Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa
File:                     42aa7be4-5f1b-3966-aec0-26f0c662799e.roa (raw, json)
Hash identifier:          A7++BL+CIcZu4uKMv5VKxDSi+RqXE4/5yASiKEepfok=
Subject key identifier:   73:15:B7:00:90:47:FF:C9:EF:56:41:BC:53:D7:D3:17:4C:23:D2:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA860C3915FF5C0EBBA0C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        24.173.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:86:0c:39:15:ff:5c:0e:bb:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8a92d13f-eb54-4b3d-96e2-ed5bf9f2cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:51:d3:7a:a4:ac:cb:8b:9c:29:4b:8d:6a:
                    05:6e:b7:6f:bb:ce:f7:fc:24:7b:c0:84:db:4b:7f:
                    0e:1a:54:6b:dc:47:4a:8f:b2:75:c1:6d:d2:0c:54:
                    46:96:03:19:be:99:1c:5c:e2:49:ec:49:cb:da:f2:
                    01:50:ba:a1:97:7f:da:be:82:c1:f3:13:96:13:12:
                    5a:20:a5:94:c9:75:8e:8e:d7:bd:af:69:c3:17:11:
                    c4:79:9a:42:09:d4:89:11:c8:6a:b2:d6:7d:b8:8e:
                    d2:f1:7a:76:fc:5f:03:0c:e8:74:b8:76:ae:c8:cd:
                    18:c5:76:0b:ad:ba:f7:56:5f:bc:14:81:86:2b:bb:
                    85:11:64:5a:fb:8b:d8:64:86:22:ee:81:dd:27:25:
                    47:e1:6c:67:fb:a6:bd:ea:0f:3b:14:48:72:23:ef:
                    15:a3:5b:2a:f2:43:4d:26:1c:e0:a3:6c:c2:85:da:
                    84:47:4f:b8:50:79:37:e4:a1:f4:e4:0f:cb:b1:d5:
                    08:2e:a6:74:fd:63:5b:4a:74:0c:41:a3:ca:41:88:
                    13:31:ca:10:81:14:bd:76:e3:1a:99:41:05:af:aa:
                    0e:c5:71:a2:9d:c6:de:b0:45:02:0e:8f:d8:90:32:
                    83:43:93:ad:75:bc:f7:e9:9c:6e:c7:55:4d:85:4d:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:B7:00:90:47:FF:C9:EF:56:41:BC:53:D7:D3:17:4C:23:D2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42aa7be4-5f1b-3966-aec0-26f0c662799e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:14:c1:67:f8:0c:83:af:86:9d:8c:78:7f:27:31:5a:ce:54:
         3f:54:0d:c1:36:ee:54:a4:21:6a:77:c7:5f:65:e6:c9:31:00:
         b0:0d:93:0d:3b:06:3b:51:5c:a1:91:af:d0:fa:5f:9b:20:af:
         c2:4b:cf:7e:b7:83:80:2b:44:d8:1e:41:74:e8:9d:8e:93:53:
         5a:bd:f9:a3:28:05:f4:40:43:c4:7d:c0:b2:8a:ca:a6:a1:b8:
         1b:dd:85:4f:4c:b9:4b:5b:a2:b6:97:5b:98:84:77:ba:75:71:
         44:a5:5c:5e:6d:ff:e3:8f:80:1c:75:61:f9:92:7d:db:2e:e4:
         38:84:f8:ae:2d:51:d6:5f:be:a0:b7:a9:5e:33:18:8c:5e:17:
         ab:ed:c0:fe:b5:cb:82:2d:03:0d:39:bf:a7:e1:f4:ff:47:5b:
         a1:21:28:7b:d4:0c:fe:f5:82:bf:0b:55:89:16:9e:0a:b6:1c:
         7b:a3:28:86:26:f7:2d:21:97:bc:c8:76:69:09:56:90:a8:ff:
         ba:03:b1:1a:50:ec:8e:4d:fc:d5:b3:4b:a5:32:2f:82:2e:d8:
         f5:41:cc:07:87:17:a2:0b:d1:e3:17:f8:8e:3e:6f:53:48:41:
         70:e1:80:9b:2a:0e:e3:17:2f:b8:6b:b2:5c:f2:ee:de:6d:8c:
         1f:19:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:16 2026 by rpki-client