Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0ae86198-6992-33f1-a330-2cd4beabafb8.roa
File:                     0ae86198-6992-33f1-a330-2cd4beabafb8.roa (raw, json)
Hash identifier:          zp3zmr593y/GmjC2ByD88zDyoOoZAJ5pOg1wPFRXq3I=
Subject key identifier:   8D:45:F5:71:78:A4:FA:CC:F2:79:14:EB:44:6A:19:7F:58:BE:22:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB1AE6AD50BF8899957B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0ae86198-6992-33f1-a330-2cd4beabafb8.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        67.52.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:1a:e6:ad:50:bf:88:99:95:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8f31ac59-e194-4467-8b79-60813cb0c4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:4e:09:17:31:30:5b:e4:9e:4e:8a:b5:c2:
                    27:3c:67:8a:61:db:e4:37:fa:1d:e7:7d:a0:16:bf:
                    1e:13:82:f0:e1:5a:b3:a3:98:ec:e0:74:e8:85:58:
                    5b:63:a8:ab:9f:93:43:21:4d:01:e1:aa:f2:6c:c6:
                    ba:10:4b:7b:f2:99:15:7d:3e:f5:fc:56:60:4c:51:
                    2b:9a:31:f1:9a:5e:f3:77:fd:59:58:0e:a4:a7:59:
                    3f:91:dd:79:9f:cf:d5:e5:2a:84:10:0e:f5:90:3f:
                    15:ec:f8:c7:93:06:c7:6e:dd:cb:78:80:33:39:65:
                    8c:bc:8d:cc:42:3b:38:83:0a:fb:2f:63:77:fe:5b:
                    61:c6:c7:66:ae:3b:a6:ac:a3:e4:c6:5b:60:19:a0:
                    38:c0:b3:ef:87:d3:a9:bb:e0:f3:14:1f:d9:a2:d8:
                    c0:1f:f3:b1:ac:32:05:d6:98:19:7c:1f:83:a0:28:
                    eb:08:3e:7e:35:cf:23:3f:74:1e:d2:29:9d:04:b3:
                    99:33:16:c8:76:58:2d:82:45:07:f7:a8:a6:1d:24:
                    c6:19:5e:28:67:99:20:9b:d2:67:4e:62:3e:a6:f5:
                    26:41:4b:e2:2a:12:b9:2e:2a:64:ee:7f:01:71:47:
                    1a:80:d9:d9:27:ea:68:56:cf:ae:0e:b2:25:4d:71:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:F5:71:78:A4:FA:CC:F2:79:14:EB:44:6A:19:7F:58:BE:22:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0ae86198-6992-33f1-a330-2cd4beabafb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:01:6c:3c:11:29:57:58:75:0c:c9:53:88:4e:40:ed:ec:
         e1:41:16:04:7b:77:2c:1b:83:5e:27:e4:59:17:d8:7d:dc:0d:
         93:37:ca:7c:26:38:cd:68:43:b9:00:3a:3d:d5:09:07:b2:62:
         32:25:bf:1b:b2:ff:b5:19:59:86:ab:7d:8f:fc:30:9c:cb:1c:
         e3:49:29:ea:9e:83:ea:63:c7:0f:4a:90:ab:ca:64:f5:26:78:
         4a:e6:9e:b5:a1:63:55:f5:19:6d:90:14:45:80:11:9b:36:1c:
         36:a8:32:33:5d:3d:f7:f9:9d:f4:e3:47:65:93:b4:26:c1:a8:
         c6:27:fe:c7:f7:2d:45:ca:b0:bc:09:65:79:48:e8:d5:6d:24:
         86:18:9d:52:5e:7f:45:bb:2d:20:40:12:e1:ee:50:22:37:b9:
         75:08:a7:56:9f:e0:5c:f2:eb:1e:a9:d2:4b:54:5c:55:b1:ff:
         3d:5c:86:ee:56:98:20:7f:92:b7:53:74:c3:6c:71:3c:1e:34:
         06:31:4e:3e:c3:ca:58:1e:9f:27:3e:7b:c4:a7:0d:48:a1:e8:
         9c:d3:9a:0e:ab:92:94:9c:0c:51:a4:9b:02:24:53:10:fa:91:
         ff:69:32:01:3b:d7:3d:e9:c1:68:e2:2f:bd:93:7a:46:2e:1a:
         df:eb:28:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyxrmrVC/iJmVewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
OGYzMWFjNTktZTE5NC00NDY3LThiNzktNjA4MTNjYjBjNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs5OCRcxMFvknk6KtcInPGeKYdvkN/od532g
Fr8eE4Lw4Vqzo5js4HTohVhbY6irn5NDIU0B4arybMa6EEt78pkVfT71/FZgTFEr
mjHxml7zd/1ZWA6kp1k/kd15n8/V5SqEEA71kD8V7PjHkwbHbt3LeIAzOWWMvI3M
Qjs4gwr7L2N3/lthxsdmrjumrKPkxltgGaA4wLPvh9Opu+DzFB/ZotjAH/OxrDIF
1pgZfB+DoCjrCD5+Nc8jP3Qe0imdBLOZMxbIdlgtgkUH96imHSTGGV4oZ5kgm9Jn
TmI+pvUmQUviKhK5Lipk7n8BcUcagNnZJ+poVs+uDrIlTXFV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1F9XF4pPrM8nkU60RqGX9YviLrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMGFlODYxOTgtNjk5Mi0z
M2YxLWEzMzAtMmNkNGJlYWJhZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQzQoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAfAWw8ESlXWHUMyVOITkDt7OFBFgR7dywbg14n5FkX2H3cDZM3ynwm
OM1oQ7kAOj3VCQeyYjIlvxuy/7UZWYarfY/8MJzLHONJKeqeg+pjxw9KkKvKZPUm
eErmnrWhY1X1GW2QFEWAEZs2HDaoMjNdPff5nfTjR2WTtCbBqMYn/sf3LUXKsLwJ
ZXlI6NVtJIYYnVJef0W7LSBAEuHuUCI3uXUIp1af4Fzy6x6p0ktUXFWx/z1chu5W
mCB/krdTdMNscTweNAYxTj7Dylgenyc+e8SnDUih6JzTmg6rkpScDFGkmwIkUxD6
kf9pMgE71z3pwWjiL72TekYuGt/rKJw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:47 2026 by rpki-client