Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f424831-5e2e-3d0f-8fc5-cae5e8a29c3a.roa
File:                     0f424831-5e2e-3d0f-8fc5-cae5e8a29c3a.roa (raw, json)
Hash identifier:          kiPZ7ClWnYDOLeFlx4tLGHGLupYm052s3X8uc0SmwBo=
Subject key identifier:   C1:38:37:9F:6D:9F:BF:21:67:37:14:B2:FF:5B:76:4A:4D:A6:C3:53
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB364BDCFDCECD17B61000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f424831-5e2e-3d0f-8fc5-cae5e8a29c3a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        24.25.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:36:4b:dc:fd:ce:cd:17:b6:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=7e59345f-9128-4199-8b5f-d8b4ab6fd6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:1d:26:76:7d:9b:ec:94:ed:bb:b6:75:a2:
                    24:1b:d5:5b:56:40:f7:4c:ca:c7:0a:c4:7c:62:ad:
                    0d:ac:d3:02:87:09:f1:c1:c0:d6:69:6b:c6:4d:c1:
                    72:14:26:0a:88:b6:5e:bd:8f:0b:ab:6b:a8:4e:8f:
                    f6:32:3d:e1:67:3b:ab:2c:67:f0:bd:18:f9:9e:e2:
                    de:fe:d1:7e:c6:fc:03:01:b5:2d:5d:50:5b:d1:d4:
                    e7:63:0b:c5:c8:08:83:dc:3b:45:71:b7:53:3b:a6:
                    9b:62:71:5d:83:eb:08:0e:8e:97:5a:bd:5b:12:6d:
                    70:17:85:d2:a3:a6:7d:c0:59:5d:be:a1:fb:93:ad:
                    3a:4d:e7:f4:81:9a:ed:86:4a:88:2c:d4:4c:aa:91:
                    b9:97:ee:22:f4:3b:d4:d5:fd:a5:d1:dc:37:58:cf:
                    4d:2e:df:86:47:22:60:8e:24:d9:9b:54:8d:98:ec:
                    74:4f:40:14:6d:68:a8:ab:a2:ce:d1:3f:82:d8:2b:
                    c4:f2:5e:90:ff:c6:94:2b:c4:1e:9d:91:b4:6e:62:
                    53:5c:3f:57:b7:4e:87:fb:26:19:0b:09:7f:26:9a:
                    40:61:75:2f:ef:d7:f7:8c:12:53:a1:ba:48:c4:4e:
                    5e:fd:f4:68:95:a9:f4:25:53:43:52:df:5f:2a:44:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:37:9F:6D:9F:BF:21:67:37:14:B2:FF:5B:76:4A:4D:A6:C3:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0f424831-5e2e-3d0f-8fc5-cae5e8a29c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.25.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:53:b9:76:00:60:c4:1c:0c:5f:55:15:c9:d7:d6:fe:aa:d6:
         81:41:9d:09:d3:7d:16:54:99:67:f0:35:d0:77:8b:8b:b2:85:
         7b:87:2f:e3:1f:ae:cb:a9:d9:5c:1f:9b:96:96:74:47:0c:cd:
         1e:0a:9f:fb:e9:63:e1:58:1e:ed:97:9f:01:c4:b1:fe:62:f5:
         2e:b8:59:ed:14:03:23:4b:ad:95:6d:ec:6f:67:f3:da:f4:94:
         07:33:fa:fe:a3:96:01:4f:83:28:44:b6:92:c4:d8:c3:f0:06:
         1a:e9:cb:2c:c1:1b:f5:7d:18:36:70:e8:0a:96:c5:cf:24:fe:
         8c:c8:ee:d9:a2:90:4f:e0:00:d7:2a:8b:29:91:e6:52:c0:f1:
         8c:0c:4c:30:68:bb:fa:36:98:28:38:4b:4c:08:2a:d2:29:68:
         87:8b:35:1d:08:03:30:c1:cd:80:66:12:46:e9:cf:2f:88:e0:
         3c:4f:89:99:b9:55:8b:fa:0e:57:8d:dc:76:33:56:6a:f8:14:
         ed:ba:a0:13:ea:da:23:13:0e:43:78:25:56:f5:6b:97:27:c9:
         d4:37:ad:0c:0a:51:8c:6f:ab:5e:10:4c:92:0d:59:63:eb:5f:
         30:4e:5a:07:ee:a4:22:b1:db:d5:c1:2d:d7:18:80:76:b5:53:
         c9:8d:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:44 2026 by rpki-client