Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2c65673-b3f5-3cb5-bb3b-044663e538bf.roa
File:                     e2c65673-b3f5-3cb5-bb3b-044663e538bf.roa (raw, json)
Hash identifier:          fRczqc+7L1Vmiuf/MmxYRL/WXMQuNxOSy2L5egMNMVQ=
Subject key identifier:   40:98:7D:89:B7:8D:90:51:CB:A5:EA:1E:E7:C6:CF:48:B9:AA:D7:22
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161A8F3BC6B9A0EA6897E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2c65673-b3f5-3cb5-bb3b-044663e538bf.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16787
IP address blocks:        24.28.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:a8:f3:bc:6b:9a:0e:a6:89:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9ce16bbe-2c45-4bd2-bc01-9780ae22d622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:e0:48:ec:ef:f9:0b:72:0a:e2:ca:05:59:
                    37:d2:9c:b0:a0:91:53:84:6a:81:69:fd:4f:3c:3d:
                    5c:85:a5:b5:77:7f:a0:2d:72:a5:31:21:7e:48:cc:
                    5a:f4:1a:c3:a8:ce:e2:88:1b:fc:e2:22:32:07:8f:
                    2e:e0:07:20:e7:59:ad:27:72:05:75:c4:be:41:a4:
                    6f:8e:6d:5a:04:05:2a:83:cd:2c:5e:84:65:18:9c:
                    44:77:f5:f0:67:43:35:86:fb:35:94:50:6e:47:ea:
                    83:e9:3b:81:7c:6a:ec:0c:49:d2:5d:5c:bf:95:5f:
                    61:73:f9:12:69:9a:fb:60:ac:42:14:b6:54:b8:7e:
                    ca:81:07:64:8d:e5:ed:09:dc:1e:43:b5:0a:2f:0e:
                    d2:d6:ac:1b:e6:2e:28:e9:f1:0a:5a:63:1f:c6:a2:
                    2b:a1:ed:43:e2:34:bf:91:bf:21:7a:3f:43:bd:06:
                    bc:da:39:96:84:43:38:83:ca:be:fa:9e:18:9b:b5:
                    87:dd:27:6a:42:37:74:96:0e:f3:9b:e4:c2:8c:38:
                    d6:ee:ab:37:d4:1a:50:65:20:71:f3:fd:06:2c:c8:
                    17:1f:a2:c5:b9:21:52:8e:27:a3:70:c8:18:46:05:
                    76:93:da:4b:6f:56:46:e6:02:ab:0e:13:87:a7:01:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:98:7D:89:B7:8D:90:51:CB:A5:EA:1E:E7:C6:CF:48:B9:AA:D7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2c65673-b3f5-3cb5-bb3b-044663e538bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.28.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:14:c5:47:ca:b1:1f:60:ec:35:18:9d:c5:a9:1d:1f:ec:78:
         f8:5d:61:32:2c:ac:7b:85:72:d0:ba:35:1f:84:87:d7:37:0f:
         d3:74:bb:85:31:77:57:15:f1:5d:59:22:66:be:a3:d4:59:9d:
         0d:89:c0:99:06:2c:25:a6:68:53:7c:f6:e7:e1:57:5c:da:d4:
         cb:e8:f1:04:c6:e5:51:1a:ad:87:c3:00:4f:25:be:68:f5:82:
         18:f1:2a:40:b1:dc:76:de:31:4c:5d:39:0b:33:78:12:fa:fc:
         d8:7f:a7:c2:ff:91:19:a7:2e:60:f8:38:e8:52:d4:d5:fa:62:
         ad:01:19:34:81:d8:b4:a3:21:f6:25:90:92:f9:12:72:c1:b9:
         39:44:39:77:f6:59:cd:3c:08:c4:24:ec:32:b0:c4:32:8d:8e:
         78:fb:34:db:5b:39:cc:8d:40:90:4e:7a:d7:e7:b4:db:e7:32:
         0f:5f:39:2e:b7:35:5e:c1:8f:b3:57:cf:5b:4c:99:63:b3:a5:
         5e:7e:39:70:15:de:24:c0:94:02:79:f0:00:86:8f:35:a9:2a:
         b8:d4:a8:5e:68:fe:30:0a:0b:d5:76:22:d1:2c:d4:a0:5a:3a:
         c2:11:da:fa:d1:7c:a1:a4:63:81:33:54:ff:55:f8:3b:5f:10:
         1c:60:98:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYajzvGuaDqaJfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OWNlMTZiYmUtMmM0NS00YmQyLWJjMDEtOTc4MGFlMjJkNjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0TgSOzv+QtyCuLKBVk30pywoJFThGqBaf1P
PD1chaW1d3+gLXKlMSF+SMxa9BrDqM7iiBv84iIyB48u4Acg51mtJ3IFdcS+QaRv
jm1aBAUqg80sXoRlGJxEd/XwZ0M1hvs1lFBuR+qD6TuBfGrsDEnSXVy/lV9hc/kS
aZr7YKxCFLZUuH7KgQdkjeXtCdweQ7UKLw7S1qwb5i4o6fEKWmMfxqIroe1D4jS/
kb8hej9DvQa82jmWhEM4g8q++p4Ym7WH3SdqQjd0lg7zm+TCjDjW7qs31BpQZSBx
8/0GLMgXH6LFuSFSjiejcMgYRgV2k9pLb1ZG5gKrDhOHpwEBZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECYfYm3jZBRy6XqHufGz0i5qtciMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTJjNjU2NzMtYjNmNS0z
Y2I1LWJiM2ItMDQ0NjYzZTUzOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGBzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQUxUfKsR9g7DUYncWpHR/sePhdYTIsrHuFctC6NR+Eh9c3D9N0u4Ux
d1cV8V1ZIma+o9RZnQ2JwJkGLCWmaFN89ufhV1za1Mvo8QTG5VEarYfDAE8lvmj1
ghjxKkCx3HbeMUxdOQszeBL6/Nh/p8L/kRmnLmD4OOhS1NX6Yq0BGTSB2LSjIfYl
kJL5EnLBuTlEOXf2Wc08CMQk7DKwxDKNjnj7NNtbOcyNQJBOetfntNvnMg9fOS63
NV7Bj7NXz1tMmWOzpV5+OXAV3iTAlAJ58ACGjzWpKrjUqF5o/jAKC9V2ItEs1KBa
OsIR2vrRfKGkY4EzVP9V+DtfEBxgmMM=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:43:42 2025 by rpki-client