Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20734c22-aced-37a0-8022-d100b33d19b1.roa
File:                     20734c22-aced-37a0-8022-d100b33d19b1.roa (raw, json)
Hash identifier:          HkMl0Mlfee3HS68Pp4QBt5tZs58sdptdXZS1ZJApRpw=
Subject key identifier:   25:23:1B:E5:7E:FE:82:DA:83:5C:3D:C4:1B:CC:A8:27:05:28:43:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DBBF3CFBA16C7D57E8300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20734c22-aced-37a0-8022-d100b33d19b1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20275
IP address blocks:        208.105.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:bb:f3:cf:ba:16:c7:d5:7e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e2663306-ac4c-4f2d-917d-0a90ca2c673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:a7:23:ec:dd:f5:22:71:c9:04:10:cc:55:
                    b7:4a:02:ed:7c:f2:69:9e:a1:68:c5:1b:73:ef:16:
                    3c:8f:1e:9f:76:72:49:db:c4:8b:42:c2:64:48:f2:
                    70:26:72:db:d0:7a:14:a0:f1:2b:03:09:7d:dd:06:
                    17:77:9f:bc:fc:00:7b:60:42:95:35:1d:55:aa:f9:
                    2a:95:fe:42:bb:a8:aa:e4:39:a8:e0:a8:c9:04:6d:
                    e8:82:43:f3:ae:04:76:76:2e:a7:a2:11:d9:e2:b7:
                    eb:d5:cc:0e:db:39:fb:bb:5d:95:1b:5d:2f:8e:c1:
                    72:c5:74:6c:de:ee:42:cc:06:0d:3c:78:c9:9b:8c:
                    0a:d3:f4:66:4e:6d:62:c8:89:41:72:9f:11:ff:42:
                    43:26:ab:83:0a:a9:91:6f:53:94:07:ae:be:5b:08:
                    75:d5:54:86:c4:3a:32:7a:19:df:a3:c6:b5:3c:87:
                    53:06:1b:d0:f6:8e:e0:0c:55:78:27:47:8b:c9:a0:
                    1b:23:73:4d:ba:be:b4:bb:c9:d9:72:e0:3e:67:56:
                    05:d3:0b:fc:af:ec:8e:3a:d1:bb:d8:4d:30:fb:4a:
                    c6:19:29:4e:35:63:b7:f6:33:da:aa:4b:40:b8:f8:
                    3e:32:9c:d7:ff:3a:f3:91:25:8e:b0:e1:33:ec:eb:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:1B:E5:7E:FE:82:DA:83:5C:3D:C4:1B:CC:A8:27:05:28:43:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/20734c22-aced-37a0-8022-d100b33d19b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.105.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5e:2d:7c:d5:05:81:3d:68:73:9c:a8:38:40:b1:ff:b2:e0:
         f9:be:ac:98:a9:fc:e6:3a:73:27:9f:f5:8c:1c:be:25:68:24:
         14:f0:29:86:a2:89:12:69:51:ed:bc:8b:5f:b7:8a:c7:22:2f:
         a5:ef:71:5c:c5:58:f1:ab:2c:eb:64:7f:61:4f:05:3a:16:6c:
         e9:4e:4d:b7:a5:77:d5:58:c4:4a:de:9b:a2:92:e1:ce:62:0c:
         19:1d:f8:2d:e0:3c:7d:02:d4:e7:cf:00:82:ce:aa:03:87:65:
         ad:47:4c:40:f7:09:9d:df:cc:e6:a5:de:47:3e:04:7e:3e:68:
         cf:7d:16:ca:a6:e1:38:8a:23:95:16:06:3f:cb:a4:5e:4f:3a:
         f4:97:7f:11:a4:bb:64:59:00:0e:28:bf:4d:a4:9f:26:7c:6f:
         9a:9c:c2:f7:42:fd:0f:71:8b:42:7c:a9:06:bf:60:e4:33:e3:
         d8:36:47:82:ca:2b:0c:2a:70:48:fb:57:ea:9a:4e:db:c7:9a:
         1b:ed:f5:2e:c6:4e:53:69:1d:6a:f0:39:d8:1a:2a:6c:92:dc:
         2e:9f:87:cb:d5:a8:83:72:cf:c5:a5:d1:7a:d3:27:c1:94:b1:
         e8:1c:ef:6a:3c:c3:e4:d3:54:b9:84:12:d7:a8:58:8d:11:01:
         b3:49:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:23 2025 by rpki-client