Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d34119d-b37f-3b25-b27f-c8458f8a7145.roa
File:                     1d34119d-b37f-3b25-b27f-c8458f8a7145.roa (raw, json)
Hash identifier:          y45LB5sccXz8healPbARHD8b+XxZrTWnbXw3iPwoKEk=
Subject key identifier:   B5:C9:9B:F9:03:66:02:C6:2A:A6:95:8E:F3:53:58:47:1F:60:2B:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D94A070F84AFD6BB8D100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d34119d-b37f-3b25-b27f-c8458f8a7145.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        71.74.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:94:a0:70:f8:4a:fd:6b:b8:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=46ecbc02-1b05-4835-be7f-fc1882a5bc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:fa:6f:ef:d9:94:83:f0:a5:eb:e6:0e:b4:
                    53:07:d4:96:e2:f7:4c:8f:9a:14:ee:53:85:f4:e6:
                    dc:d9:89:28:95:d2:76:d1:4c:fe:51:f9:df:94:1a:
                    6b:8b:dc:2f:41:0f:1b:c7:8a:fc:92:3a:ce:be:72:
                    a5:88:7f:70:bf:a7:10:11:a7:0b:db:51:4b:3c:8f:
                    d8:a7:05:7b:3b:ca:2f:82:1b:cf:97:e4:08:88:80:
                    c1:5a:66:25:6f:fe:1c:33:e5:df:39:36:c5:99:06:
                    f6:a7:1d:2c:50:57:9c:a2:1a:f5:da:80:28:53:45:
                    50:de:96:8a:4b:8c:e2:23:53:89:b6:9f:88:d0:fc:
                    fa:14:55:53:7b:c2:f8:59:89:74:57:b4:d4:8a:5c:
                    3a:7f:00:88:ad:77:e3:56:57:a3:37:25:00:7b:0d:
                    55:6d:75:67:2e:07:53:99:b2:9f:48:1e:09:7a:e0:
                    a8:4b:51:7c:10:13:60:ee:d7:bf:65:1d:77:52:2d:
                    df:13:b2:21:32:c6:42:17:71:67:f1:5a:a9:33:65:
                    c6:40:36:fe:2e:69:d1:3d:12:11:52:6e:78:67:ea:
                    d6:dc:09:e8:1b:84:28:12:67:8f:5d:10:9b:bf:60:
                    a2:42:bc:a4:98:43:6a:bf:9d:7e:db:40:93:7c:cd:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:9B:F9:03:66:02:C6:2A:A6:95:8E:F3:53:58:47:1F:60:2B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1d34119d-b37f-3b25-b27f-c8458f8a7145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.74.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:38:a4:80:7f:88:34:a2:12:cf:1a:95:44:b5:e0:78:50:41:
         3d:b2:b3:af:83:84:6c:4a:47:2f:9e:a5:96:59:8c:3d:df:6e:
         d1:53:41:8c:25:83:3c:ce:7a:46:45:57:b7:ab:8a:36:2e:bf:
         18:a0:7c:03:b0:e3:8e:4f:d7:cc:1b:24:bb:33:40:45:ff:ca:
         46:c5:6c:7a:33:ab:ba:78:f8:82:9f:7d:9c:18:f1:e5:29:28:
         8a:61:58:78:30:0e:e2:bd:29:52:14:2d:74:a8:7e:de:48:29:
         16:1b:b2:6e:b2:26:f2:cf:59:68:b9:a5:ba:4a:a1:3b:16:15:
         d8:5a:9d:bb:cc:21:c6:74:d6:e5:ad:7a:c0:55:9e:57:4f:5b:
         c6:08:d4:38:70:e8:10:a4:b1:c6:4b:10:82:db:08:14:5e:a6:
         81:8b:c0:29:b6:8a:9f:9b:33:2f:49:bb:e8:57:41:0f:f8:0e:
         76:ed:fe:99:fd:22:e4:ee:b7:42:9e:f7:29:86:ea:d9:fd:d0:
         4d:87:09:e3:c7:e9:a5:92:6d:91:89:a8:bc:a1:7c:db:83:d8:
         dc:34:37:ac:79:40:e7:21:bc:bd:44:b6:15:6a:b5:3e:a3:72:
         75:81:07:a5:58:83:3d:7f:82:c7:20:9d:1c:1a:8c:90:20:6f:
         69:f1:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:45 2025 by rpki-client