Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b77b6533-3377-3e88-b292-0666636b61a1.roa
File:                     b77b6533-3377-3e88-b292-0666636b61a1.roa (raw, json)
Hash identifier:          NPtbkf3IXJv0078+8m5xVWWLhfPH6djQ2hSJAFKABs4=
Subject key identifier:   C1:19:70:C4:AB:32:37:B7:78:36:C6:C2:A3:D8:1E:A4:48:FE:AC:5D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D132E24020504F3AF84480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b77b6533-3377-3e88-b292-0666636b61a1.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        67.53.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:32:e2:40:20:50:4f:3a:f8:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=dea44e84-5637-4227-9099-66b4fd615508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:a9:59:9b:e3:aa:5b:71:df:98:fa:ee:e4:
                    c1:d6:32:3f:68:6d:a5:7e:64:10:13:cf:de:bc:d1:
                    cf:64:e8:5b:1f:ad:46:83:71:71:b0:ab:61:10:9c:
                    1e:35:a7:c6:c6:8e:51:7e:d4:cc:ec:e0:3e:6e:4c:
                    b8:0e:47:16:fb:04:6b:db:29:0d:cb:1c:48:0e:af:
                    b7:8c:6b:b5:60:d3:d1:5b:ad:55:fe:7f:1a:3b:5a:
                    64:6f:c8:db:4f:cc:14:aa:e3:27:24:2d:29:8e:32:
                    8a:50:03:f4:11:51:6d:63:91:4f:00:46:dc:d8:2c:
                    f9:93:63:ff:cf:cd:ab:dc:16:aa:d9:20:be:ab:15:
                    19:9d:8d:3b:1f:69:59:f2:b4:e2:b5:ea:e3:ef:80:
                    eb:66:42:9e:dc:bc:71:ae:cb:63:f0:9d:c3:0e:37:
                    30:c8:62:01:d1:60:1d:cb:54:67:05:2f:56:d9:ae:
                    6b:ff:48:11:38:8c:e4:b8:fa:6e:de:6f:87:2c:89:
                    c9:85:b2:75:3a:ba:15:e8:1b:7f:b0:0d:02:c1:13:
                    9c:3f:dc:c2:df:20:27:71:95:e1:71:34:34:01:0a:
                    ee:29:21:94:80:0b:ef:63:7c:5f:64:98:47:47:d2:
                    9c:b2:94:0c:4b:b2:e1:8d:d0:52:a1:e8:cd:cb:02:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:19:70:C4:AB:32:37:B7:78:36:C6:C2:A3:D8:1E:A4:48:FE:AC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b77b6533-3377-3e88-b292-0666636b61a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:83:94:76:42:00:20:d4:8c:31:fb:45:00:6f:1e:b1:3d:d8:
         52:3c:64:91:b4:f4:c3:c3:5e:f1:4b:9d:69:fb:b6:ac:f9:7b:
         4b:de:a1:de:04:ab:f2:f7:a6:01:5c:d2:c0:46:28:a3:fe:0a:
         9b:6a:d6:ce:02:d2:ea:4a:38:b3:1e:60:3d:f8:f2:8c:36:9a:
         13:89:6c:00:1c:30:d5:6c:eb:07:fe:c1:a2:f2:8d:17:4f:68:
         0a:1a:12:f1:f1:96:a5:1f:41:cb:bd:78:6b:e7:fc:37:30:4e:
         c2:38:26:72:58:0b:36:8b:ae:ff:73:65:ad:a9:5a:32:5d:34:
         42:e7:e6:cd:4d:3a:bd:9b:b0:ec:02:18:14:88:2d:9f:a7:d0:
         c1:34:c8:5d:6e:4c:dc:5d:ec:53:4c:ad:de:81:ed:bc:3b:54:
         43:3c:89:5e:08:82:ff:b2:22:cc:4e:1c:6b:2c:0e:a6:b1:51:
         e8:bb:f2:0b:b7:70:9a:3c:6f:f4:d9:82:2c:f7:cb:3e:b6:d6:
         0d:af:fc:27:87:14:98:8d:17:ef:81:56:c2:c7:47:86:f3:77:
         91:38:82:98:22:d2:f8:7e:aa:f4:bd:60:71:4c:e4:ab:ab:1a:
         83:0d:69:8f:a6:7f:c1:df:7d:aa:4d:c1:52:c0:41:6b:8d:ae:
         be:00:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:18 2025 by rpki-client