Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3231b9fb-7b79-34d1-a8d5-3c5d87c6a9d5.roa
File:                     3231b9fb-7b79-34d1-a8d5-3c5d87c6a9d5.roa (raw, json)
Hash identifier:          f662IDGmqTU3W+zz6P0CF3SjVukyAjeyBtjOjt23E4U=
Subject key identifier:   28:8E:3A:B8:F3:0B:99:0F:8C:80:3C:6C:70:4F:E5:9E:43:B8:EC:03
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB0FCA433C700B900619E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3231b9fb-7b79-34d1-a8d5-3c5d87c6a9d5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        76.58.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:0f:ca:43:3c:70:0b:90:06:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=63cf8e60-3def-4f2c-8579-1d001b885144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:e7:22:1d:e7:96:5a:a9:cb:a2:15:2d:68:
                    c9:e7:7a:95:75:df:3e:a5:3b:df:17:9f:bb:4b:52:
                    f6:2b:c3:30:2f:ed:f9:3b:47:29:0c:86:c5:26:fe:
                    e3:81:93:4b:14:2c:b9:4a:53:25:ed:80:88:c5:7c:
                    60:b5:e6:e9:7a:5c:c9:28:ba:54:cf:52:e8:e5:e2:
                    f7:5a:bb:a6:05:a5:f8:a2:77:2f:e8:7c:9a:6d:c0:
                    ef:d3:8d:99:74:fe:42:49:66:26:e5:30:a5:ba:1c:
                    9b:d6:7c:07:77:a6:bd:0c:be:6b:7f:f8:90:1c:e0:
                    97:d6:0d:b1:2d:16:4f:2d:4b:f6:aa:95:dc:d2:3d:
                    d1:d1:c9:6c:0a:cb:d7:75:d7:ba:ec:5b:14:cb:0d:
                    ab:86:31:65:0e:05:b4:b1:64:e3:86:d6:fd:cc:38:
                    2c:db:9b:13:36:8b:3a:82:b5:c9:ae:b4:48:b3:9a:
                    95:6a:f9:f6:4e:94:27:67:17:3d:57:d0:f4:ac:02:
                    c3:65:f6:62:f8:fd:d2:dc:c8:30:a3:da:13:a9:8d:
                    95:6b:a3:2d:64:4f:ae:ef:c5:eb:08:b9:f3:fe:65:
                    6d:7b:ec:fa:d0:0e:51:1f:27:69:2e:d3:e4:02:0f:
                    cd:8e:96:01:05:cd:ac:31:0b:d2:14:56:37:70:82:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:3A:B8:F3:0B:99:0F:8C:80:3C:6C:70:4F:E5:9E:43:B8:EC:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3231b9fb-7b79-34d1-a8d5-3c5d87c6a9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:c3:06:ae:3c:02:98:2c:e0:58:cf:89:90:ec:5f:be:eb:
         dc:ae:b6:41:2a:fb:96:9f:4e:13:6e:ef:20:6e:51:b3:17:7b:
         df:f1:5e:de:a8:29:8c:d1:d9:8c:7c:20:56:07:12:c4:d7:17:
         06:40:63:f6:02:52:0a:4c:a7:e8:27:50:68:19:c2:bf:62:75:
         e5:d2:cc:4c:38:95:73:50:bd:68:0e:89:e5:9a:bc:17:e7:a5:
         65:c0:6d:94:1e:a2:8c:a7:ff:ed:21:7f:03:f5:ca:9f:ad:98:
         01:63:c2:5f:e9:2e:78:77:ee:0b:42:42:21:23:b9:aa:3f:6c:
         37:94:19:0f:ca:85:6c:04:33:bb:30:68:ad:1f:7d:c3:23:39:
         5f:e2:1a:58:60:3a:62:02:c7:ab:65:09:88:93:24:0a:4f:de:
         f1:9e:be:f1:40:38:cb:ec:61:09:0d:7a:d6:1e:22:4c:5a:33:
         1b:86:e3:ec:37:ca:98:eb:54:05:26:5e:1d:09:d8:65:bc:95:
         48:d3:c6:11:0c:91:b2:f6:4f:13:e9:2b:f3:11:6d:ba:ad:bb:
         48:4c:1f:d9:14:a7:84:ae:8a:aa:21:3d:1a:34:ee:74:5b:ca:
         4e:df:f7:b9:8d:89:25:08:b6:fa:93:48:0b:8f:5e:98:1d:7c:
         93:44:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:24 2026 by rpki-client