Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c34aa6d-118f-37df-a609-654d4a2accf0.roa
File:                     0c34aa6d-118f-37df-a609-654d4a2accf0.roa (raw, json)
Hash identifier:          h+vATpaQVyNBQqnxX5lOgVfV9wJeCJVK5qewescOZ1g=
Subject key identifier:   8C:EC:16:0F:1E:10:E6:43:6F:65:1D:45:F7:89:35:B3:06:2E:FF:BA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D24110CB79D7DF9DDD980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c34aa6d-118f-37df-a609-654d4a2accf0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     394791
IP address blocks:        97.76.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:24:11:0c:b7:9d:7d:f9:dd:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=334d8d37-46c2-44df-a3fe-ab8989f81dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:a5:05:7a:af:d7:8a:60:94:27:e1:99:0b:
                    76:56:79:ae:4f:6e:25:60:74:3c:a4:43:2c:e4:41:
                    33:ef:6a:27:7d:37:37:6f:2b:d2:29:65:9f:50:71:
                    6b:8e:c7:a8:c6:8e:7e:4d:38:7c:78:c0:06:ba:11:
                    6d:b0:87:e0:59:fc:79:66:e4:0c:0c:3a:a2:58:62:
                    33:03:cc:e4:70:45:86:9b:49:d6:f3:40:a6:2c:92:
                    59:0e:89:92:a6:c7:90:f4:08:a7:d6:17:e3:cf:1c:
                    91:66:30:3b:88:c6:04:81:e5:5f:05:39:4d:f9:1c:
                    d8:7a:6a:36:41:f0:e7:85:18:1f:6c:6d:e4:f4:2c:
                    f9:4f:7a:a6:a6:b4:1a:96:f2:c2:04:03:d0:a9:b3:
                    b6:1e:19:8d:ac:e2:d1:1b:df:c1:d7:5a:53:3e:53:
                    05:40:64:a8:8a:03:f0:d5:17:af:92:73:b0:35:b3:
                    53:ff:14:fe:fb:f3:ac:6b:96:8a:ad:f5:72:ba:dc:
                    f8:fb:d2:6a:b3:92:07:be:7a:00:35:b6:2b:4f:c5:
                    93:9a:2f:27:4c:7f:d7:f9:a9:1f:27:43:04:ae:57:
                    8d:08:86:9e:52:30:1b:ac:4a:72:89:90:ce:f0:71:
                    9a:c2:08:25:4f:4c:1d:da:0f:d3:65:96:3f:ae:8e:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EC:16:0F:1E:10:E6:43:6F:65:1D:45:F7:89:35:B3:06:2E:FF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0c34aa6d-118f-37df-a609-654d4a2accf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.76.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:02:e4:61:8e:79:c2:14:38:c5:4c:6d:c2:53:d5:97:c7:
         d3:df:cc:f0:be:a0:fa:0b:c8:b0:59:47:e3:3b:0d:0d:68:9c:
         d1:f8:7c:24:d5:53:e5:3b:ab:f2:5b:b9:25:23:5b:70:d7:9f:
         4c:20:9e:60:14:b5:d1:8c:44:5f:ce:ac:b9:50:47:a1:63:63:
         e7:67:56:31:55:0e:4c:ce:47:7a:8d:18:16:41:32:be:78:88:
         1a:f5:40:ab:ab:c5:be:9e:6e:f2:af:f6:54:88:0d:aa:0a:3f:
         0c:5f:26:19:63:b5:06:f3:ee:19:54:db:66:c6:c1:ae:75:7c:
         48:af:4d:51:b3:b0:27:1c:9e:b1:f5:b9:9d:b3:a5:3d:dd:96:
         30:a2:45:ae:bd:d8:db:ec:2f:9a:0d:7a:a6:e0:07:57:69:8a:
         68:ca:7b:27:3a:fb:42:11:27:bd:b2:0a:66:b7:34:00:c6:0e:
         77:1c:e5:66:4b:6c:d7:12:a6:b9:54:06:7b:f1:10:3e:b4:87:
         af:40:68:76:c4:95:e1:76:6a:d2:78:9c:6c:23:35:7b:0b:7d:
         fb:c8:45:30:fb:ac:e1:ad:18:5b:68:be:c5:0a:51:5d:7f:cd:
         7a:3b:54:25:71:ce:8d:fd:69:51:30:43:a9:a6:27:f1:c7:a6:
         d0:f1:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:43 2025 by rpki-client