Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd65e837-06a2-3410-8a48-7264c25b372b.roa
File:                     bd65e837-06a2-3410-8a48-7264c25b372b.roa (raw, json)
Hash identifier:          9bKa61QpReV01vxpq8qEnJi3JCErvV7I5LcAyl8Q16U=
Subject key identifier:   D5:19:5B:B3:09:8A:33:2A:A8:F3:28:7E:86:84:C1:96:79:50:B3:D0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D12E062A635C79FAE8D800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd65e837-06a2-3410-8a48-7264c25b372b.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        24.172.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:2e:06:2a:63:5c:79:fa:e8:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=b21a42b5-2733-417a-8fe0-ce0d98f14d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:48:f9:cb:ee:84:56:43:85:a9:46:aa:2f:
                    9b:f7:3b:46:eb:c2:0a:72:77:37:d5:21:c5:ed:3e:
                    17:e3:ea:a7:39:09:ec:d7:a8:8a:38:45:d5:69:dc:
                    45:a7:f0:ec:dc:75:c9:20:de:8b:8e:61:49:1d:7d:
                    5c:39:23:22:8e:5c:55:c5:24:62:82:2f:dd:4a:ec:
                    d1:8b:1a:60:60:56:68:e7:28:8a:02:59:2d:a3:66:
                    c4:7e:d1:77:2c:14:b8:89:30:2d:26:52:27:52:0b:
                    7c:13:ec:db:e5:ed:2d:b8:58:98:89:98:0d:57:ed:
                    b1:8f:6c:76:40:67:4a:42:f5:85:38:e9:cf:eb:d6:
                    07:b1:22:b2:3d:0a:8e:5b:ee:e5:65:98:46:cc:e9:
                    14:92:41:07:75:01:5a:d0:ed:53:a4:6b:26:dd:07:
                    9a:77:f1:e1:76:b9:99:70:5f:e5:e7:f8:9e:a3:fa:
                    e3:05:8d:62:2a:83:d9:c9:df:fe:90:d7:b7:20:17:
                    d9:0a:d0:fa:ee:14:b0:76:c4:6d:0f:8e:f9:48:03:
                    54:42:db:cd:5f:af:09:92:44:74:a7:77:10:e3:83:
                    85:04:9b:2b:fb:f0:3b:36:89:0d:51:0f:98:c3:a9:
                    39:e8:88:61:e7:bf:5c:bd:c6:9d:2e:b6:df:24:c0:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:19:5B:B3:09:8A:33:2A:A8:F3:28:7E:86:84:C1:96:79:50:B3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bd65e837-06a2-3410-8a48-7264c25b372b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:d1:2a:a4:d0:4a:35:25:47:fb:08:f0:42:5b:34:06:ea:
         5c:87:9a:fd:eb:aa:a5:00:13:18:b1:6a:97:2d:02:2f:bc:9e:
         86:8e:5d:47:9f:90:79:a1:fe:0c:e7:bb:5c:7a:c8:7f:b4:77:
         89:dd:c8:4b:97:91:33:e7:35:27:5b:8f:49:04:97:27:6f:46:
         99:b9:a9:13:00:53:00:8b:da:38:b4:b7:3d:b9:ea:28:80:95:
         f3:3f:fe:87:d8:09:f1:17:bc:7a:1e:18:ef:7e:7e:73:6f:f0:
         83:a8:a5:05:61:0f:63:dc:a6:43:76:37:99:41:97:f6:61:f1:
         3a:4a:ec:a0:ff:40:e8:55:e4:4e:da:fe:5a:8e:7c:72:90:3c:
         ba:1e:91:e7:bd:d6:32:9a:de:e2:cd:2f:06:96:bd:3a:99:ed:
         c3:94:b2:4e:32:f3:30:ed:f6:fb:43:e8:0e:0e:38:97:0b:95:
         42:c1:16:1b:05:66:e6:6e:01:5c:2c:46:08:de:ca:99:d4:1f:
         c9:cf:8c:9e:36:c3:13:6e:ff:f3:86:0e:54:05:c8:19:63:9b:
         7d:14:77:85:c1:70:ce:d0:44:e0:25:f9:2e:f3:4d:57:2a:bd:
         06:c4:a4:f4:86:7e:ac:1f:89:fc:9b:0c:74:61:7d:0f:25:8b:
         9c:85:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:54:54 2025 by rpki-client