Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a706fe24-211c-3d64-be5e-d3282947bf39.roa
File:                     a706fe24-211c-3d64-be5e-d3282947bf39.roa (raw, json)
Hash identifier:          GNMtkQrVytpbWoNhJIzo6/9rc+KKKdKPcM6VHExFBVc=
Subject key identifier:   21:17:8A:C5:7E:78:84:3B:A9:63:01:CD:2B:78:2E:65:96:9F:E4:2D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1D6D18B60E430F52A3440
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a706fe24-211c-3d64-be5e-d3282947bf39.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        97.78.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:d6:d1:8b:60:e4:30:f5:2a:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=578515a7-d728-4759-8832-11da8ca71084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:1a:bd:a4:fd:11:9d:17:3a:6f:34:b2:c7:
                    f0:1a:94:00:0e:31:90:80:cc:e6:0b:ac:d7:87:fa:
                    b8:08:e8:29:4d:31:43:54:5c:8f:09:fa:53:59:3b:
                    b2:78:b8:9f:93:fa:4e:e7:46:20:89:a7:de:2f:5d:
                    db:4b:36:42:77:02:49:64:cf:6e:9d:6c:99:4e:43:
                    f9:6f:45:8a:f3:a4:19:fd:99:3a:c5:cf:31:a5:48:
                    8f:2d:02:01:23:9c:1d:3b:d8:1a:c2:6c:52:7c:16:
                    e2:6b:a4:8b:10:ba:6d:d0:7f:d7:75:34:f3:83:55:
                    aa:e8:22:a4:7e:03:f5:26:10:9e:92:1f:3f:74:f4:
                    40:e0:13:4b:95:37:a6:66:0c:20:4c:a9:32:cf:05:
                    90:09:7d:8a:64:7b:fc:4e:ca:4d:f0:f4:3a:ef:47:
                    4d:db:a7:78:75:96:77:be:06:27:c8:3b:3e:77:37:
                    08:ba:f1:4b:af:8a:22:5b:72:18:df:7f:4f:2a:9f:
                    5c:d2:94:1b:34:2f:56:66:11:09:80:12:c9:f4:74:
                    49:1a:b9:3c:15:16:25:26:2a:9a:6c:85:6f:23:38:
                    d6:08:d3:73:c3:4a:ab:e0:b2:75:75:ed:2b:bc:9a:
                    03:ca:74:04:f3:42:b5:41:98:e5:cd:42:c0:22:40:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:17:8A:C5:7E:78:84:3B:A9:63:01:CD:2B:78:2E:65:96:9F:E4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a706fe24-211c-3d64-be5e-d3282947bf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7e:85:16:19:9b:50:0f:c6:60:cb:1d:c3:a6:de:f6:23:b5:
         3b:51:35:0e:e5:17:e8:a7:65:aa:5c:8b:ee:91:37:36:d1:96:
         dd:53:dd:72:4f:b0:23:1b:31:97:dc:f0:9c:eb:ca:30:9b:2c:
         88:b4:1e:be:bf:59:5f:2f:35:97:9e:4a:1f:24:07:7c:b6:f7:
         40:be:14:25:00:4e:a5:e0:dd:ce:5b:a3:a0:45:69:ef:e9:26:
         75:84:ac:eb:d2:3e:cf:82:f7:bd:75:2b:68:e7:41:79:ae:18:
         fb:66:74:de:69:c5:74:95:62:21:54:10:ac:70:b2:5a:3f:8f:
         3f:5a:e3:5e:ed:a7:90:68:91:c8:66:ec:a0:9b:4e:89:b7:05:
         86:e5:e0:b8:18:b1:97:ea:07:7f:ec:cf:ad:78:7c:b5:ad:d0:
         6e:b9:f3:a8:bf:a1:7f:8a:57:7c:f8:44:12:53:08:6e:e4:bf:
         a6:54:95:6e:71:07:17:a9:1d:55:1b:6b:74:62:26:7b:d0:34:
         e9:6b:a6:fd:a7:9c:bd:99:c9:89:d3:f8:1b:1e:9d:09:39:c4:
         22:40:24:1f:f0:0e:4c:b8:05:54:ac:69:36:d8:31:d5:52:ea:
         f5:67:ba:f2:3c:fd:74:12:1a:4f:8d:88:6c:5d:43:97:f6:43:
         d5:c4:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:09 2025 by rpki-client