Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f93851d4-c013-3a2c-9b39-ed4ea3ac1d7e.roa
File:                     f93851d4-c013-3a2c-9b39-ed4ea3ac1d7e.roa (raw, json)
Hash identifier:          rBBo7lEpfuL4xpKiFHuUt5n+NDHmWUl22Wl3XN4tjUk=
Subject key identifier:   EF:C9:5F:44:27:75:83:CA:D1:3D:AF:97:22:7B:AE:0B:DD:29:6B:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B0A86E3E9E9A86E3CAE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f93851d4-c013-3a2c-9b39-ed4ea3ac1d7e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        173.168.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b0:a8:6e:3e:9e:9a:86:e3:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=554df708-1397-4894-95ee-eeffde61c65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:e9:5c:8e:c6:8e:50:bf:fe:08:b6:21:4c:
                    38:95:35:d7:4c:6b:6f:30:10:65:15:9b:a8:b2:8f:
                    56:84:04:8b:97:51:99:e4:5e:d6:99:9a:04:01:2c:
                    76:8b:ee:f9:f9:42:15:fa:54:6f:08:af:5b:ef:9b:
                    a6:30:42:04:34:4a:19:32:75:da:44:b5:1b:95:29:
                    6f:55:24:28:e3:c9:c7:84:90:8d:5c:57:cd:69:38:
                    d8:22:a9:2f:02:e6:e1:8d:05:62:4e:e3:f9:4d:93:
                    16:d1:e5:89:77:52:7b:d2:c6:7a:33:4c:d5:b4:39:
                    47:a0:d5:38:79:d9:ab:bd:b1:d2:7f:2e:5a:9b:b9:
                    99:4a:95:f1:d0:ea:db:76:54:f0:18:9c:3c:41:d6:
                    c7:00:f1:4e:c1:78:78:79:79:dd:2b:2a:2c:5d:31:
                    1f:8e:cf:c2:9d:5d:bc:c7:93:bb:9e:5f:f4:5f:84:
                    52:e5:df:f2:23:db:10:ab:26:38:58:cb:74:ff:5e:
                    65:b1:0c:6d:e8:f5:f5:72:81:28:4e:38:41:e1:80:
                    52:92:f7:71:2f:8e:13:d4:76:41:da:ee:d6:05:51:
                    c7:5b:9f:08:b8:48:9f:fe:92:83:08:5c:73:96:fe:
                    2f:75:c1:41:5b:63:e1:58:a8:72:ce:10:ee:69:01:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:5F:44:27:75:83:CA:D1:3D:AF:97:22:7B:AE:0B:DD:29:6B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f93851d4-c013-3a2c-9b39-ed4ea3ac1d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.168.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:9c:6a:1c:78:63:1d:33:df:e0:09:97:7b:87:a2:96:d4:
         83:60:41:0d:38:10:41:55:15:d3:13:bc:ba:e1:e1:4a:68:a5:
         16:20:4b:e3:ee:f1:2d:d8:e2:3f:46:89:dd:d2:98:d3:ee:8a:
         33:3c:f4:99:6b:b6:13:f1:27:20:3b:06:05:0d:54:77:cc:fb:
         73:96:3a:fc:36:a0:a7:01:39:2f:41:5f:3d:da:ac:90:99:18:
         52:ef:2f:98:96:82:6b:5b:f9:5d:fe:a4:4d:16:bf:b5:1a:f6:
         25:a0:2f:f3:48:d5:c4:4a:d0:81:b6:10:41:28:3e:bf:e6:d5:
         b7:2e:33:7b:d6:21:a2:41:d1:8a:40:23:d8:5c:5e:b5:ec:c9:
         03:0c:fd:3e:21:fc:3b:56:aa:4b:63:1f:53:47:80:96:94:7b:
         f2:17:8b:62:0a:df:49:13:50:69:d7:7b:ce:07:f4:89:85:48:
         ac:2e:15:c9:1e:e1:20:1b:69:3e:07:1d:f7:01:7f:b1:2f:e0:
         d3:05:02:fb:ad:d8:09:1d:88:aa:41:0b:86:eb:3a:c6:e4:67:
         94:33:bd:b4:8f:69:61:9f:0f:43:c2:48:8d:34:64:2c:eb:05:
         75:10:c9:21:05:34:60:ef:e4:be:41:91:d2:25:0b:2d:e8:5c:
         18:d5:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:19 2025 by rpki-client