Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
File:                     bef55cf1-33ca-3581-b5d2-c162378fe467.roa (raw, json)
Hash identifier:          wNo1ilOilppkvzNstb06FWkj6rg+t5IRWQm1OxxV45g=
Subject key identifier:   1B:32:7B:A2:79:76:B2:A7:A5:C6:51:5C:A6:6E:B5:65:B3:FA:35:29
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D14DC0700725B190D92E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20001
IP address blocks:        66.8.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:4d:c0:70:07:25:b1:90:d9:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=38ee7ed8-64b1-4eda-832d-4d1a805964b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:72:29:d1:db:85:15:33:0a:47:5c:76:a2:
                    9b:04:d1:d7:bd:a3:45:d2:f3:4d:3d:76:bb:07:18:
                    ac:db:cf:3f:bb:cd:14:c1:3f:02:73:ca:ac:de:77:
                    df:7c:16:0b:82:09:9e:37:b4:82:34:af:7c:30:0e:
                    92:3e:df:8d:25:8f:df:9e:83:8a:a2:fa:b7:01:a6:
                    a8:0b:82:99:72:42:5a:1e:7c:db:2f:55:73:20:5b:
                    10:3e:8d:93:09:86:b5:fb:5d:34:19:85:9d:a8:87:
                    d4:d4:ac:d7:19:ed:6f:b0:ef:3b:dd:ae:fa:a6:27:
                    e2:54:e5:21:90:87:38:b1:b2:8d:5a:21:f6:e3:5a:
                    7b:f0:0e:01:59:79:1b:94:27:c0:71:7b:84:ba:41:
                    e0:52:ba:53:90:9a:40:02:c5:ad:0a:f9:a5:78:48:
                    84:e2:89:2c:5d:b7:6f:82:00:a3:e1:7c:21:e3:94:
                    ef:c7:9b:bb:82:b9:37:24:8a:23:c4:0c:94:99:02:
                    dc:7e:24:12:7e:b0:ad:21:9e:db:81:72:81:2d:d6:
                    89:04:29:e1:e1:3b:64:a3:f4:06:7e:13:ff:4b:9e:
                    6b:82:82:f8:c3:89:46:7e:5f:0a:47:f5:b4:8e:fb:
                    66:2b:36:a0:f5:f1:a1:e2:2a:9d:20:b2:f6:01:82:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:32:7B:A2:79:76:B2:A7:A5:C6:51:5C:A6:6E:B5:65:B3:FA:35:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bef55cf1-33ca-3581-b5d2-c162378fe467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.8.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:49:68:ac:e5:fe:01:0b:7f:5b:43:8d:93:bf:49:17:06:69:
         72:93:9a:f5:22:1f:30:d9:e4:d1:80:7f:b1:c9:56:4e:52:e3:
         28:66:de:fe:8a:9a:4f:4f:fb:19:e2:67:a4:82:8b:bd:44:ee:
         90:57:3f:59:db:05:40:94:89:23:a9:df:24:8c:51:38:53:ca:
         ea:d3:d7:84:25:1c:82:24:04:e0:cf:20:33:f3:39:d8:c0:6c:
         eb:b6:b4:98:18:70:05:92:65:a2:ca:2d:6b:87:0d:43:4d:42:
         09:0d:9d:40:70:15:1b:5f:64:33:63:02:07:21:1e:b5:75:33:
         41:98:fc:99:94:dd:4f:cb:b5:4a:10:54:97:bf:bd:49:bc:0b:
         6e:5a:d2:3d:63:ea:84:1a:4e:3a:31:0f:98:a8:f2:0d:6e:62:
         fe:18:03:c6:38:47:81:7d:06:34:b2:aa:00:75:92:b5:bf:3d:
         92:d3:3e:e0:b5:92:1c:02:c4:18:d1:21:41:b1:a7:55:a7:57:
         67:04:06:70:07:98:ba:37:73:e6:d1:bb:65:c7:27:17:0f:89:
         2f:83:15:bd:1d:3d:32:08:5b:42:a3:27:74:f1:03:5f:36:14:
         03:de:85:3d:4b:10:f8:94:c0:b6:07:18:84:a7:b2:c3:f0:b7:
         f7:db:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:46:47 2025 by rpki-client