Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a54b596-7954-3cca-bb81-19abef4e042d.roa
File:                     3a54b596-7954-3cca-bb81-19abef4e042d.roa (raw, json)
Hash identifier:          ULqGV4DkPIUZPRmTEiLo//i//ydj0aX+tNGWuvoT/BI=
Subject key identifier:   CA:F9:0E:3D:02:9D:2A:56:98:BB:8B:E6:FF:95:61:B3:DB:1F:66:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB2C7539E5E062689FDE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a54b596-7954-3cca-bb81-19abef4e042d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        24.227.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:2c:75:39:e5:e0:62:68:9f:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=e2afc30b-7fcf-4473-9426-38d6a0455a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:17:a8:52:0a:b2:ef:03:e2:0a:c7:e6:dd:
                    d5:3f:95:97:ff:10:fc:49:c4:cc:ed:2d:66:3e:d3:
                    70:fd:0c:aa:43:dc:d5:b3:e8:d1:f3:5f:41:04:a7:
                    1b:fd:7c:cd:7e:d0:e8:c9:3d:59:ba:4d:bc:cc:57:
                    4b:59:5e:3f:48:5c:cd:a1:3c:22:94:79:8c:59:25:
                    a5:52:6c:6c:10:53:03:40:f2:eb:aa:62:4e:72:1e:
                    8d:65:9f:31:3c:ca:98:99:b3:3b:df:76:7b:77:db:
                    d7:bf:67:d8:04:ee:32:df:e6:a5:97:d5:3a:08:bd:
                    57:ec:a8:ad:31:29:25:79:6e:c0:dd:56:4b:b2:be:
                    13:43:02:fe:f9:7a:e3:05:50:d7:e1:8f:f2:31:7c:
                    b3:8f:4f:87:af:4a:ee:71:a2:2c:d5:65:ec:a4:c9:
                    8b:32:93:8b:3a:f0:41:c6:84:e9:a7:aa:56:13:86:
                    73:e6:d0:2c:7d:cc:85:2a:98:54:ac:c0:44:ba:6b:
                    51:f8:a0:78:2c:3f:4c:35:7b:a4:46:79:f2:47:3f:
                    af:b2:d0:a3:4e:b4:09:36:e8:a5:ca:06:d8:82:19:
                    72:7e:2e:2b:b3:ca:33:ab:fa:10:00:3e:32:67:ea:
                    ed:29:a4:05:a6:ef:f0:3a:d2:ab:5b:0e:e3:da:a9:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:0E:3D:02:9D:2A:56:98:BB:8B:E6:FF:95:61:B3:DB:1F:66:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3a54b596-7954-3cca-bb81-19abef4e042d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:17:7e:46:b4:40:7f:ec:f4:90:80:bf:1c:1e:28:b0:b9:f0:
         06:06:34:bb:1f:c1:9c:7b:a8:d1:5e:23:e3:b9:4f:82:a8:fa:
         46:90:56:e6:37:a0:37:77:fe:3d:a0:30:c7:41:0a:66:cf:21:
         60:de:75:f0:20:64:05:ca:52:24:6d:a4:36:28:91:01:d2:86:
         db:ed:69:ab:37:27:4a:33:c8:40:67:e5:54:00:2a:a3:46:2f:
         ef:5d:bf:3e:7e:b2:03:84:c2:7f:7d:f3:85:cf:6c:d5:b7:97:
         d7:42:8d:3a:4f:a2:35:77:cb:a7:42:4b:c9:f4:a3:ab:8b:d5:
         82:14:e0:5f:5f:b4:58:cd:27:20:0b:26:5b:b5:22:f8:a7:f0:
         c0:f3:88:35:63:5c:8f:27:98:6b:36:c3:90:cb:27:eb:50:c2:
         86:e4:68:4a:3f:d0:08:20:5c:fb:ac:3c:20:f8:3a:0e:74:d3:
         bd:9c:6b:8e:e8:86:24:10:4f:c4:4f:0a:d0:0a:14:00:8a:e0:
         e7:5c:90:f5:be:b9:f7:b1:1a:bb:11:32:dd:57:6b:fe:f3:9a:
         d9:6a:53:2e:40:22:d8:2a:05:17:e8:8f:87:c1:73:70:6a:fb:
         dd:79:5b:59:1e:81:0d:ad:af:b0:f1:6e:0a:76:d9:83:2f:3e:
         d1:5f:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:42 2026 by rpki-client