Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa
File:                     be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa (raw, json)
Hash identifier:          qC6VWgqnZguKcC+2fW3igEB0DMK2D4x1boMAFf+Bl1w=
Subject key identifier:   44:D6:70:4E:97:96:6C:A9:BA:BD:50:14:F8:D1:40:04:4B:ED:2C:B9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA16180F741510D24C61B4400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        24.33.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:80:f7:41:51:0d:24:c6:1b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=6a5c147b-0128-41f9-9390-138031f01345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:c5:ea:1a:59:dc:95:93:71:f5:81:05:40:
                    d2:c4:5e:10:51:72:33:7e:61:83:5b:d6:6c:df:e0:
                    fd:af:95:26:8e:c6:e7:13:94:05:0f:1e:d3:2e:65:
                    51:03:2e:14:15:b4:07:3d:68:48:e9:30:48:d4:e4:
                    6c:04:2d:44:0a:ba:bd:56:9f:ed:ec:e0:d0:86:7b:
                    7c:6e:d5:7b:06:26:3e:6f:6f:bb:e0:5b:93:f1:ea:
                    12:bb:eb:38:53:b4:89:e2:8a:00:37:7c:60:13:e3:
                    41:c5:fe:5c:61:78:f7:a3:0f:11:92:d0:33:23:0b:
                    24:3f:f1:dd:ba:ae:6b:02:2c:47:0c:1f:d8:27:62:
                    79:b7:dc:96:73:8e:9f:d4:a7:45:5c:6b:bd:df:e3:
                    c2:de:54:c9:c9:bb:da:f1:cd:04:58:25:a3:97:48:
                    da:34:30:48:42:63:41:a1:23:82:4d:aa:a4:3c:ae:
                    b8:1b:ac:5c:48:61:00:95:4b:93:5c:88:88:11:29:
                    46:a2:04:cb:1e:d3:a4:c6:d7:51:f3:7a:51:f9:e2:
                    a7:16:6c:33:25:63:43:d2:66:8a:ba:8e:dd:6c:c6:
                    05:10:20:90:13:bd:a6:8c:8f:31:4c:43:7d:0b:a9:
                    95:09:c5:9c:9d:07:26:2c:73:3b:a5:0e:f2:4b:4f:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:70:4E:97:96:6C:A9:BA:BD:50:14:F8:D1:40:04:4B:ED:2C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/be3ba580-d94b-3f11-a765-7e7aa3573f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:95:59:32:84:26:db:5f:11:a1:cb:e9:4b:7e:0f:e5:18:
         6f:e0:e5:7d:d2:02:9b:26:b7:8d:a5:ea:66:f1:14:05:17:7f:
         5e:97:01:6b:a8:ff:aa:8b:76:32:2e:62:1f:87:d9:2d:2b:79:
         fa:75:c3:5e:7e:ac:5b:c5:76:eb:29:4b:e0:8d:84:e5:52:43:
         ad:30:13:f5:bb:89:dd:ac:45:49:f3:ed:3e:50:4d:66:17:65:
         dc:cb:67:ff:ef:f8:48:c4:ce:06:72:64:88:db:7a:e1:33:c3:
         19:2b:a7:f7:15:02:64:21:b8:38:da:5d:0f:51:d2:d2:5b:3c:
         6c:89:9c:2b:9b:23:ef:2e:ec:54:83:d4:8b:e2:2c:21:30:e6:
         0f:39:42:64:8a:d7:4c:ab:1c:dc:f9:90:d7:08:45:7d:91:dd:
         fe:7b:b7:8e:9f:df:aa:6f:68:8f:49:97:be:43:1a:45:e2:6e:
         04:aa:9b:2c:02:f4:ba:67:d3:d0:d6:83:2a:66:ab:8d:a6:ea:
         dd:f8:41:38:7e:5f:1d:a7:63:1c:dd:61:1b:cc:1b:d7:86:1e:
         d0:90:bd:9b:88:de:52:ad:06:b4:d4:eb:f3:8b:29:0b:89:85:
         90:af:dd:d9:52:bc:5e:60:3e:6e:db:d9:a8:da:04:82:8f:75:
         df:1f:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:46 2025 by rpki-client