Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/31e4b213-a5f4-3d13-a1d2-caa9b9a54eff.roa
File:                     31e4b213-a5f4-3d13-a1d2-caa9b9a54eff.roa (raw, json)
Hash identifier:          BlypixZ2hNX/cmIUmbaUtWhWsvON2b9hKgjq8G1mgmw=
Subject key identifier:   51:39:78:9B:4A:34:D6:36:C6:77:05:C7:CD:36:41:70:62:1B:EF:F0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619DB64A9708BCA09D7E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/31e4b213-a5f4-3d13-a1d2-caa9b9a54eff.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11427
IP address blocks:        24.174.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:9d:b6:4a:97:08:bc:a0:9d:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=601ff7a8-7eb0-47ed-86c6-3009936f934c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:e8:55:4c:65:ab:48:41:7e:6e:7c:87:3e:
                    db:68:3f:a6:0b:ac:21:2f:9e:ec:58:19:87:ab:55:
                    2b:28:e3:bf:4e:65:53:17:9f:1d:ea:46:3a:8d:2e:
                    bc:10:f2:98:fb:70:ea:0f:ee:1a:23:de:b4:60:04:
                    96:53:8d:10:88:5c:75:33:84:0f:35:c2:fa:8d:fc:
                    ec:e4:ff:71:60:bb:17:ac:e9:27:a3:43:c0:83:f3:
                    2b:28:4a:1c:7d:50:f2:23:a1:e8:93:a9:f5:37:55:
                    c3:8f:42:8a:7c:59:fa:20:a8:1f:d3:ba:6e:a3:9b:
                    4b:c4:39:1b:b9:85:ec:c9:79:fa:ed:5e:07:e1:4d:
                    5f:cf:da:a3:9a:f3:3c:ae:18:c8:69:18:9e:05:7c:
                    a8:9c:f3:08:3f:62:c8:60:e0:31:77:3c:7c:7c:ef:
                    14:b6:04:06:0e:62:a8:b3:5e:6c:65:86:98:d7:c7:
                    75:80:73:e6:2d:6f:dc:22:94:5f:e9:b9:e1:28:0a:
                    e1:f3:55:05:e1:94:2c:64:ae:0a:a4:ba:9c:1c:82:
                    50:1e:cd:82:db:96:42:84:e6:1d:eb:2a:5b:7f:b0:
                    f5:ff:24:5c:75:e2:da:fa:f6:44:4c:d4:d1:6e:23:
                    c6:d4:71:e2:b4:26:e5:2b:d3:aa:50:32:99:6c:f1:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:78:9B:4A:34:D6:36:C6:77:05:C7:CD:36:41:70:62:1B:EF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/31e4b213-a5f4-3d13-a1d2-caa9b9a54eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.174.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:98:37:18:75:ba:2f:59:cc:d8:a5:ce:e6:c9:9a:f6:b8:
         49:9a:54:82:c5:bb:11:b4:7d:84:f5:3f:db:fd:2c:29:09:18:
         aa:a3:da:73:05:6c:23:50:43:d3:fd:75:1c:71:21:e3:d0:e4:
         b8:cd:65:86:4b:78:f4:0a:22:f8:f0:d8:b1:4a:10:d3:50:59:
         5b:d0:fd:96:d9:5c:23:19:3f:38:b8:98:9e:9a:89:d6:5d:22:
         9c:43:59:f2:ff:99:0f:87:36:f2:5d:5b:18:3b:4a:73:58:f8:
         d0:65:6b:a6:4d:72:fe:12:6b:ad:28:fc:41:8d:89:5f:fd:48:
         58:ed:64:6b:77:c8:38:bd:03:f4:5d:b5:84:71:e1:72:38:c1:
         68:1e:64:71:46:15:fe:b3:fd:2d:c1:87:25:37:4e:fc:ad:78:
         51:fc:47:ae:25:9d:83:df:6f:7b:a0:58:95:d2:fe:70:86:5a:
         66:bb:0f:51:c4:d9:87:a3:84:2a:e2:c5:b4:9c:6f:10:02:d9:
         e9:ab:c2:65:37:92:f5:84:0f:75:59:5e:96:af:ed:be:dd:ee:
         eb:07:c8:68:ae:16:cd:24:0c:c5:6e:74:0e:1a:e5:92:fc:a0:
         c1:42:d5:de:57:b3:51:c0:9c:e0:09:5a:8c:71:f3:87:1a:0f:
         d9:10:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:42 2025 by rpki-client