Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e6bc208-ebe8-372a-96a2-d5ad8fad935d.roa
File:                     2e6bc208-ebe8-372a-96a2-d5ad8fad935d.roa (raw, json)
Hash identifier:          y/Z5KOniq3thoDwchD23c/t4HCQMkFkrrIeaDHYESLw=
Subject key identifier:   76:CD:19:C3:F6:4C:5A:13:F3:55:E5:C7:EB:FA:2F:C4:EA:D3:09:93
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB26B3BDE50205F0CC5D0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e6bc208-ebe8-372a-96a2-d5ad8fad935d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     13343
IP address blocks:        24.166.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b2:6b:3b:de:50:20:5f:0c:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5650c334-55aa-47ef-8af3-168674c154d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:66:c5:8d:0b:9b:99:17:19:f9:d7:2a:6e:
                    47:d3:88:d1:51:51:80:be:aa:cc:42:f6:92:b4:a1:
                    25:bc:30:de:8a:fa:92:d6:94:0a:fe:c3:de:c9:71:
                    a2:9f:a7:47:a8:15:34:7b:29:62:33:75:2b:2c:a9:
                    18:c6:cd:9a:c8:fb:59:aa:77:38:30:93:05:59:4d:
                    46:d0:26:4e:78:3c:87:26:4d:52:a7:09:8d:0a:6e:
                    5a:ae:29:51:72:ed:71:b7:18:a5:09:41:09:9d:d6:
                    60:e3:3c:3c:92:2b:f2:a3:d1:f0:2e:19:86:86:96:
                    26:65:9a:c5:6c:b2:0c:a9:7e:5e:12:64:01:5a:52:
                    13:61:63:86:64:06:f9:35:aa:fc:12:99:30:30:39:
                    61:7d:1f:00:38:a6:48:de:c7:8a:17:d2:04:8b:35:
                    f3:4e:0c:e3:12:e9:d9:24:1f:5c:97:aa:e3:ca:9a:
                    1f:c1:dc:d3:dc:ee:ea:35:09:7d:9e:eb:6e:02:db:
                    93:74:f0:7a:2a:b6:e6:0d:83:d8:05:e2:53:3b:a2:
                    3b:30:4e:b5:c6:fe:ad:08:9e:93:15:c9:23:70:f0:
                    a6:8e:8f:80:a4:d7:2b:55:2c:94:f7:c8:28:73:2c:
                    60:16:1c:48:96:0b:59:06:1b:de:b8:0c:23:19:57:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:19:C3:F6:4C:5A:13:F3:55:E5:C7:EB:FA:2F:C4:EA:D3:09:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e6bc208-ebe8-372a-96a2-d5ad8fad935d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.166.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:59:0b:cc:91:92:c2:2a:d0:c9:fa:05:b0:7c:67:a0:eb:
         27:12:41:5e:ee:f7:9d:05:6e:b8:27:27:7b:e4:c6:bf:2c:51:
         05:a9:a1:e9:18:e6:d3:90:76:b2:90:e5:3d:f3:74:5e:43:77:
         e3:f4:02:11:9c:21:c9:31:0d:dd:bd:ec:22:36:e2:56:cf:a3:
         98:6f:2b:8a:8c:64:83:db:c7:8f:5f:24:16:19:6c:e8:83:e8:
         ad:f2:f3:e4:b6:04:fd:50:89:16:48:c8:47:eb:e5:f8:90:5d:
         29:b7:74:b5:d5:c0:6a:d3:f9:21:83:49:b2:78:a4:b5:3b:84:
         af:6a:87:41:cf:45:d5:02:9b:6e:09:d8:70:f9:ca:5d:49:7f:
         07:eb:b6:6c:aa:50:94:a1:42:93:b9:88:6c:1e:49:32:a6:98:
         3e:3b:9b:96:89:b7:b9:d8:ee:c1:de:a4:af:70:5f:41:99:13:
         39:b6:53:da:7d:02:aa:cf:b3:74:55:92:05:96:d8:3d:03:90:
         b7:4a:ab:92:af:3c:40:a0:aa:02:a8:5a:d4:8f:db:44:05:4f:
         1d:8b:37:39:b7:dd:9b:df:c2:71:92:7e:63:e1:7f:61:cd:b0:
         da:f2:3a:d1:62:ff:8c:ac:3b:6e:98:36:bf:d3:93:fe:a0:39:
         48:d0:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:19 2025 by rpki-client