Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/528b4019-e856-3bcb-9a18-b0041a2c1c8c.roa
File:                     528b4019-e856-3bcb-9a18-b0041a2c1c8c.roa (raw, json)
Hash identifier:          YUPhz41liMc23QBMZBmcIG3bRYfh6bPgD8TO/k+bOIY=
Subject key identifier:   28:3E:DF:B0:52:7F:09:55:42:18:94:A6:B0:9D:43:C9:A7:4F:2A:27
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161221321E155ED06BFD5E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/528b4019-e856-3bcb-9a18-b0041a2c1c8c.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.41.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:22:13:21:e1:55:ed:06:bf:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=75d90f8e-d773-4bb0-a508-d45c9f0face0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:2e:1c:85:a5:ad:f3:92:51:a1:18:94:f6:
                    eb:3a:9b:c0:4d:6e:2b:47:0b:5a:35:65:f8:54:c5:
                    cb:3e:e9:9a:84:c0:45:12:a0:68:e0:d8:bb:10:32:
                    c0:92:38:94:a3:22:ad:57:de:93:7f:eb:d9:b9:f6:
                    2a:b2:b9:6d:53:1c:80:65:a1:04:ea:da:ab:ff:5a:
                    c6:b6:c7:da:91:3c:5c:c0:0b:b8:d1:f7:65:ce:a6:
                    5d:89:9d:4d:00:95:d6:ff:7f:c8:4a:8d:7c:1d:86:
                    68:ee:6a:18:63:51:89:e8:1f:95:06:46:ce:a5:68:
                    08:a3:15:41:7e:a9:6c:06:f3:e9:0e:d3:8c:6a:60:
                    a4:38:83:26:70:0d:09:52:25:31:40:e4:e1:43:fc:
                    2d:2b:db:9b:f3:9a:db:41:1e:c9:0e:69:3b:74:77:
                    6e:6d:9e:3e:24:f1:61:92:e9:0e:a7:c9:66:cb:b0:
                    0c:cf:67:2b:56:ac:c4:9c:a0:0b:72:1e:bf:76:31:
                    21:39:25:f5:5b:09:4d:34:10:2d:38:d6:c1:91:0e:
                    3b:bb:f5:d2:9a:74:0c:9c:c2:95:6e:fe:1e:11:83:
                    5c:4d:51:4c:01:17:5a:7b:77:d1:3d:51:05:0e:e1:
                    5e:6d:4c:96:46:4d:fe:92:db:94:47:5f:cc:ee:25:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3E:DF:B0:52:7F:09:55:42:18:94:A6:B0:9D:43:C9:A7:4F:2A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/528b4019-e856-3bcb-9a18-b0041a2c1c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:18:a6:14:2b:9a:3a:a9:c6:18:33:7f:e7:05:5a:1d:82:
         a6:0b:08:14:fa:78:46:18:ca:5e:04:a5:e6:02:ec:46:94:c1:
         56:c7:14:80:8a:1d:a5:68:66:0c:94:44:df:ae:5d:97:e3:b0:
         b7:72:9f:da:c4:56:0d:aa:2c:40:1f:c1:72:10:0a:0d:88:32:
         15:4b:17:42:11:66:85:54:26:d5:28:fd:be:ea:a8:d5:e3:8d:
         61:3f:21:55:5a:b0:08:1c:65:11:fa:5c:8f:9f:b7:df:ad:97:
         34:97:e9:5e:d4:68:6b:1c:b0:72:cf:0c:cb:61:0d:e3:8c:4d:
         3c:d1:76:c9:a5:70:f6:7c:8e:cb:ce:38:6e:8e:d3:13:41:7f:
         c6:d1:f5:db:b4:ce:86:59:ce:7d:ae:ee:74:0e:70:0c:c5:0b:
         5f:6a:f4:d7:4f:7b:d1:ee:23:49:4d:ea:75:2e:32:77:15:77:
         79:a6:9f:55:ad:59:74:6b:f5:27:40:97:d6:42:d5:d5:f3:02:
         0d:9f:32:79:17:0c:39:f8:fd:03:6d:31:7e:81:01:c7:51:8d:
         eb:ff:ae:91:00:26:55:1a:8b:43:fc:12:9c:84:ad:35:6b:45:
         03:6b:c8:9f:d4:c6:f9:5f:34:61:99:18:45:b2:fa:7f:ab:f6:
         bc:f8:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:21 2025 by rpki-client