Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/131b6cd9-0969-391c-a9aa-678f0f71c5e8.roa
File:                     131b6cd9-0969-391c-a9aa-678f0f71c5e8.roa (raw, json)
Hash identifier:          uYtj0po7SNyhcBsb2/DwuZOd47brEffvipHvfzYeTQI=
Subject key identifier:   C3:D2:5F:BD:60:07:AC:73:78:CA:40:8F:13:C9:54:CB:72:4E:CB:72
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CEEBB2B9C3026710DF680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/131b6cd9-0969-391c-a9aa-678f0f71c5e8.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        74.219.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ee:bb:2b:9c:30:26:71:0d:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7ceffdcb-a6e4-4524-9c3e-3e282ecb8e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:ed:bb:39:10:be:2c:ad:cd:ff:b2:53:7c:
                    ef:ce:b2:b5:71:f0:b8:f0:a5:fd:9f:24:ab:3a:92:
                    a2:35:0f:91:72:10:5d:e8:a4:4e:c2:6c:9e:dc:ca:
                    52:49:7d:ef:d3:a5:21:3d:d3:84:a6:a4:72:93:53:
                    54:4e:31:84:91:d1:49:b1:17:30:3c:24:76:4e:11:
                    d9:3b:91:80:26:9b:d8:2e:42:24:9c:c9:5b:c4:2d:
                    03:1c:fd:93:fd:fd:58:e7:c4:5f:55:31:06:6e:34:
                    5c:b6:dd:42:20:66:11:f4:fb:7e:93:37:aa:0c:15:
                    9a:1c:67:ac:09:dd:8a:2e:2d:a3:aa:40:b6:25:f1:
                    8d:50:5b:0c:59:ca:55:59:00:06:c4:52:f7:45:67:
                    ad:96:8d:4c:fa:68:35:db:fc:57:a0:ae:7f:5c:3b:
                    af:43:e0:bb:ff:86:ba:57:ba:6a:2f:91:dc:89:58:
                    93:5c:4f:4d:44:00:8c:17:f3:1c:b1:d4:26:6a:58:
                    31:9b:86:91:9f:46:5b:f9:8a:af:27:24:5b:d8:ca:
                    66:b5:a5:7e:3f:f9:b3:2d:f1:62:30:41:ad:aa:43:
                    55:38:60:d9:00:dd:24:6d:52:59:29:f0:27:e2:61:
                    c4:23:4a:6b:45:52:16:17:81:28:d6:1f:5e:61:1b:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D2:5F:BD:60:07:AC:73:78:CA:40:8F:13:C9:54:CB:72:4E:CB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/131b6cd9-0969-391c-a9aa-678f0f71c5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:87:08:e7:90:94:d6:1d:5f:53:d4:1d:1a:ea:b8:23:bf:
         4e:f1:9f:7c:0c:48:c8:40:da:e0:76:b0:55:3d:2f:47:c1:8a:
         78:63:30:a9:e6:66:55:55:a9:cd:5b:b9:e7:52:08:de:a5:41:
         fd:68:7a:fc:16:af:0c:57:88:72:31:58:ea:6e:47:3b:ff:7e:
         00:80:84:ed:1c:92:75:9e:da:23:5d:20:53:42:03:66:ef:4e:
         40:34:95:7e:33:a7:e1:78:49:30:d8:ca:b6:af:2f:11:62:86:
         b5:dd:bc:7f:3e:60:0d:c1:4a:b4:30:1b:79:ea:51:fd:88:e2:
         a2:ed:bb:c4:41:15:64:77:f3:d8:92:3d:bb:2b:bb:5e:cf:96:
         a9:ae:f8:c8:2b:4e:1f:3c:48:36:f5:9c:5f:fe:26:64:8e:c6:
         9c:95:67:bb:28:ee:49:aa:57:ad:24:d6:85:56:1e:66:e5:b0:
         e6:97:24:46:61:11:14:39:82:d6:e7:78:ab:b3:dd:74:89:b7:
         13:f1:de:50:73:e3:a2:71:ae:75:0f:83:ab:ad:e2:60:b8:5f:
         72:7e:24:e5:bd:6b:c6:ae:19:32:ff:ce:64:d9:9f:f4:44:fa:
         ae:5e:04:cf:26:af:80:8d:f6:8a:4b:68:e1:ed:f6:8f:1c:c6:
         22:6c:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:53 2025 by rpki-client