Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfb6829-71b3-3e68-9312-6f84bfb0dfd6.roa
File:                     1bfb6829-71b3-3e68-9312-6f84bfb0dfd6.roa (raw, json)
Hash identifier:          Kw3/d4txPVk+9xVaUxv+uwXow+F9oj8GvI9X6YAVGHI=
Subject key identifier:   D3:CF:9F:0B:68:56:74:63:F7:69:45:2E:C2:A2:82:36:3F:E2:E7:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DAD2BECCD2FDBA2721F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfb6829-71b3-3e68-9312-6f84bfb0dfd6.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        70.125.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ad:2b:ec:cd:2f:db:a2:72:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=14879079-8ea6-4fb9-bcbf-ffcefc74f901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:87:07:61:dc:6a:27:77:ee:23:b0:b3:13:
                    12:14:47:e6:73:3d:da:86:f1:68:90:dc:56:94:2c:
                    3b:68:72:e7:6c:f7:db:ad:0c:a0:11:d9:7b:0a:14:
                    f1:36:9b:9c:7d:ca:26:1b:35:90:b1:6f:b7:3f:2d:
                    ee:f1:42:f5:17:3f:8a:9f:c6:b6:12:d6:f9:f5:3b:
                    a6:49:68:56:50:35:50:3d:7a:38:85:3c:28:2c:81:
                    b4:ff:ee:c2:9d:98:0d:57:36:68:75:24:64:2f:f4:
                    e1:c2:97:f6:fd:da:40:63:ab:f3:de:07:26:9e:62:
                    54:bb:5e:05:c0:f7:eb:47:4a:1a:f8:de:4b:e6:76:
                    74:e2:5e:96:26:40:c9:90:3c:8f:94:68:61:23:47:
                    a0:d4:ff:82:a5:0f:33:0f:63:e8:95:bb:8f:83:0e:
                    7a:20:e1:08:fa:3e:8c:e9:2a:1f:54:cf:99:88:9c:
                    b3:c1:52:e7:21:f9:a6:50:f6:d6:62:10:e8:cc:53:
                    68:1f:32:d2:20:fc:94:3c:8f:c9:90:96:52:68:8e:
                    53:c6:7a:56:85:24:9e:09:6d:37:84:50:ea:01:2f:
                    55:e7:ce:9f:77:3e:5d:91:2c:c2:64:00:ee:5c:63:
                    b4:15:ea:bc:c5:e2:3d:e7:b2:27:25:6e:9d:b9:cc:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CF:9F:0B:68:56:74:63:F7:69:45:2E:C2:A2:82:36:3F:E2:E7:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bfb6829-71b3-3e68-9312-6f84bfb0dfd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.125.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:7c:ec:aa:0e:8a:18:31:ae:a3:c6:87:77:5a:0f:53:cb:
         a9:3b:75:32:55:77:6d:29:8f:01:75:f9:f1:e5:fa:a5:df:b1:
         57:75:27:94:92:4d:71:f2:52:8f:7f:e9:20:ad:99:3d:1e:fb:
         aa:fa:58:a3:e9:69:39:f7:37:a9:e1:82:91:3a:43:db:7c:0b:
         da:a0:0d:a7:59:94:90:92:b6:ff:9f:96:8f:d4:13:03:d7:ab:
         cf:2d:7e:65:3d:fe:ff:f2:61:eb:51:38:85:a5:41:8e:18:c9:
         a1:b3:37:bf:04:6b:96:40:8d:be:83:85:b8:66:47:85:98:c2:
         cf:4e:16:c5:83:0a:64:a3:bb:9f:ef:17:84:03:b0:f5:81:85:
         ff:c4:ae:7d:c4:40:eb:f4:5b:a8:75:fc:0b:4d:00:c4:eb:32:
         6b:b8:22:ff:b2:77:a6:5b:c3:ea:56:e6:d9:d6:97:f7:20:c7:
         d9:9f:4b:86:97:e9:e8:1f:60:f0:32:33:4c:d8:93:a0:f5:0b:
         78:9e:a4:76:d6:2b:61:3b:30:4d:17:f3:d9:48:85:ff:cf:e0:
         aa:c5:9c:cd:0f:42:83:59:a6:a0:c0:65:80:ab:3b:69:0e:dd:
         30:46:fc:9c:9f:09:68:6f:81:fa:ef:08:34:3a:72:35:f8:e9:
         05:4f:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:24 2025 by rpki-client