Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa
File:                     bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa (raw, json)
Hash identifier:          FSZngF2jzr3P+5hSmNAyCrAijOv1DMfeF8E7phGpHgk=
Subject key identifier:   69:AC:47:60:78:6F:84:A6:FE:2C:0E:BC:61:A6:B4:3A:7A:0C:1D:82
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849E0BF8BB5C973955107FB1380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        173.198.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8b:b5:c9:73:95:51:07:fb:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=7fdc620c-b980-434e-b3ae-a4a6adfc1c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:9f:0a:71:c4:44:e2:cb:15:1a:59:e1:5d:
                    c8:69:f3:20:25:a2:05:14:a2:62:07:43:dd:7f:5d:
                    d9:e9:b8:90:a7:ba:e9:4b:9b:c6:2f:68:47:66:8e:
                    1e:35:62:7c:52:07:4e:e1:32:87:6c:ed:05:c4:fb:
                    2e:99:e6:a2:9a:23:02:96:15:57:3f:e2:b2:69:7c:
                    77:43:ff:2b:b0:e8:b1:6d:32:4f:8b:02:84:f9:0d:
                    0e:6a:d3:66:cb:31:10:91:df:5a:0e:bc:bd:16:84:
                    c4:f3:b3:f8:98:c3:29:2f:86:a6:74:cf:cf:78:2d:
                    0c:42:d6:72:d5:8c:aa:79:92:cd:ed:38:25:33:9f:
                    13:14:6e:a5:75:4e:aa:da:61:41:38:35:89:52:c3:
                    6e:13:78:69:e6:aa:ff:ff:5c:bb:11:76:48:07:62:
                    be:f1:58:30:4a:d6:d0:1e:3e:8a:3a:cb:76:c1:f0:
                    50:5b:5c:39:1c:ea:b7:8b:1f:27:5b:f2:fb:c6:b6:
                    af:de:ec:e3:f1:0f:83:6e:66:16:67:f3:e5:59:40:
                    0d:a3:e6:84:6f:eb:29:90:4a:3c:77:96:72:ca:00:
                    d3:bd:9b:3b:fb:6f:0b:f3:3d:8d:fc:16:06:fa:f7:
                    8c:76:d5:79:01:ea:d6:12:39:c9:51:49:a8:14:24:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:47:60:78:6F:84:A6:FE:2C:0E:BC:61:A6:B4:3A:7A:0C:1D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bbc2d907-e9ac-31c5-b80b-ec1394d148cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.198.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:ab:9f:2c:fa:2b:71:83:10:11:c5:d6:0b:35:32:3b:d5:
         bb:52:7a:c4:26:3c:30:21:71:ab:e5:07:d4:3b:b6:09:ef:5e:
         5f:e8:e5:17:85:58:ae:c2:ba:25:f8:da:c8:b7:be:17:e8:ef:
         64:f9:2a:9e:f5:c2:88:f9:53:e5:85:a8:28:a8:27:61:7a:f0:
         99:b6:8d:ee:f4:5e:f2:47:6e:91:39:05:4d:32:68:f1:58:3d:
         37:f9:e7:7a:52:90:dc:5b:4f:cb:44:35:2f:d6:1d:46:97:bd:
         80:b1:37:ed:59:54:96:4a:91:2d:6f:84:ee:9c:95:7a:26:54:
         9e:32:8c:5a:cc:85:a6:52:8e:12:2d:99:3c:ec:4b:bf:00:aa:
         b5:22:4a:62:04:22:32:22:c0:32:cb:c5:18:25:95:80:e5:85:
         32:0e:3f:4f:3e:c4:aa:9b:7e:c7:d7:4f:ce:50:5f:18:61:97:
         d1:3c:bf:98:d4:c2:0d:35:25:61:32:91:93:cf:5a:3c:32:92:
         5e:1a:72:0a:a3:12:88:99:61:39:05:69:35:db:cf:9c:fd:2b:
         eb:ff:74:31:95:46:1a:a9:6f:94:d1:6e:c5:66:c9:b9:3b:e0:
         bb:a5:a4:d8:6c:3f:10:6d:b5:11:66:0f:99:50:60:7c:1e:5d:
         aa:4f:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:52:29 2025 by rpki-client