Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa
File:                     df120d9a-c250-3e11-a401-251a5f83547e.roa (raw, json)
Hash identifier:          x6u9cKJkG1SoYLzWmISZV5rHFwEOOqiLjnByxk68ZcI=
Subject key identifier:   70:0C:D7:54:65:5E:0A:71:6E:28:78:57:56:FB:45:B3:2E:C9:F1:1D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848E2D1B0393EB6065689A8FF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     10796
IP address blocks:        76.57.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:b0:39:3e:b6:06:56:89:a8:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=bc1cc1f4-eb72-466a-a738-69408170b5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:6b:16:42:92:91:22:de:ae:b8:7d:9e:92:
                    48:9c:95:ba:e1:c0:30:2c:84:43:3c:9d:ba:ca:aa:
                    60:7c:8a:6f:4f:2b:0e:17:36:ef:5b:7c:14:c1:ac:
                    20:4c:8e:d8:22:e4:28:5d:bd:17:51:4d:10:8d:5b:
                    d5:69:ce:4f:1e:af:b7:e0:ba:b0:6d:74:00:0d:34:
                    e6:3d:62:1d:51:7b:e9:7b:88:36:28:a8:c9:c8:21:
                    f4:fd:0a:7e:cf:82:db:01:30:64:46:9e:a9:d8:05:
                    03:53:60:52:9f:35:25:43:22:91:b9:ca:97:72:de:
                    38:26:f3:96:7e:cd:b3:4f:3d:4d:45:37:8b:73:f3:
                    50:e3:12:6b:18:a0:30:f2:9a:cc:dd:94:28:9d:77:
                    b5:96:4f:ef:43:ba:58:8e:c6:98:b0:ac:b6:61:10:
                    97:ad:0f:04:86:42:37:32:bc:4f:51:16:9b:12:4d:
                    f6:ad:3c:d5:de:d5:40:01:f1:a4:13:af:0d:58:39:
                    bb:f9:cb:c5:0c:32:4e:3c:45:74:3a:4d:18:58:ac:
                    dd:2b:b1:07:18:57:12:f7:b6:40:2e:37:03:6a:93:
                    00:5f:22:9a:1b:57:8b:55:e5:37:70:45:ed:d2:df:
                    56:b6:11:47:98:cc:aa:d3:72:eb:6c:8f:ca:45:c7:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:D7:54:65:5E:0A:71:6E:28:78:57:56:FB:45:B3:2E:C9:F1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.57.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:59:ec:d1:01:c6:e1:28:d5:55:12:9b:b4:21:8b:e1:99:8a:
         71:61:1b:c3:04:72:bc:11:39:b9:07:69:a7:6f:6a:4e:b6:62:
         d7:89:85:10:97:3f:dc:54:f6:e4:bb:09:7f:06:18:a0:f1:86:
         5b:92:6b:06:6f:4f:e6:d8:cf:0e:a6:76:1b:96:b9:6e:7a:e3:
         27:e4:cf:86:ee:4a:cf:7d:45:a2:52:15:a0:c3:15:65:c1:ac:
         6e:3b:2b:41:ff:01:f2:d8:5b:b7:97:f8:d3:d3:5d:37:4f:cc:
         76:83:47:81:ab:36:83:aa:9f:c6:78:00:44:fa:ae:df:46:ba:
         56:e5:04:62:64:af:e2:8d:ef:3c:6b:02:bf:03:01:e4:a8:d0:
         83:2e:21:32:2a:f2:e8:c5:ad:c3:a3:2d:36:c3:e8:45:99:7e:
         cc:96:16:a2:65:4c:e7:51:f9:fa:10:34:22:60:2d:17:dc:38:
         64:09:2e:47:c5:cc:0f:31:42:fe:59:0e:d1:34:6d:93:36:23:
         c7:fc:f9:a3:82:48:cd:fa:6c:7a:ff:5e:44:f5:bd:24:bf:32:
         40:e3:9e:ae:f6:5d:0b:8d:fe:da:0e:3b:5b:98:5d:c2:f1:d3:
         92:ad:31:f2:2f:51:f9:78:11:a3:7c:7b:70:8b:c6:32:85:bd:
         23:d3:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:17 2025 by rpki-client