Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa
File:                     16c01463-1164-33a7-aaee-f347b6f7f7b1.roa (raw, json)
Hash identifier:          ZdCm05BCjDmolTPccMmUidhgQOWlHLyEYMvJGcDY3bk=
Subject key identifier:   D3:E7:BF:57:78:96:0E:E3:0B:22:42:0C:79:F3:E1:D4:48:FB:8F:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E0537B5519F5D218A4500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        72.133.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:05:37:b5:51:9f:5d:21:8a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=cc56dfbb-258a-4ddf-8573-20ffb6740a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:37:d6:7a:b6:da:27:51:84:b8:65:22:a4:
                    3a:9b:55:80:4b:9e:85:54:e6:20:0d:25:e9:1b:03:
                    18:9c:fa:ec:5e:59:8d:6c:a9:bb:71:f3:91:8f:11:
                    16:3c:0d:a5:e4:75:6d:99:c5:57:9a:e6:09:ba:4d:
                    29:4e:32:58:af:d6:59:91:90:8d:66:08:c2:e9:90:
                    1a:28:ab:9c:96:55:16:11:cb:72:e3:00:b3:d5:18:
                    6f:96:9b:31:66:54:00:54:e3:54:b3:b0:23:e5:71:
                    f0:9c:10:ce:54:61:47:dd:de:78:4b:10:27:ed:d2:
                    10:3f:9b:88:15:a6:22:3e:be:50:50:e7:69:35:38:
                    cd:1c:3f:9a:5c:82:8f:fe:0b:5a:b7:73:94:02:b0:
                    ca:0b:28:ff:57:4c:2b:33:1c:f9:5a:3e:bb:5a:4e:
                    57:9a:0a:4d:87:2e:cd:d0:bd:8a:8c:64:3b:f8:fe:
                    76:09:0f:dd:b9:3b:63:a2:41:9e:b5:8a:03:17:64:
                    1b:ac:79:65:38:5b:5e:b4:aa:a2:4e:20:7e:9e:90:
                    42:fe:8f:06:4f:5f:b0:2c:98:33:72:2f:d1:da:1e:
                    2f:32:bb:72:da:ef:71:0e:dd:fd:d2:7e:5e:91:7b:
                    37:54:62:33:03:eb:50:96:5f:f2:71:34:24:b8:33:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:BF:57:78:96:0E:E3:0B:22:42:0C:79:F3:E1:D4:48:FB:8F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/16c01463-1164-33a7-aaee-f347b6f7f7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.133.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:52:d0:0f:09:0a:44:ff:4a:c8:00:a9:bc:6c:8c:62:ca:
         19:e5:60:71:32:cc:fe:86:19:c8:0f:0b:e2:78:89:9e:72:57:
         ff:f1:a0:c6:47:39:2c:6f:f2:b7:f4:0e:90:8f:19:4e:71:3b:
         47:61:fa:d0:ac:b7:6f:b5:7e:06:08:76:2f:9b:04:33:bf:32:
         70:b8:9c:d9:10:76:0b:6a:8d:63:f3:2f:74:15:47:21:b7:57:
         03:95:02:ae:d0:7c:68:d3:f6:d9:ed:85:00:84:22:77:53:28:
         69:34:0a:ba:05:b7:4a:da:fe:ca:94:0b:e8:79:6f:50:3a:b2:
         ef:f8:75:eb:bc:e2:b5:c6:56:c8:20:17:94:98:22:7d:71:43:
         82:d7:ce:03:00:52:e1:39:3f:5e:b7:a1:b8:57:b1:94:e5:76:
         c6:f1:36:c8:de:46:0e:a8:9d:bb:0f:ab:c7:53:0c:ce:dd:50:
         5d:e1:f3:65:21:f9:e8:0d:94:d9:84:b9:f3:13:7d:c6:c5:69:
         b2:66:ac:6a:5a:33:6b:f0:f7:7b:f4:27:bc:a1:16:9b:a1:62:
         34:82:37:e9:0a:97:6b:91:49:1f:e5:3f:0b:34:d9:f7:0f:ac:
         42:b4:41:18:47:da:34:6d:8e:cb:39:6e:94:7a:3f:62:5d:30:
         7d:54:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:01:54 2026 by rpki-client