Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
File:                     1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa (raw, json)
Hash identifier:          8du1EIOGVUox1yxEB+dN5euLwHgWSoTF1DzZNoKCKdM=
Subject key identifier:   DB:C5:CE:9D:3C:8D:30:BD:18:F3:65:65:57:8C:04:37:B7:16:8A:F8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB8167A35F11AD824B400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        64.183.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b8:16:7a:35:f1:1a:d8:24:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8716902f-28a1-41ac-a091-55e1e278d68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:50:76:a3:ee:cd:3b:02:03:91:0a:bc:49:
                    9d:e3:b3:04:f2:f4:07:24:97:cb:42:db:bb:50:ef:
                    da:65:7b:2b:c3:c0:95:33:be:c8:e9:69:24:19:3f:
                    2d:b7:67:19:91:0b:bd:63:87:81:fb:4e:7d:8e:f1:
                    29:d9:95:f2:94:80:a7:dc:29:58:98:f7:1b:7e:43:
                    74:85:56:76:34:18:29:7a:7f:bc:b9:0c:d7:f6:9b:
                    30:40:b8:e7:e0:ea:77:e2:e5:62:8b:38:13:4d:ec:
                    7e:ac:58:fa:e1:6d:a2:71:f1:f8:b8:f3:ca:ba:f0:
                    c8:e3:e9:3f:cf:03:9f:e6:35:b5:64:5a:db:a4:1a:
                    23:8d:f3:16:18:0e:cd:21:9b:09:59:f2:be:b5:6c:
                    5d:51:8c:49:a6:fe:e4:60:83:8e:3b:ad:12:1d:8d:
                    37:ce:00:c9:50:58:1e:1b:bc:4e:1e:b9:ce:f9:8f:
                    3f:7b:ef:05:e4:cf:83:2f:09:83:b0:1c:21:af:c9:
                    41:8e:09:1d:28:bc:34:a6:0f:2c:64:32:49:c3:ea:
                    d7:2a:60:28:10:19:5a:c6:c7:67:ea:c6:34:08:de:
                    d5:3f:d0:c1:1b:06:89:14:94:52:89:d6:9c:cd:0a:
                    9a:1f:e4:c9:8f:20:a7:9b:54:63:74:84:49:13:8e:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:CE:9D:3C:8D:30:BD:18:F3:65:65:57:8C:04:37:B7:16:8A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1a622abc-6bd9-3e8b-8b98-ae2326dcbf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.183.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:b0:7b:a0:8a:b9:db:e4:81:93:e4:e6:8e:c1:f3:cc:90:
         fe:09:7a:3f:c8:87:15:d0:dd:a7:9b:b6:8d:80:f1:2b:e1:5e:
         50:86:28:c2:d8:14:c5:c7:27:7e:a9:8d:81:ec:11:13:9c:09:
         ed:0d:21:26:aa:57:48:36:0a:af:32:b3:2b:ff:45:71:c1:ac:
         fc:e5:aa:91:96:9d:cb:74:df:a6:40:9e:e9:d8:ee:c2:c2:f3:
         9a:79:8a:43:0a:36:f8:16:4a:99:19:1b:4e:24:a2:d5:a7:66:
         d9:de:39:b8:1e:91:7b:68:73:fb:bf:5e:18:dc:0d:d2:7d:e9:
         0b:fd:2f:c6:30:f9:ad:ef:f0:fe:57:6a:fc:a0:bf:ee:60:db:
         27:df:59:84:6f:64:7c:1c:50:49:1f:87:23:21:fa:96:8f:c7:
         35:13:8f:00:9b:41:5f:5e:c4:3f:7a:c8:06:22:88:e9:b9:96:
         2c:2e:4d:1d:44:74:0a:34:b4:2b:a3:c8:36:c6:5b:fc:b6:d2:
         da:10:31:03:e9:77:af:2a:8d:ef:28:0e:35:6d:55:55:b7:19:
         d1:6a:ef:f2:45:f7:26:5b:cb:40:f2:9c:3a:61:05:7d:9b:1b:
         29:55:01:9a:c3:ac:38:05:4a:70:33:55:0f:7f:fb:cc:98:b2:
         dc:10:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:18 2025 by rpki-client