Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
File:                     2d603779-324d-302b-a85c-ab0dcf5f1692.roa (raw, json)
Hash identifier:          8ndLlTlyjlzHWZdUzjPkhhUU+SJE6YlEZoCRIZ+fd4g=
Subject key identifier:   58:77:7E:56:1E:7B:B6:87:A8:DD:2B:C2:FC:F5:BA:3C:15:5E:6E:E2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D16676D652E97F38DA900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        173.197.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:16:67:6d:65:2e:97:f3:8d:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fdb5ab0f-7a11-490b-ab36-9f4e4af9240f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:6b:cc:34:2a:8d:06:fc:9d:1c:c2:95:e5:
                    3b:58:a8:fc:de:6b:76:f2:88:03:68:a1:d0:ed:23:
                    04:0e:fe:65:cd:1b:00:53:f5:6f:ed:31:d1:25:d6:
                    94:ee:ba:ff:ee:cf:e0:b4:33:ee:f0:03:1a:1e:c7:
                    38:86:07:56:64:74:4a:e2:a2:12:87:7e:be:bc:76:
                    4f:f4:e8:04:b1:9b:45:3e:5c:04:a1:ae:7e:c9:3e:
                    f5:1e:c3:21:a8:6e:8b:34:f7:84:34:6d:84:7f:ac:
                    ca:02:06:18:fa:e7:bc:f7:49:31:93:ce:f9:6a:d9:
                    aa:9a:c7:fd:5a:79:53:78:40:a9:86:cc:44:c5:f6:
                    74:1e:af:2c:64:0f:94:df:0b:9a:6a:2d:aa:58:12:
                    26:2c:81:24:8d:d0:f2:c9:33:bf:0b:47:e8:f2:fe:
                    1e:54:cf:c4:37:9f:12:c8:e0:9b:5d:2d:ad:12:62:
                    65:5b:d4:42:9b:90:45:2e:83:06:44:bf:72:6c:9e:
                    5e:17:e9:98:8d:b0:ec:6b:4c:ed:dd:f3:0c:c8:ce:
                    e8:26:d0:62:6b:7a:a5:f3:65:42:8b:48:de:bb:0f:
                    ff:c5:6c:38:e9:e7:a5:fd:ae:18:a0:33:28:fb:da:
                    61:dd:47:c0:25:d8:c0:bb:0a:5d:c8:be:1e:10:db:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:7E:56:1E:7B:B6:87:A8:DD:2B:C2:FC:F5:BA:3C:15:5E:6E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2d603779-324d-302b-a85c-ab0dcf5f1692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.197.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:81:58:75:7e:d4:a9:29:a2:5e:ec:f7:33:f0:e9:0f:f0:b2:
         be:60:35:86:05:c9:e1:f5:8b:76:e4:c0:6c:bd:c5:43:06:dd:
         a8:f3:cb:e0:23:ba:12:68:84:6d:0f:9c:ed:08:44:52:db:cf:
         da:d2:01:00:8b:37:79:77:60:2a:aa:71:79:ea:ab:30:6d:33:
         f1:61:83:21:50:e5:75:42:d1:98:7d:ea:77:01:e5:3f:f5:a3:
         ab:7c:af:34:af:f2:c8:a2:11:22:f3:0a:f4:b6:21:63:b4:70:
         c8:43:72:c1:15:80:14:69:00:19:43:c9:04:06:3a:fd:9e:54:
         c2:0b:84:bc:91:17:af:32:bf:ad:96:c3:8b:bc:0c:5e:69:24:
         f7:9c:5b:f3:61:b3:e5:f5:d3:7a:39:81:c9:21:b6:df:c4:d8:
         0b:ce:51:9c:c4:2a:53:1c:ca:f6:2a:70:a4:b1:0d:98:61:a9:
         3f:45:48:27:9b:28:6b:f9:e9:3a:a1:36:50:98:c0:72:6e:d1:
         95:41:19:e9:3e:9d:27:a8:c1:32:23:a2:e3:70:79:07:36:ef:
         ed:f3:4c:59:6a:72:c0:03:f5:8a:d6:16:a4:bb:ef:29:7f:8e:
         fd:79:2c:55:4d:91:41:9a:c4:52:51:8f:d0:ee:57:da:01:c3:
         8c:ca:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:09 2025 by rpki-client