Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa
File:                     3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa (raw, json)
Hash identifier:          OFagEtPbPiqr6F12gwpIYPZ6ApcNm1g5ed6N3mp7+vY=
Subject key identifier:   29:33:54:0F:07:B1:1F:24:FB:88:8E:E9:6B:9A:32:A9:2C:23:5D:0C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D1CA6146D7EB841FEEF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        24.199.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:1c:a6:14:6d:7e:b8:41:fe:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8d00cec7-2a69-4bb7-9427-50b67a3690f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:1e:85:cc:19:51:a4:d8:6a:26:81:1a:fc:
                    4e:ee:18:99:ab:d7:b0:6b:db:fe:04:8c:29:27:fe:
                    04:c4:9e:b9:34:ec:30:bf:83:bb:60:a7:0b:5c:15:
                    af:5f:ad:e4:04:6f:bf:21:2e:8c:40:90:65:d1:e8:
                    83:47:22:50:5d:b6:0f:79:6c:5a:1b:5f:ac:ca:f4:
                    43:c2:7c:9d:ff:80:2c:69:3d:fb:85:4e:44:a6:b0:
                    be:3f:9b:b6:54:c7:d2:a0:e6:7d:96:9d:b0:13:58:
                    29:b6:48:c4:c5:ef:0c:5a:9c:b7:4e:f1:20:07:60:
                    9d:d3:4b:39:3d:57:e3:71:11:81:bf:a7:75:7c:73:
                    e9:bc:ff:00:eb:3d:a2:05:dc:98:6c:f9:47:79:8b:
                    16:02:87:a1:c8:8a:70:6a:b6:6f:4c:b6:9b:ce:8e:
                    73:5c:27:9b:ef:c0:8f:2e:0d:00:7c:98:b5:29:d6:
                    14:fb:5d:74:c4:77:c7:eb:d8:07:ff:e0:e5:07:8a:
                    e8:3f:c2:24:c9:8c:72:84:9d:84:ec:02:0c:e3:fa:
                    1f:15:bd:c7:62:7d:9d:f6:c5:f4:cc:99:d9:1c:c6:
                    11:51:da:9d:0a:58:0a:a6:b2:13:da:ee:ba:58:ba:
                    45:14:8c:b0:c4:3e:3d:26:53:98:1f:17:60:66:0a:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:54:0F:07:B1:1F:24:FB:88:8E:E9:6B:9A:32:A9:2C:23:5D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f989cf4-3dc9-383d-b06e-c11ec85e5742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.199.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:44:54:24:1f:d7:14:d7:ae:d1:56:48:e3:35:c5:cb:ca:7c:
         ad:e0:40:63:6b:71:10:dc:12:0c:6e:03:8a:fb:3d:15:c4:03:
         47:99:c0:a6:7f:37:d0:e0:d9:58:d9:ba:ff:8e:37:f8:47:f1:
         3f:88:61:55:35:16:f7:db:08:06:47:a7:c5:a9:45:58:f6:b2:
         62:d0:8f:3b:2e:e4:ad:33:00:85:5d:44:43:9f:12:6e:83:54:
         b8:66:60:f8:8f:3d:00:32:1a:69:f5:67:08:44:9b:f3:7e:d3:
         28:19:47:80:c6:e3:a6:27:9e:ef:8f:eb:13:d5:c5:7e:b9:b8:
         fd:fd:a2:fc:ac:b7:3a:54:fd:1e:9b:6d:d8:62:8a:45:38:53:
         ab:ae:28:6d:10:b0:bd:a0:0d:c5:1e:36:71:b2:94:2e:0c:50:
         5b:44:46:a6:ec:a9:b9:70:63:ef:9b:2d:9c:32:f9:fb:89:c2:
         9d:8c:73:68:4b:e9:f9:2a:0a:34:7b:bd:db:55:43:87:0c:53:
         8e:c8:b9:0d:ef:00:aa:35:43:ff:fc:e8:f4:93:a6:a5:4b:e1:
         55:0c:02:45:f1:60:fd:8e:b4:b7:67:25:50:38:b4:ae:ff:2c:
         c4:be:db:1d:95:f6:b1:c2:92:09:12:ee:c3:75:99:83:63:66:
         65:94:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:41:52 2025 by rpki-client