Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a20b170d-a406-3eee-b6e7-9f2684282b7e.roa
File:                     a20b170d-a406-3eee-b6e7-9f2684282b7e.roa (raw, json)
Hash identifier:          0I9wkfpv6fyeWA0ri8UbUXoyCyh+gw5LWXjb6SJW6qk=
Subject key identifier:   53:C7:E6:49:E0:E2:EB:43:D4:83:A0:9B:84:A5:21:75:1B:3D:ED:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619A74813942ECCB6C2AE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a20b170d-a406-3eee-b6e7-9f2684282b7e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11426
IP address blocks:        71.76.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:9a:74:81:39:42:ec:cb:6c:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=fa0f124e-d28c-49c6-96de-64d1a6a646be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:bb:8a:74:02:06:f6:bf:e7:50:b4:c2:f1:
                    37:2a:c2:5e:91:cc:00:9d:d2:00:70:d9:98:5c:e6:
                    56:10:b4:87:32:d3:87:59:a7:28:c8:5f:15:9a:0e:
                    d8:fe:15:57:08:23:34:74:ef:9a:1d:c0:a1:ca:36:
                    d0:62:3d:c4:28:78:97:cb:3a:78:fe:05:3a:a9:d7:
                    e9:3c:2a:c7:5a:23:de:4d:8d:38:7f:42:5f:1e:94:
                    de:5b:29:db:33:91:7c:43:d1:7e:e3:20:ed:f0:6e:
                    19:bf:cc:3d:1f:5f:23:c1:3b:1e:ee:ef:ec:a4:f6:
                    1a:66:70:85:b0:cc:05:e9:0d:94:13:85:7e:b9:4d:
                    27:bc:dd:31:b0:cf:6c:26:03:d7:30:a9:50:45:85:
                    9d:7a:ed:98:39:aa:1a:69:53:40:d4:9d:fe:7b:2b:
                    1c:8a:d5:0e:7d:df:c2:f0:f6:67:0a:67:34:b3:50:
                    ab:96:f3:18:0b:96:66:50:07:56:8b:78:a9:24:bd:
                    51:39:c0:11:b7:a4:83:7d:c8:39:52:6b:f4:e0:77:
                    fb:9f:24:ed:7c:4e:66:b4:38:ed:b3:66:92:15:96:
                    50:4e:64:30:c9:7a:f9:26:50:cc:0c:56:19:34:a1:
                    59:ec:b4:08:ca:c3:f4:5e:9c:09:47:0e:0b:48:b2:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C7:E6:49:E0:E2:EB:43:D4:83:A0:9B:84:A5:21:75:1B:3D:ED:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a20b170d-a406-3eee-b6e7-9f2684282b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.76.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:36:0b:f0:0b:c6:d8:ac:20:9b:c4:07:71:b6:fa:d5:38:31:
         24:9a:a8:f5:76:a0:da:dc:ad:ae:b2:6e:bd:81:19:60:ff:34:
         18:2b:b5:0c:fd:77:e1:9b:38:f3:5c:01:74:a3:3b:75:2f:73:
         84:2e:b5:5c:8c:45:be:c5:0c:7e:6e:84:9d:b6:bd:d1:1d:fe:
         40:de:fb:15:24:3b:92:f2:a6:af:87:54:8b:eb:8e:e1:17:c0:
         97:c3:e0:72:35:5a:ed:f2:c7:04:e2:fb:65:75:0d:b4:ec:dc:
         23:d4:69:53:44:89:38:99:bc:29:dd:84:cc:e3:92:d9:0d:9e:
         59:95:41:71:23:51:22:bc:8a:35:83:61:61:dc:e3:3a:be:7c:
         a7:16:9a:61:82:59:09:3f:67:33:3b:be:44:51:6e:99:c9:fd:
         d7:44:f2:23:0a:8f:40:5a:d8:44:41:ad:5c:77:0c:8d:c0:73:
         7d:c2:2d:99:51:d1:45:56:f4:7e:bd:9c:4b:05:b7:ea:01:c4:
         f0:44:25:e2:1b:02:15:bf:f8:39:d8:2b:3a:1c:e5:0d:8f:76:
         df:9d:4b:b8:c4:d4:57:41:48:c6:ff:0b:08:1f:8f:86:b4:3b:
         1e:fe:7b:3c:f6:a5:55:09:f4:dc:34:dc:5d:c4:3a:28:c0:59:
         cd:ec:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:15 2025 by rpki-client