Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa
File:                     0b01ce4e-e931-3582-b87f-1a414be977b1.roa (raw, json)
Hash identifier:          P7kajsJhgsWVeFQR3N1VY2sw1RNLtTkI3LeGt89r6zc=
Subject key identifier:   5B:65:5C:F5:8F:AC:B2:D3:A7:62:FC:16:A4:EF:CD:74:3C:B4:BB:AA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF829AC2E7B64B6EF50C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        24.39.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f8:29:ac:2e:7b:64:b6:ef:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=85be48c9-14c4-4c37-8c6e-af46376b8f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:ff:f9:32:04:84:24:d2:a4:be:a4:0a:72:
                    40:44:1d:f8:04:a5:12:70:1d:09:06:02:66:13:b1:
                    a6:7d:5d:ca:6c:ff:b8:69:f4:7b:60:32:6a:2b:5a:
                    c1:98:e3:6d:a3:01:69:4c:8e:1e:86:b9:94:c2:c7:
                    20:dd:fe:de:a9:b6:67:c7:fb:91:0d:3a:b3:a8:92:
                    8c:c1:41:d7:ac:dd:25:59:0e:a6:67:df:8b:72:ef:
                    90:c0:b6:a2:03:f7:4b:eb:75:c7:d0:00:05:ff:5d:
                    82:61:58:01:73:ea:a7:26:92:22:1e:64:14:4f:eb:
                    ad:b3:96:fb:67:27:a7:6b:d5:29:01:3c:ae:a8:a8:
                    16:2e:8f:26:ec:18:05:6c:c9:e5:92:9d:dd:15:da:
                    60:91:02:11:9a:a0:b7:e7:0a:ab:c3:37:cd:10:e9:
                    0c:60:5a:d7:cb:ad:5e:30:b9:49:93:6a:98:99:fd:
                    f8:ae:b5:8d:cb:d4:69:62:9f:8b:64:2f:3b:b0:0c:
                    06:28:69:97:bd:ca:45:86:9c:1a:ba:32:c0:46:60:
                    ff:d7:f9:96:96:20:4d:02:08:ff:bb:96:f1:b7:58:
                    55:dd:b0:15:c8:b3:f2:46:18:41:f9:17:b4:1e:6e:
                    33:3a:3f:dd:83:8a:66:a3:87:91:90:cd:8f:01:a2:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:5C:F5:8F:AC:B2:D3:A7:62:FC:16:A4:EF:CD:74:3C:B4:BB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b01ce4e-e931-3582-b87f-1a414be977b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.39.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:3c:f6:19:46:dd:5e:50:b3:ee:54:e2:b1:4e:d6:c1:6c:
         0c:5a:2f:36:71:85:4c:6a:22:f6:67:1c:e7:a5:a4:a3:92:b7:
         c2:f0:a0:6c:01:8d:bd:eb:f7:fd:66:42:69:00:e8:41:99:2c:
         a8:58:a5:fb:41:d9:5f:e8:25:35:95:00:e4:ae:37:c7:3a:9a:
         0b:bc:49:fe:b5:6b:60:3f:b5:a8:10:ef:45:25:f7:dd:0b:35:
         6b:1b:3d:c6:22:6a:02:32:d4:71:61:12:ff:c6:1d:73:d3:9b:
         91:c4:4d:79:28:3a:8f:cb:79:95:44:93:ee:c1:27:33:26:0f:
         75:cf:8d:e1:3b:d5:55:18:c5:0d:66:4e:3b:24:78:86:a7:b9:
         0a:9c:41:cf:9a:cf:e9:45:17:f5:cf:29:3d:7d:5c:17:f4:97:
         6f:98:92:4f:9a:1e:d3:6f:21:41:e0:6d:19:fe:2d:72:81:93:
         d2:5b:f4:43:a0:ba:ba:a9:96:54:e9:ec:3c:69:a0:8b:9c:41:
         1e:06:b7:74:3d:05:aa:61:3b:bd:cd:5a:62:5f:17:b4:95:13:
         3d:28:14:1f:3a:12:21:95:fe:cf:85:8f:07:d4:19:6b:2f:c6:
         ad:9d:d6:90:f2:98:6c:f6:e7:19:93:cd:8a:8d:0c:e6:09:4e:
         62:05:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:51:35 2025 by rpki-client