Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa
File:                     3ecb28d2-1727-3106-83d0-37075fca4682.roa (raw, json)
Hash identifier:          cUuK21VE/EIppz6UGnIAeu2+q4Y2rG9zHLKNQrcGVFg=
Subject key identifier:   95:7C:BE:43:E6:F1:EE:20:C0:73:89:7D:9C:63:A7:C0:0A:27:90:0A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D979A9B8D7300DF5797F0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        65.29.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:97:9a:9b:8d:73:00:df:57:97:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=075435f6-44ee-4f77-b8b1-a204b79c1739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:73:f2:ff:a6:e5:f1:ba:fd:7f:26:d2:b5:
                    cd:ef:5b:57:51:95:71:5a:05:1a:88:0c:9d:d8:76:
                    bb:e2:1a:20:7c:af:4d:3f:e2:df:45:e9:da:7f:c6:
                    50:b2:64:61:f5:aa:18:d9:d2:82:8a:eb:77:13:65:
                    56:06:2c:97:1c:9a:38:57:40:9a:b9:a8:bf:03:03:
                    37:3d:71:0f:00:b0:f2:16:c9:b7:76:ba:b3:cf:3a:
                    3c:2a:a4:ef:49:71:0d:00:e1:0a:df:06:12:a7:5e:
                    7f:16:98:17:ce:c9:35:0f:2c:5a:0c:85:d5:24:61:
                    0b:16:d3:54:90:ff:4e:c8:38:db:fb:cb:11:50:fd:
                    3e:85:da:dd:69:03:d1:ae:36:dd:67:11:62:a7:3d:
                    d3:17:d4:fd:99:08:ea:e1:0a:65:7f:c8:43:dc:a4:
                    02:6d:5a:a3:a6:f8:9e:05:83:82:a8:d6:0c:dd:fa:
                    d6:79:8f:16:67:80:34:ca:c5:46:50:f2:cd:43:3e:
                    82:25:36:91:8f:51:43:86:5e:72:91:fd:db:9b:ef:
                    2f:40:45:72:58:c8:cf:af:25:35:8f:c5:1f:6e:98:
                    ea:b7:03:63:61:f7:cb:ff:e8:29:62:c4:b4:ad:f8:
                    22:fd:8a:2d:31:44:7b:23:a2:f9:36:7a:29:1b:c3:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:BE:43:E6:F1:EE:20:C0:73:89:7D:9C:63:A7:C0:0A:27:90:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3ecb28d2-1727-3106-83d0-37075fca4682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.29.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:81:6c:41:62:a0:2b:bc:57:09:f7:2e:87:58:5f:f0:22:
         6f:2f:5a:f0:82:c0:04:af:66:67:3a:c8:93:fa:29:c7:27:62:
         2c:18:88:73:2f:34:1c:49:58:38:f2:7c:9a:cb:0e:83:8b:7a:
         b6:90:de:44:c0:90:33:5a:e8:44:68:d4:e5:33:f6:79:de:17:
         4c:47:84:42:25:2b:38:5a:3f:f6:d5:ce:aa:a9:65:59:98:5d:
         5f:e9:c2:e0:56:af:af:de:0e:f9:32:b2:fe:50:39:19:75:fd:
         a1:de:81:66:62:54:96:2c:ab:44:f5:07:bb:73:78:bf:19:9f:
         7e:6d:40:c4:e8:5f:da:b8:65:5f:90:45:e9:da:c1:a7:5d:aa:
         6c:81:12:ee:87:1d:12:1a:49:86:4f:6c:52:7a:9d:d3:0d:05:
         78:c1:9f:49:7f:70:82:d9:21:21:9c:80:b2:a0:a6:66:29:12:
         2f:40:86:c0:eb:1c:62:42:68:9c:0f:8c:3e:c1:7a:23:64:ef:
         4a:7c:b0:7d:de:46:ec:15:b7:17:9d:53:28:08:49:86:36:db:
         eb:18:ba:89:70:e2:b6:66:38:97:5c:5e:25:8c:6e:f3:9f:40:
         ec:a6:49:27:f5:92:2a:f6:70:df:2d:17:db:7a:c8:bc:94:b3:
         3f:92:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:13:55 2025 by rpki-client