Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d51d921-a007-31b2-8243-91024aa06a89.roa
File:                     0d51d921-a007-31b2-8243-91024aa06a89.roa (raw, json)
Hash identifier:          /IFzWLXjbTAOeUka697W/+/ZfXAr4j+UerJGH9kcKN4=
Subject key identifier:   94:80:D3:02:6F:E6:CA:0C:B8:33:9D:8C:41:E4:DE:D2:B8:A8:2E:BB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B94422D7B186B1639305CAAF0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d51d921-a007-31b2-8243-91024aa06a89.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     33363
IP address blocks:        97.97.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:2d:7b:18:6b:16:39:30:5c:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=fca256cc-8274-4ea7-aa68-8084f0954394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:c5:83:b2:18:e3:93:c1:7c:7b:1a:2e:f7:
                    75:23:fe:cb:48:0d:a2:db:00:59:3f:4d:ea:a0:cf:
                    8e:d0:1e:90:b6:f8:c1:cd:f4:30:30:7d:a6:40:c4:
                    0f:93:17:91:88:61:f4:fb:53:a4:36:dc:65:50:dc:
                    78:3c:10:51:4a:c5:1a:0b:00:3d:c2:4c:a2:89:71:
                    63:a6:05:2b:6d:8d:f9:5b:0b:87:cd:5d:cf:2c:c2:
                    d4:df:f6:05:cc:eb:d9:22:40:3a:92:d4:24:30:d7:
                    dc:ca:e9:16:4f:99:97:b3:cc:2b:2e:3b:28:74:2a:
                    1d:c0:7f:1f:eb:76:95:dd:04:35:0a:9c:c0:0b:23:
                    ba:d0:ed:f9:c9:83:32:0e:f5:39:fe:d0:6f:51:e0:
                    fd:3c:8f:75:c1:5a:e5:5f:eb:d8:67:d6:d6:cc:49:
                    f3:92:81:60:ff:3b:52:e6:e2:91:8f:e2:6a:dd:12:
                    97:ba:9a:47:07:2f:57:0d:8d:80:f8:3c:51:21:95:
                    1d:95:87:4f:ee:5e:5d:fb:1d:60:c8:ad:89:d5:a3:
                    2c:c8:5b:2c:98:94:d9:4b:2f:c8:58:ea:51:d3:f5:
                    0f:eb:95:ca:1a:52:f4:07:e7:40:0d:07:9a:1e:0c:
                    3a:b1:69:15:d4:f5:b9:98:f2:c5:e4:d4:e2:d1:55:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:D3:02:6F:E6:CA:0C:B8:33:9D:8C:41:E4:DE:D2:B8:A8:2E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0d51d921-a007-31b2-8243-91024aa06a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.97.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:b0:e6:84:bd:5e:7c:67:4e:ef:e2:22:30:6a:91:4b:fc:
         8c:2f:64:82:9a:84:fb:3a:95:49:32:76:26:e0:ab:1f:5a:3d:
         f5:10:6e:05:48:ea:3d:25:0f:e5:35:e1:39:b9:2f:d6:c3:17:
         bf:dc:ed:45:d3:ad:ab:bd:68:ec:d7:34:f0:71:08:3b:26:c9:
         f5:81:98:cb:1e:2d:4c:24:ef:ea:b3:87:82:4b:f3:f0:0e:b3:
         69:fe:3c:f4:20:ea:60:e6:68:65:7a:6d:ff:17:d6:49:33:51:
         c5:da:fd:68:74:ad:cd:85:b4:2a:12:39:d7:c1:d3:65:e7:65:
         97:e9:20:09:75:f6:61:fe:46:e2:ab:31:53:00:f3:d8:a2:4e:
         68:6b:2e:9c:bf:da:a6:8d:bc:d6:76:12:83:4e:b2:cb:f8:9a:
         12:ac:23:56:d7:6d:6e:64:0e:cb:6b:58:93:c1:7c:c0:74:87:
         5a:9c:3e:87:63:3b:c6:3d:29:59:1b:3b:ac:bd:95:c5:45:e2:
         5d:9b:7b:71:8f:df:3b:37:bd:65:b7:c5:13:6d:7f:1b:24:df:
         38:86:e9:b0:f2:af:5d:99:c1:de:89:fd:4c:dc:29:e9:c1:2e:
         04:bc:bd:d2:e5:87:ac:99:34:8a:a6:ce:02:b9:26:80:bc:e0:
         9d:31:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:37:37 2025 by rpki-client