=
Subject key identifier:   4B:FE:ED:6F:AE:AC:66:6F:AD:99:4D:F1:2C:AD:55:B3:D1:4D:B7:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1CD1AF486DD64CAD94C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16787
IP address blocks:        2001:1998:6f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:cd:1a:f4:86:dd:64:ca:d9:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=18d57e2e-210b-4420-a51f-663b166cfaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:db:e6:30:bf:d7:d2:a3:1e:3e:80:a7:9b:
                    f8:11:48:04:f0:31:88:ef:b0:d9:6d:8c:23:59:f7:
                    33:05:16:13:42:c4:91:d1:3d:b7:a7:b1:f8:77:6a:
                    a3:d5:15:5c:fa:02:f1:39:15:d0:4d:73:c8:88:7b:
                    b8:fc:43:bd:ec:da:87:12:60:00:7c:52:82:ea:86:
                    98:40:74:ea:cb:62:5f:13:d0:ae:ad:2a:ee:ca:8d:
                    b6:7e:11:f4:2e:a8:7f:8a:37:44:6b:f0:13:ac:76:
                    08:25:f7:4f:01:43:be:38:53:2d:1a:46:16:12:8f:
                    ee:37:5a:a6:f3:ea:5c:1d:ca:20:40:41:7a:eb:e0:
                    92:56:4b:92:aa:18:b5:73:b0:3f:d2:8c:3c:63:ea:
                    5b:90:cd:08:ce:83:bb:bc:bd:f8:91:0f:07:d9:b5:
                    64:28:46:da:c3:be:a5:dc:9b:6b:30:dd:9c:19:f3:
                    b2:90:48:6a:a0:e2:56:92:90:0b:9a:55:6b:16:94:
                    8a:c7:7d:06:09:72:56:32:8e:c2:27:b4:b2:5a:06:
                    9a:6e:a1:ee:43:f6:52:e9:89:65:e6:cf:9f:e5:71:
                    00:2d:f3:b0:d6:07:d8:94:3f:66:ff:dc:83:ff:be:
                    90:65:bb:fd:01:99:20:59:fa:13:a1:8f:e7:85:7b:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:ED:6F:AE:AC:66:6F:AD:99:4D:F1:2C:AD:55:B3:D1:4D:B7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8fc3434c-d2ec-354d-b65b-901fe926927e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:6f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:ff:00:1d:a8:f3:2f:a7:10:4d:29:3c:0d:e2:99:5d:e5:
         2c:ab:e1:f9:f1:a6:a6:ce:be:00:21:ce:de:3f:df:b8:82:62:
         e9:31:9b:69:66:50:0a:0a:f3:18:3c:ef:89:ab:20:e0:1c:fd:
         3a:c5:22:d2:a4:af:8f:5e:34:af:2b:32:07:e2:3c:ac:74:a5:
         52:7b:27:30:f7:d3:fd:e3:60:4d:45:c9:8a:cf:bb:bc:ca:c1:
         43:1c:33:f7:43:91:8f:82:4b:04:bc:db:66:5d:7b:ed:95:5f:
         37:e1:13:f2:f1:01:9d:56:ba:5c:3a:25:f8:c6:07:6a:bc:23:
         17:c7:65:7c:99:bc:21:8b:f6:ec:d6:25:d7:87:ab:02:95:77:
         aa:fc:4b:b5:d8:29:ef:63:fb:df:b8:c7:d6:b5:a4:1a:eb:43:
         20:77:3b:b2:c9:12:40:c2:bb:c9:4f:09:46:eb:bb:c5:e7:64:
         d2:57:92:14:0d:45:57:53:c9:3e:6b:18:b0:82:88:da:18:ed:
         2d:f0:2d:68:cb:e7:80:b0:29:d3:36:d6:6f:10:12:b1:06:79:
         81:fd:c1:7e:06:2b:08:94:eb:d7:4e:6f:c6:63:2b:ba:e1:4f:
         0e:90:1c:4c:d5:86:9d:33:40:da:84:d5:a3:69:6d:c7:a9:e3:
         c6:0c:96:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEji0c0a9IbdZMrZTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MThkNTdlMmUtMjEwYi00NDIwLWE1MWYtNjYzYjE2NmNmYWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWPb5jC/19KjHj6Ap5v4EUgE8DGI77DZbYwj
WfczBRYTQsSR0T23p7H4d2qj1RVc+gLxORXQTXPIiHu4/EO97NqHEmAAfFKC6oaY
QHTqy2JfE9CurSruyo22fhH0Lqh/ijdEa/ATrHYIJfdPAUO+OFMtGkYWEo/uN1qm
8+pcHcogQEF66+CSVkuSqhi1c7A/0ow8Y+pbkM0IzoO7vL34kQ8H2bVkKEbaw76l
3JtrMN2cGfOykEhqoOJWkpALmlVrFpSKx30GCXJWMo7CJ7SyWgaabqHuQ/ZS6Yll
5s+f5XEALfOw1gfYlD9m/9yD/76QZbv9AZkgWfoToY/nhXus3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEv+7W+urGZvrZlN8SytVbPRTbcUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGZjMzQzNGMtZDJlYy0z
NTRkLWI2NWItOTAxZmU5MjY5MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEZmAbw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADuq/wAdqPMvpxBNKTwN4pld5Syr4fnxpqbOvgAhzt4/37iCYukx
m2lmUAoK8xg874mrIOAc/TrFItKkr49eNK8rMgfiPKx0pVJ7JzD30/3jYE1FyYrP
u7zKwUMcM/dDkY+CSwS822Zde+2VXzfhE/LxAZ1Wulw6JfjGB2q8IxfHZXyZvCGL
9uzWJdeHqwKVd6r8S7XYKe9j+9+4x9a1pBrrQyB3O7LJEkDCu8lPCUbru8XnZNJX
khQNRVdTyT5rGLCCiNoY7S3wLWjL54CwKdM21m8QErEGeYH9wX4GKwiU69dOb8Zj
K7rhTw6QHEzVhp0zQNqE1aNpbcep48YMlkc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:29:20 2025 by rpki-client