Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa
File:                     70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa (raw, json)
Hash identifier:          s0IRxwulhcjF7zrXO6JyEVmOsQskh7GbkSxg8jPY+zk=
Subject key identifier:   06:2A:A3:F2:05:F1:BA:A6:5D:77:01:61:14:01:E6:53:76:B4:6E:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B39ED8B195570B6B7300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        70.63.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b3:9e:d8:b1:95:57:0b:6b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=80e18eda-ac4a-4dc7-adaf-fa0e9a1489c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:a6:e0:f5:bf:7d:7c:c8:f9:a8:58:10:ef:
                    9d:25:af:9e:ad:39:86:07:37:20:c1:46:3b:10:16:
                    e3:08:35:28:8e:8b:e3:fb:cd:5d:17:b4:1d:cd:7f:
                    1b:f3:a8:3d:17:62:1e:e1:dc:24:09:21:1c:95:a9:
                    5f:90:bb:24:32:4c:bc:45:03:31:73:b2:10:28:ff:
                    cc:d5:23:c4:0c:b4:d5:4e:02:98:3e:e5:aa:b1:74:
                    05:88:d2:f4:fb:0a:5f:65:c1:c2:38:7e:84:c4:99:
                    a3:6c:d2:d5:ec:37:55:af:e5:3f:9b:1a:5a:84:9f:
                    82:7a:d7:a1:74:a3:56:9b:e4:82:4e:85:9a:1a:2c:
                    77:5e:b4:31:b7:11:dd:a0:8e:15:6f:b9:ae:a7:07:
                    fd:1f:23:27:2c:50:c8:19:76:8e:91:ed:28:d0:18:
                    b6:eb:d1:43:fb:d8:25:f1:68:47:04:6d:06:c8:2d:
                    b4:a2:9a:bd:16:af:23:ac:58:a5:e8:62:61:57:cb:
                    31:80:c8:30:53:73:16:ac:93:24:1c:83:2c:b2:ca:
                    60:2f:52:92:14:0e:0e:40:b8:92:dc:eb:d0:d5:41:
                    a9:5d:4d:93:58:40:ad:8a:22:9e:c8:24:58:a1:1a:
                    0e:23:49:b7:09:fe:ea:8d:ad:f2:47:42:9c:37:01:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:A3:F2:05:F1:BA:A6:5D:77:01:61:14:01:E6:53:76:B4:6E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70c560dc-eeb7-3eb9-8f48-df9d04b754f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.63.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:57:39:11:ab:d8:0b:57:4d:09:54:74:c1:ee:4a:3a:bf:a8:
         7f:e2:ac:99:e0:64:66:b0:fd:f0:07:b1:3f:df:8b:ba:39:da:
         e5:ec:45:6f:01:f6:47:21:35:78:38:8b:73:d3:a2:e2:af:4b:
         a3:90:7d:a5:11:60:e4:d3:62:ca:d4:11:46:10:36:31:b3:c7:
         4a:be:d5:df:2c:98:2c:b9:8f:30:d4:db:d3:a6:40:60:5a:e8:
         ee:e9:99:ee:a8:51:21:ca:6e:a9:e2:32:1c:c7:6a:fe:c5:20:
         8c:e8:f1:f6:49:04:1b:db:24:25:5e:7c:28:a8:f6:66:55:f3:
         d6:c6:2c:0a:09:fc:c9:b9:32:46:78:1b:bf:77:c1:a7:bc:47:
         c3:e1:1c:ae:16:9c:2b:28:4e:41:1a:ce:27:41:ce:03:44:e0:
         d1:bc:a0:e2:a0:03:c3:28:83:d3:27:2e:8c:cd:34:4a:9b:63:
         5e:e8:40:cd:71:54:e0:c9:6e:d5:33:f7:ae:be:c7:b8:40:4c:
         57:b6:db:b8:31:bb:e5:91:b0:78:d0:ba:5f:fd:3e:08:f7:be:
         8d:5c:a8:4c:e9:a4:53:d7:20:54:e4:46:08:e4:a9:e3:43:9a:
         9a:4f:22:69:10:c5:42:5c:fe:ce:9b:ac:4f:7a:e2:d2:fb:b9:
         1e:08:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:56:47 2025 by rpki-client