Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/06e2edd0-5dfb-374d-b0c9-f53bb32db95e.roa
File:                     06e2edd0-5dfb-374d-b0c9-f53bb32db95e.roa (raw, json)
Hash identifier:          7TCjz8tL2XtZz2Lq02MUTeIhgcrXAgSCI4laQoGAwlk=
Subject key identifier:   9B:0D:E5:A2:9A:8F:65:2F:D9:BA:BD:24:07:9E:BD:D3:61:13:0D:3C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161A69E5ABE725786BF1080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/06e2edd0-5dfb-374d-b0c9-f53bb32db95e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     12271
IP address blocks:        24.39.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:a6:9e:5a:be:72:57:86:bf:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=31705a6d-c25a-4a9a-b4a7-614efe4391ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:e2:c5:e5:aa:e8:2f:03:99:65:3e:74:3e:
                    d3:46:13:14:a1:87:21:2d:66:e6:58:89:26:05:be:
                    e8:ac:04:c5:2c:2e:b9:21:17:6b:aa:ef:24:19:02:
                    43:90:78:9e:10:15:4c:94:69:bf:9b:2a:df:ce:37:
                    67:af:ef:9b:fc:ce:26:55:ec:d0:e2:57:64:d9:6d:
                    cd:74:64:dd:bb:ca:8f:ae:71:de:85:b8:4f:97:7b:
                    1c:26:2b:ea:00:3a:90:fa:e4:27:64:f6:bf:39:55:
                    78:2b:fc:e2:3b:aa:f9:fb:3e:cd:d2:18:fd:a0:6e:
                    dc:41:40:0f:7b:6f:0d:53:33:04:06:7e:0a:cb:e2:
                    7e:48:35:89:c2:41:7d:ed:68:ef:86:33:47:4c:0c:
                    06:b8:c3:1c:9e:d5:88:de:3a:64:07:43:a1:b0:cc:
                    16:bc:fe:29:67:47:7e:21:b0:fd:bd:08:3c:61:68:
                    48:a3:a1:9a:1b:98:16:e6:a1:3a:fa:7b:1b:a1:a0:
                    cb:8e:9e:18:01:3e:d3:b5:00:a0:0c:d9:ad:1e:d6:
                    e2:53:32:9d:dd:08:a7:de:a7:99:99:5f:76:63:15:
                    ac:27:b7:98:af:c0:bb:b4:93:78:d3:1e:7f:f2:6a:
                    5f:3d:79:db:ef:6d:fd:e3:37:ca:60:2f:a5:b9:8d:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:E5:A2:9A:8F:65:2F:D9:BA:BD:24:07:9E:BD:D3:61:13:0D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/06e2edd0-5dfb-374d-b0c9-f53bb32db95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.39.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:0e:19:a9:1b:d1:cc:99:68:41:4c:5e:6f:40:1d:40:84:
         62:0d:6f:ce:8d:fc:c3:84:8b:f4:52:5c:c7:71:6f:24:b5:a7:
         8f:03:5b:bf:98:d3:f1:ba:ce:c6:34:db:b5:c0:8f:dc:25:a9:
         c5:b8:d0:6f:a6:c0:eb:e5:8b:6a:f7:66:2a:96:9b:78:5f:34:
         c6:ff:6e:15:82:a6:81:13:b9:98:b9:b7:a3:ba:55:00:e7:5f:
         8a:0f:4c:84:e6:1f:11:36:2c:bc:13:4a:6c:43:66:d8:d1:b7:
         42:3b:c7:9f:95:cf:e6:cd:f6:23:55:3a:b1:ce:63:27:69:bc:
         82:e7:bf:55:c9:f9:ae:ca:50:c3:bf:f6:93:43:a4:55:29:83:
         ef:c2:e6:c8:fd:66:71:10:11:ae:93:7f:19:91:08:3a:9d:a3:
         5c:6b:d6:07:36:d6:3d:71:94:6d:39:94:43:aa:12:da:71:2f:
         64:ba:bf:36:fd:1f:8f:fd:bf:d1:c6:30:ce:b5:6d:22:14:d3:
         ac:1d:e3:9e:9e:fd:0c:2d:be:66:9c:ef:31:10:be:78:d7:f8:
         d2:98:ea:d1:17:36:86:b9:ea:4d:3a:a1:8b:da:1f:9a:3f:c8:
         40:3d:53:db:33:8d:ac:d4:1e:12:cb:f2:80:a6:fe:35:89:3b:
         82:53:be:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYaaeWr5yV4a/EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
MzE3MDVhNmQtYzI1YS00YTlhLWI0YTctNjE0ZWZlNDM5MWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9PixeWq6C8DmWU+dD7TRhMUoYchLWbmWIkm
Bb7orATFLC65IRdrqu8kGQJDkHieEBVMlGm/myrfzjdnr++b/M4mVezQ4ldk2W3N
dGTdu8qPrnHehbhPl3scJivqADqQ+uQnZPa/OVV4K/ziO6r5+z7N0hj9oG7cQUAP
e28NUzMEBn4Ky+J+SDWJwkF97WjvhjNHTAwGuMMcntWI3jpkB0OhsMwWvP4pZ0d+
IbD9vQg8YWhIo6GaG5gW5qE6+nsboaDLjp4YAT7TtQCgDNmtHtbiUzKd3Qin3qeZ
mV92YxWsJ7eYr8C7tJN40x5/8mpfPXnb72394zfKYC+luY2/WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsN5aKaj2Uv2bq9JAeevdNhEw08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDZlMmVkZDAtNWRmYi0z
NzRkLWIwYzktZjUzYmIzMmRiOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGCeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7KDhmpG9HMmWhBTF5vQB1AhGINb86N/MOEi/RSXMdxbyS1p48DW7+Y
0/G6zsY027XAj9wlqcW40G+mwOvli2r3ZiqWm3hfNMb/bhWCpoETuZi5t6O6VQDn
X4oPTITmHxE2LLwTSmxDZtjRt0I7x5+Vz+bN9iNVOrHOYydpvILnv1XJ+a7KUMO/
9pNDpFUpg+/C5sj9ZnEQEa6TfxmRCDqdo1xr1gc21j1xlG05lEOqEtpxL2S6vzb9
H4/9v9HGMM61bSIU06wd456e/Qwtvmac7zEQvnjX+NKY6tEXNoa56k06oYvaH5o/
yEA9U9szjazUHhLL8oCm/jWJO4JTvoE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:56 2025 by rpki-client