Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e6c731de-d4df-358d-adbc-d5a8e99aa377.roa
File:                     e6c731de-d4df-358d-adbc-d5a8e99aa377.roa (raw, json)
Hash identifier:          1J3m1k/8qk1UIwlOOzie6QSK21qmpl8oS8AMekQ9eD4=
Subject key identifier:   C3:90:1F:37:53:47:14:75:C6:7C:B0:55:4D:DD:08:08:01:15:64:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619BCC3751299696D2A900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e6c731de-d4df-358d-adbc-d5a8e99aa377.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11426
IP address blocks:        24.172.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:9b:cc:37:51:29:96:96:d2:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=75dba13a-ef77-43e6-8eeb-e0a12be808e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:7b:06:85:b5:80:86:57:72:f1:a7:b7:eb:
                    e9:80:45:ab:29:64:0a:aa:ab:0e:66:42:79:ae:01:
                    52:75:57:07:e8:be:16:af:52:ba:99:83:71:33:91:
                    1e:4e:1f:32:55:a2:41:48:dc:cd:cc:e6:6f:b6:01:
                    64:d9:5f:7f:9a:0d:d6:b3:30:b3:c5:5f:4f:3a:e8:
                    cc:da:7c:86:c4:1c:9e:36:13:a1:a9:59:4b:49:60:
                    51:d0:3e:ef:03:a6:cc:82:aa:24:f4:4a:13:37:09:
                    d7:d8:5c:59:28:69:95:e2:65:85:4b:f1:eb:a9:82:
                    77:9d:0b:f6:a9:04:05:54:5b:7b:8a:62:c9:dd:3e:
                    68:4a:67:9f:95:8a:e0:7d:8a:93:39:b4:a9:89:27:
                    9e:9a:72:50:28:b7:ef:19:12:ae:52:b4:5a:3d:c5:
                    a6:d2:c2:4a:d2:42:ca:05:aa:be:ce:b8:3f:f3:3c:
                    98:74:d0:4b:dc:b3:88:81:04:15:b8:ac:a3:08:45:
                    51:18:f7:ac:3b:fa:4c:90:c7:14:c1:51:bb:5d:0d:
                    9f:55:5e:ed:89:3d:9c:6f:bd:a2:0e:cd:94:d2:be:
                    09:5c:32:6f:f6:21:4f:24:b0:64:ad:94:a0:75:d4:
                    d2:c4:01:13:94:bf:06:9a:e8:01:b6:84:32:d6:60:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:1F:37:53:47:14:75:C6:7C:B0:55:4D:DD:08:08:01:15:64:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e6c731de-d4df-358d-adbc-d5a8e99aa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:96:b9:bc:57:12:e1:1e:f3:f4:c0:00:f3:47:f6:d1:56:53:
         c6:18:89:fd:c0:58:11:2e:01:82:79:c9:98:6d:88:68:d8:c4:
         1e:aa:5d:1c:ac:8c:2b:1b:a5:6b:1c:28:30:72:27:4a:fa:29:
         a6:71:ca:b1:db:c5:3f:db:22:02:6c:44:d5:b1:10:e0:e5:67:
         8d:f7:f4:96:1e:e5:0d:6d:fd:3c:3e:0a:cc:d9:77:76:c0:33:
         5f:fb:30:c2:8d:40:5f:52:55:cc:c7:1e:00:9e:63:27:94:69:
         9d:2a:7e:e7:e0:51:3a:47:66:88:39:ad:f6:cf:19:b5:d1:32:
         0e:5a:49:e2:04:ff:92:e4:9d:85:36:93:6e:af:db:f8:96:f6:
         db:c4:cc:a0:b7:f4:ad:bb:f7:51:f3:63:8c:61:b4:3e:4f:a7:
         90:8d:2e:28:88:c7:6c:37:35:32:b9:ef:c0:d8:71:11:73:49:
         86:47:99:9a:cd:12:68:1b:f4:c2:41:6f:38:bc:96:a4:34:1e:
         2c:49:bc:25:bd:94:af:e7:8e:6c:fd:67:5f:94:5c:9d:8d:6a:
         3c:60:d4:f2:0c:29:3e:d5:36:36:c4:f6:6d:0d:48:81:5f:56:
         63:0c:77:d9:da:6f:4c:2f:97:23:90:46:6c:24:97:12:9a:bd:
         ce:26:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:12 2025 by rpki-client