Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f84a20c-4e0c-3f89-959e-6234acbcae2b.roa
File:                     3f84a20c-4e0c-3f89-959e-6234acbcae2b.roa (raw, json)
Hash identifier:          iJOq6K1ueeIaISB+30rorFlYg6hE6bGNRqm8ETrOJvQ=
Subject key identifier:   D6:F9:F5:8E:C3:41:95:E5:35:90:4E:EB:91:6E:3F:6C:A4:AA:BB:62
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA7C55980176202DF632E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f84a20c-4e0c-3f89-959e-6234acbcae2b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11351
IP address blocks:        204.210.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:7c:55:98:01:76:20:2d:f6:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=455eee16-3b52-470d-b40b-c043c441b2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:69:d0:4d:5d:7c:3c:35:46:37:17:74:3b:
                    9c:46:4e:b9:3c:e2:50:d4:2f:36:4f:3d:35:68:ad:
                    44:82:59:e8:f1:88:5a:6f:11:7a:89:6e:7a:97:b3:
                    eb:db:3a:a1:86:75:9e:e0:61:50:6e:10:cd:2b:6c:
                    45:93:a6:6b:e6:e9:64:1d:b6:1c:d4:51:c1:1f:11:
                    c0:de:5b:b8:5c:4d:1f:1d:d9:f5:ce:56:93:2e:06:
                    ce:5b:fc:60:2e:b8:ab:7f:f6:a0:19:f2:9f:0d:fd:
                    ba:93:45:df:b3:ce:56:88:2a:94:a2:b0:8e:72:2d:
                    87:8a:e5:d7:da:37:bc:52:ed:c6:d9:cb:c5:96:af:
                    30:33:9f:38:a5:1f:8d:2a:41:fd:af:92:ce:b1:d8:
                    ef:b8:7d:fc:a4:01:4a:fc:00:40:ff:26:07:1f:dc:
                    82:07:32:fd:2d:0f:81:8d:76:05:37:5e:8c:cd:fe:
                    65:1d:10:8c:e7:5e:c5:64:8b:b7:69:cb:86:ea:aa:
                    5f:73:78:b5:db:10:71:c5:d2:cc:72:ba:80:e1:30:
                    8c:d2:5c:dd:db:21:4e:a7:0c:47:17:73:43:dc:56:
                    d6:9a:59:6e:a9:8a:09:8c:00:97:ec:8b:32:87:a2:
                    80:8b:10:d9:af:cc:69:8d:3a:4f:6b:7c:9c:38:b9:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F9:F5:8E:C3:41:95:E5:35:90:4E:EB:91:6E:3F:6C:A4:AA:BB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f84a20c-4e0c-3f89-959e-6234acbcae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.210.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:c0:d5:af:60:47:cf:63:e7:da:eb:3c:f7:28:83:c0:97:
         83:05:0b:cd:47:48:fc:01:eb:ad:2c:cd:0d:8f:c7:47:61:80:
         44:50:e1:74:f1:86:07:6a:f6:ab:1a:24:d3:f8:f7:86:4d:2d:
         9b:40:df:5b:bb:be:bb:e9:bc:c3:bb:65:c8:66:2a:bd:f2:f7:
         d0:84:60:3b:39:82:62:86:2e:a9:dd:5f:cb:94:da:11:f7:68:
         27:5d:12:79:da:f9:bf:61:e3:fb:b7:83:1d:10:d5:b3:c8:e8:
         c7:80:57:78:25:ba:8c:9d:3c:4f:f6:a7:49:a6:e8:78:e5:00:
         69:64:17:49:ac:84:1d:1c:b0:43:3e:aa:c0:3c:42:1c:23:75:
         2c:f7:3a:b1:29:e8:da:94:d9:7a:23:8d:80:ed:8b:7f:23:aa:
         2c:01:10:05:0d:72:13:42:0c:e0:6d:79:b2:ec:d2:87:0a:bf:
         ed:24:c0:5e:b9:f6:67:47:4f:7f:22:bf:76:93:ba:62:e0:91:
         14:b3:2a:66:ad:0c:77:ab:53:95:53:c1:a4:9a:ed:37:81:73:
         14:59:a2:13:be:c7:46:f8:d9:88:85:cc:47:46:ce:d8:b3:cc:
         01:0f:ff:67:94:60:85:97:4f:df:45:cb:37:d9:33:67:b6:6c:
         57:b3:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:06 2026 by rpki-client