Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30f04b9a-1d10-3a46-b3d4-cf8caa20013d.roa
File:                     30f04b9a-1d10-3a46-b3d4-cf8caa20013d.roa (raw, json)
Hash identifier:          OKFZZG7kNPb6Z1XSoWJDscUqVb2FdjQ2yulTWp1mRUg=
Subject key identifier:   5B:20:B0:EE:7C:C9:BD:3D:E1:9F:0E:5E:CE:92:73:BB:95:10:55:1A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA70D0911CA3FA8564FDC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30f04b9a-1d10-3a46-b3d4-cf8caa20013d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        67.53.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:70:d0:91:1c:a3:fa:85:64:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=75926ff2-a35e-4926-aebf-e6ac4a21a650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:d6:48:6a:18:63:29:a2:96:82:95:fe:62:
                    f4:1d:dd:56:77:20:00:70:d2:ff:de:be:0f:b1:f0:
                    46:0a:ba:78:a9:d8:dc:26:c0:73:b9:cf:e6:61:a2:
                    c0:5d:fa:05:c9:f6:cc:96:c8:b8:14:a9:13:4d:03:
                    48:78:fe:1d:b9:e2:18:1d:f6:cb:0b:4f:b8:37:d3:
                    96:a4:be:1d:53:b8:f4:5d:59:8f:ac:2c:31:aa:31:
                    82:4b:79:86:6a:d7:32:5a:a5:bb:5d:a9:90:ff:54:
                    32:9d:7d:50:07:43:59:2d:a0:5f:0e:30:f2:72:26:
                    a6:7a:34:21:a6:cd:70:ed:89:d3:9e:05:b2:76:1f:
                    1d:28:2d:15:47:da:e8:3d:74:e0:8c:99:d1:4d:09:
                    9f:57:a1:de:96:e3:c9:d5:0e:da:3b:05:19:63:3c:
                    a2:ad:be:6f:46:4f:0f:08:20:36:7a:60:63:36:fe:
                    50:5c:b1:ca:25:f9:81:ff:7d:cf:03:84:80:5d:a3:
                    54:28:10:58:ba:fe:fa:2f:fe:35:90:1f:b0:a9:ff:
                    69:00:aa:86:2c:87:b5:fb:b2:e3:df:90:6f:fd:25:
                    36:3a:05:6f:a7:35:5e:52:b0:23:83:91:51:36:6c:
                    3e:57:39:c8:10:96:1d:86:a3:c0:b6:c1:70:60:24:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:B0:EE:7C:C9:BD:3D:E1:9F:0E:5E:CE:92:73:BB:95:10:55:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/30f04b9a-1d10-3a46-b3d4-cf8caa20013d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.53.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:61:42:aa:fd:98:51:c1:e6:a3:99:24:e0:8f:5d:b0:c8:
         e1:17:7c:1b:df:68:51:c4:69:d0:e9:25:63:8b:ca:39:cc:59:
         ce:51:d2:d5:fe:12:fe:be:47:7d:a2:6a:54:a0:fd:bb:e8:6a:
         ea:02:3a:96:a5:bf:b9:b7:79:d7:1f:43:f9:a0:6f:06:d0:36:
         8e:b1:cb:79:e1:d9:31:c2:0e:5f:79:47:d5:5b:4b:d6:48:c7:
         51:f2:47:a7:d8:92:e4:51:6d:27:c0:c1:54:18:32:dd:c6:94:
         3e:f1:a6:96:98:21:25:ad:e9:73:81:8d:01:98:01:2a:94:3c:
         13:77:ef:d1:4d:0d:e6:07:67:84:b9:bc:f5:2c:f5:d4:9b:25:
         bf:14:ab:15:3b:ac:db:49:c5:91:cc:73:c5:74:b6:f8:cd:ba:
         8b:0c:c2:4c:ab:c8:2b:f7:0d:ec:2a:b2:4d:2f:32:85:4d:b0:
         42:08:78:c8:08:fa:d7:94:eb:09:3b:7e:53:75:a5:e3:93:99:
         60:e9:45:60:e2:29:73:34:e8:4c:16:85:3c:1e:d7:4b:0e:30:
         8a:0d:ef:7f:51:8f:b8:0c:e3:b4:0a:2b:e8:eb:fb:66:52:a5:
         25:fb:15:83:a8:5c:15:c6:78:eb:12:d5:ba:2f:00:01:e9:40:
         50:fe:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:15 2026 by rpki-client