Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa
File:                     0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa (raw, json)
Hash identifier:          HJZd7P8KDewrwcU1i93mWVssl+HwS1gAmeAdDeQImBE=
Subject key identifier:   C1:DD:EA:AC:CE:46:3E:50:E5:82:CB:CB:5F:E3:25:7B:37:C6:46:01
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB0B90CE40CD0CC1044200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        96.29.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:0b:90:ce:40:cd:0c:c1:04:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=ec8281bf-4531-47a4-9e46-581a10ecf679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:36:be:6c:9f:05:74:df:59:92:11:c0:62:
                    6b:00:2d:56:ff:b7:2d:19:d1:b4:cd:30:fa:e4:be:
                    35:7f:5a:ef:6e:72:a1:c3:50:b8:d8:8a:d5:66:8f:
                    e9:64:d9:43:63:90:4e:38:42:a6:54:df:27:ae:59:
                    ba:53:9c:87:6e:53:ee:77:7c:5a:ce:3a:77:bb:de:
                    a8:d8:6e:56:80:ef:08:b2:7e:05:a5:66:9c:7f:0f:
                    04:40:16:d6:35:2a:00:63:7b:80:d5:ec:61:b8:19:
                    30:aa:96:d7:e1:7e:8c:d5:fa:ed:fc:a4:9d:f9:5d:
                    cd:d2:a6:2c:a9:5e:7a:af:19:e2:3c:27:43:4b:99:
                    02:59:eb:33:dd:aa:19:bf:e5:51:d8:4d:77:03:08:
                    0c:78:5a:f6:d8:46:ee:90:09:23:a9:fe:2d:80:45:
                    fb:17:09:d4:a6:84:a0:82:40:91:a4:c7:06:9f:b4:
                    3d:1a:84:67:37:c5:8e:f1:cf:c8:bf:39:55:e5:27:
                    85:ab:b7:3f:46:a7:b2:60:86:24:91:6a:c5:57:9b:
                    4a:b1:a1:51:bf:af:df:45:c0:eb:c3:d8:82:2e:cb:
                    d1:cf:79:24:7b:73:3c:2e:05:e1:f0:1d:77:e4:f1:
                    84:4c:88:f0:05:d4:16:0d:c3:aa:a6:e7:45:9a:f2:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:EA:AC:CE:46:3E:50:E5:82:CB:CB:5F:E3:25:7B:37:C6:46:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0001c2e0-15ba-33ad-b7ce-04e647c3fb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.29.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:ff:fa:be:43:6e:c4:98:4f:2d:b8:48:99:4e:59:ad:33:
         68:d7:72:a7:dd:9c:fc:85:9a:b3:b8:b7:32:67:0d:51:66:97:
         db:b7:0d:23:45:ab:ce:1b:df:92:00:b2:2f:93:e7:ec:5a:f1:
         f4:4b:7e:5f:37:ce:31:aa:f6:ee:e9:b7:db:1b:e3:4b:13:9c:
         e8:7f:f3:25:fb:16:25:c7:d9:48:fd:d7:5b:9c:77:65:59:10:
         1c:f3:97:ec:5c:4a:64:96:98:19:5a:9d:08:a5:dd:ca:7a:4d:
         38:2f:9f:37:06:cd:2c:fa:3b:2a:4d:b1:70:ae:8d:c3:55:77:
         d3:a0:f5:74:a9:2d:58:d6:3b:e3:27:92:57:51:98:5e:85:06:
         7b:35:44:a9:a2:54:7e:d7:ac:8c:45:e9:50:ce:9a:7d:36:f3:
         ce:07:6b:44:27:8f:44:6e:52:95:c4:39:06:9b:33:79:1b:cf:
         64:b9:ed:c4:0a:a7:df:d9:99:eb:64:5a:51:29:48:b5:50:3e:
         5e:46:4a:85:05:0d:e4:10:a0:51:43:e0:b6:f0:58:40:7e:4c:
         9e:f1:47:fb:8b:0c:14:39:c9:31:d0:16:21:2f:61:c9:0f:3c:
         36:b7:5a:9b:f3:eb:d6:cd:80:c0:13:f4:20:a5:e4:aa:d6:be:
         1a:3b:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:34 2026 by rpki-client