Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa
File:                     dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa (raw, json)
Hash identifier:          RL/rGCx/QsJUzGNszLG5Q0lzYL1MaRi6jbdXh/sG1kI=
Subject key identifier:   08:A8:AC:F6:F9:CC:2E:56:72:E9:7C:38:59:78:64:01:BA:A6:10:6E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1C1F782A87108823B2F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     11426
IP address blocks:        65.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:c1:f7:82:a8:71:08:82:3b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ba724bc4-391c-4d98-b2ed-a15df2b90a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:3e:02:50:c3:10:6b:f3:db:70:2c:6b:46:
                    2a:f6:52:35:5c:d6:f5:04:ef:e0:ce:1a:4f:53:47:
                    df:80:ff:43:d6:4e:80:c2:34:bb:74:df:b2:b9:15:
                    63:22:61:3d:30:99:84:9f:77:10:8b:e2:32:4f:aa:
                    07:0c:5a:2b:76:2f:28:5c:02:f3:12:1e:f6:69:67:
                    76:f6:86:b4:16:aa:6a:57:c7:43:bb:51:85:aa:89:
                    12:3b:ed:09:5d:1e:6e:90:87:26:2c:08:88:e2:d7:
                    00:19:cc:35:a7:ec:ca:69:ab:59:51:27:64:12:d7:
                    b2:37:9e:7b:c8:69:39:93:d2:78:ba:62:ab:a3:af:
                    8a:0d:6b:93:2d:ab:4a:cb:d7:4e:de:3a:86:3c:c1:
                    48:bf:d6:db:a4:bd:cf:af:38:59:63:22:de:69:54:
                    1b:cc:78:01:0c:b4:10:e1:f2:0c:cf:0c:31:24:49:
                    9a:71:20:61:36:0a:29:15:ba:44:70:e1:3e:3d:2d:
                    fb:62:92:e9:18:82:4f:ea:13:25:01:56:44:c1:18:
                    0d:d5:48:03:e8:3d:14:2f:cb:b8:8f:04:10:95:43:
                    55:66:44:bd:45:7c:7e:7a:51:87:a2:d5:20:4b:ff:
                    eb:03:3d:0b:bb:e4:10:4d:24:5d:7e:de:53:cd:ee:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A8:AC:F6:F9:CC:2E:56:72:E9:7C:38:59:78:64:01:BA:A6:10:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:62:b5:45:8b:de:85:c6:dd:77:7b:ce:23:eb:5b:82:a0:
         f4:0c:cb:d1:63:68:4e:dc:83:b1:4f:ec:c6:d5:f2:31:d9:80:
         7c:90:28:b4:ed:2e:92:81:cc:6d:d2:53:3f:02:3e:82:06:12:
         77:1c:15:d5:0f:d6:60:55:cf:62:7d:d2:6e:12:0c:83:eb:95:
         4a:92:3e:d4:ef:23:47:5c:21:ca:46:e2:82:92:6c:b8:10:b4:
         66:11:e8:ea:ef:e5:ea:ed:4a:9c:14:02:a0:e2:db:10:bb:20:
         96:de:24:50:fb:23:63:f8:a9:b7:f4:ef:0e:84:71:61:51:47:
         49:38:38:96:67:14:12:b5:4a:ab:91:c3:44:cf:29:f2:64:06:
         c3:d9:6f:db:c2:28:9b:2f:db:3c:ef:4e:eb:c3:1f:86:7c:40:
         4b:85:21:6a:ed:15:42:7a:e9:a1:6e:bb:53:31:f5:ef:b0:59:
         22:3a:2d:0f:03:54:1f:43:9b:8e:6a:3d:d5:49:b3:a0:e4:64:
         fb:f8:79:6b:f6:27:cc:85:61:c0:59:ef:be:4a:a5:ba:ca:ad:
         e4:33:a0:b8:14:c5:60:ff:ac:80:f4:55:ea:8c:98:e5:80:49:
         c8:f8:57:05:15:4e:fe:23:7e:e3:45:e8:e7:1d:af:fb:c9:67:
         af:fe:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:13 2025 by rpki-client