Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa
File:                     0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa (raw, json)
Hash identifier:          u3dpvQ+OXxYtGcsb/zUv1wA86ovPq7ASU9601zyCRAA=
Subject key identifier:   B6:EB:18:08:A4:81:3B:29:F9:8D:A1:C5:2A:54:54:53:E1:98:1A:07
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CFD97136242D0A9AE5D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11426
IP address blocks:        192.58.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:fd:97:13:62:42:d0:a9:ae:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=85dfeae4-b7ad-4678-8038-3412b344dd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:5b:f0:dc:88:11:a6:4b:af:ea:16:67:86:
                    6b:67:7d:e7:77:18:4d:6d:07:94:25:db:a3:07:a6:
                    6c:77:25:69:2f:d8:12:f1:7c:81:ed:5c:f7:3c:fa:
                    64:ec:2b:91:40:e7:7a:3d:7a:59:ce:d2:49:22:fb:
                    47:d1:a8:a8:ce:ff:87:19:85:99:72:41:5c:25:d9:
                    f2:3f:f0:34:ae:07:e2:95:20:d8:46:4a:7a:55:2b:
                    8b:82:68:71:b1:35:f1:43:7b:63:f6:02:09:03:38:
                    c8:40:c3:69:c7:6a:b0:2d:cf:68:6f:ca:9b:90:e6:
                    69:67:f5:ed:e4:fa:73:30:f0:f3:15:9c:8b:80:cb:
                    36:4d:59:1e:7f:6d:0c:4f:6e:24:6b:e3:86:18:68:
                    5b:89:c7:75:e7:f9:aa:fa:f4:4d:58:e5:e5:6b:13:
                    48:28:28:35:a6:37:c1:07:78:40:69:1e:e1:30:f3:
                    89:39:87:c7:34:3b:80:3b:5e:44:85:31:ba:42:d8:
                    ed:be:32:ab:08:2b:08:49:03:2d:88:1b:21:d2:d3:
                    5c:51:68:8b:c3:62:18:7c:f7:ef:30:6d:51:4e:26:
                    8e:cd:e5:7d:61:cc:b2:72:80:a2:5b:c3:5f:9c:53:
                    aa:cf:f7:df:c2:2d:6c:05:3f:af:04:82:db:67:34:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EB:18:08:A4:81:3B:29:F9:8D:A1:C5:2A:54:54:53:E1:98:1A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b91cfb9-4cd7-38a0-bda2-13e2f71f65f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:49:fe:40:0c:e1:95:3a:25:49:a3:5a:15:87:cc:e1:d3:
         1b:7a:bd:17:32:4f:6b:7a:bc:40:2e:df:fa:4a:4b:4b:85:e3:
         40:ff:ae:18:bf:35:4e:68:9d:22:b0:0a:5d:7c:fc:b8:8f:93:
         de:0f:4a:12:09:09:5a:1b:d2:14:8b:71:d7:12:3e:9e:37:51:
         e1:f4:88:08:75:e0:92:94:16:e2:f8:53:c1:c5:47:f4:36:39:
         19:a6:db:fc:39:79:52:b0:a9:db:d7:bb:81:65:e6:9c:35:4a:
         f6:8a:25:24:c7:34:97:83:e0:6b:5b:37:d8:79:69:9f:f4:2f:
         c9:de:6b:67:13:9f:c4:a8:36:b9:f1:d3:15:15:ed:de:1b:4c:
         53:2a:28:db:83:8a:ec:c3:d5:02:f6:39:92:0c:68:9b:aa:95:
         3d:6b:b7:c6:87:74:30:02:d3:88:7f:38:df:15:1c:1e:10:c0:
         60:39:e0:6e:cb:91:8a:17:8f:e4:d1:57:49:31:b9:e8:44:f0:
         30:4e:73:4b:8e:0d:38:00:5e:ef:7f:03:ee:1c:f9:87:b1:b3:
         b7:14:52:96:97:d1:41:4c:ae:a1:1c:3e:fe:26:2a:a0:bf:0d:
         02:58:43:fa:0c:97:5c:46:71:86:09:5e:dd:dd:bf:7e:f7:9f:
         f6:aa:97:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:24 2025 by rpki-client