Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10a0b88d-aa65-3228-b9b5-63fbcb1f892d.roa
File:                     10a0b88d-aa65-3228-b9b5-63fbcb1f892d.roa (raw, json)
Hash identifier:          x7hxaxOHjHa43E8F1SAN+iF1a6cz8KfkwoTkMakkSuU=
Subject key identifier:   B2:81:3A:D7:61:7D:13:6A:BB:67:68:0C:16:43:A4:10:61:A9:4C:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9E14622C67313A062580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10a0b88d-aa65-3228-b9b5-63fbcb1f892d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11159
IP address blocks:        173.196.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9e:14:62:2c:67:31:3a:06:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=45718136-8319-4114-8bee-edfd87ce47ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:3b:bf:a1:98:df:fd:f2:c4:8e:74:78:b5:
                    20:10:d2:47:ff:b5:a3:d4:52:5d:2c:33:b9:00:d5:
                    b2:c2:63:66:2f:b9:91:52:6e:8f:bc:ec:18:95:4d:
                    6a:cf:01:e2:a9:07:47:c7:57:05:9f:0c:b9:96:53:
                    c9:68:17:29:b3:cd:e0:b1:6c:1d:4f:5b:c0:2c:5e:
                    db:b4:a5:98:b9:dc:82:02:b8:5f:60:bb:95:4b:e9:
                    d5:e1:19:da:1f:e0:0e:2c:cc:e2:1e:0f:cb:e4:13:
                    59:d5:74:8c:8c:21:4f:b8:3e:e8:83:63:bc:91:0a:
                    b7:35:fc:5d:e9:5a:b4:49:da:ea:7b:1e:d1:85:a2:
                    31:a2:4c:69:7c:9f:ac:da:2b:29:8c:4d:36:e1:a4:
                    01:72:54:5b:f7:af:e4:ec:46:a5:ca:9b:f8:67:21:
                    93:88:22:32:60:81:6f:42:ff:5e:3b:f2:e7:68:10:
                    a2:39:2a:b5:3a:e8:63:cf:c7:12:87:c2:b8:a8:58:
                    fe:81:ee:e0:40:54:41:7a:15:4b:eb:ea:ac:a2:61:
                    27:07:03:bb:1b:11:b4:df:ce:fe:1a:ac:7f:5b:46:
                    82:09:fe:17:e1:f9:e7:4e:c6:86:b8:f2:69:7f:e9:
                    92:f6:43:e6:04:4b:96:f1:1d:8c:b8:a7:22:07:21:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:3A:D7:61:7D:13:6A:BB:67:68:0C:16:43:A4:10:61:A9:4C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/10a0b88d-aa65-3228-b9b5-63fbcb1f892d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.196.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:e2:24:2b:c8:a3:52:6f:f7:8f:2d:4c:1d:e2:1f:5f:71:
         64:e9:cf:c9:63:d7:c4:fc:1d:2a:df:ed:ef:57:08:b7:55:16:
         19:7c:95:f1:18:ad:7c:81:98:32:bb:eb:7c:59:0f:15:98:2d:
         d5:5d:9a:37:ac:fa:d5:c6:f1:02:81:f3:19:55:f7:36:04:46:
         bb:bb:4d:0e:e1:b2:e0:ed:0d:4b:d4:66:9a:f3:0b:c4:a1:59:
         73:ae:38:aa:00:6d:fc:01:fb:22:d9:cd:ea:c9:b0:fe:7f:e6:
         a7:1d:48:7a:85:8a:22:ff:97:e9:2b:1e:fd:31:53:f5:31:7c:
         9a:7a:c0:72:f1:10:94:1b:8a:75:b8:1b:f2:ee:61:6a:fb:c9:
         86:53:45:80:3b:b1:6e:a3:3d:72:63:27:5a:24:38:7d:64:4f:
         a8:4f:30:3d:bb:42:a4:f3:b2:84:44:49:21:bf:25:e5:40:b9:
         68:77:41:d2:57:90:68:1a:80:02:97:4b:24:d4:43:da:ba:66:
         4c:5f:44:b8:96:62:c4:0e:66:2c:2e:a7:fb:ca:c8:a1:28:98:
         e3:d7:9f:43:c8:cb:bc:c4:35:d9:06:ed:90:d8:f0:c8:a8:72:
         e5:5d:94:4c:32:5e:b3:28:a8:36:38:5a:f2:b3:7c:fd:ab:73:
         86:79:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:46:18 2025 by rpki-client