Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42bc283d-c304-3be5-85e1-054986d3806d.roa
File:                     42bc283d-c304-3be5-85e1-054986d3806d.roa (raw, json)
Hash identifier:          5R0cvqFctgZOZR0R/LqhGsXMLHhIzEeprsBO/a7Uczc=
Subject key identifier:   68:F2:F9:D8:EC:55:75:70:36:FE:58:8A:0B:7D:9F:60:0A:40:11:EF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0E8412EC89BD1FFCF5A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42bc283d-c304-3be5-85e1-054986d3806d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        142.11.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0e:84:12:ec:89:bd:1f:fc:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0d7d36f5-5414-471f-9924-376e8648aa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:63:82:b7:3d:24:6d:48:d3:ca:7f:a9:dd:
                    5f:15:7e:7c:b2:62:68:9f:96:57:9d:bc:5a:b9:50:
                    6f:9d:41:45:2c:76:41:62:fc:84:36:db:b8:e0:ab:
                    60:37:b1:b2:9f:90:c2:00:c1:42:cf:04:64:0f:9e:
                    5f:b0:1e:40:f7:08:8f:ec:05:3f:8c:9f:df:bf:71:
                    87:ff:00:31:4d:52:3d:24:1a:a3:b5:e0:05:1e:ed:
                    41:04:d0:f2:e8:cc:21:d1:cf:3b:1f:03:df:27:c5:
                    88:62:9b:7b:27:21:a7:f5:c0:72:f5:22:3f:c5:ff:
                    9c:c7:d0:bb:30:10:a2:74:fa:b9:1a:5f:86:c6:ec:
                    81:70:91:9e:ae:ea:12:1e:96:69:6b:88:4e:fc:9a:
                    a4:a3:fb:ab:d5:6c:f6:e5:ba:a7:9a:37:61:93:fc:
                    8d:79:51:a8:d3:e5:99:fd:ce:2c:08:11:a8:ad:e7:
                    80:7a:af:b2:34:89:29:1c:21:eb:b4:35:9e:1f:a3:
                    04:38:59:52:13:f8:49:c3:59:b7:91:bb:e0:8a:48:
                    06:e9:a0:fb:f6:2c:4c:c4:62:a9:ae:35:16:6b:1c:
                    1c:19:f7:cd:c8:88:c0:1e:0b:90:6b:47:0e:77:d1:
                    21:47:f9:a7:cb:f3:c9:e0:31:1c:0c:be:1d:a3:c5:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F2:F9:D8:EC:55:75:70:36:FE:58:8A:0B:7D:9F:60:0A:40:11:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/42bc283d-c304-3be5-85e1-054986d3806d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.11.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:49:31:6f:45:77:38:bf:49:81:ba:06:b8:e2:49:59:b0:a5:
         a9:0c:54:a8:c3:7f:af:dd:ea:77:cc:dd:52:9d:48:dc:44:60:
         6a:76:58:a0:28:73:5f:d3:ad:4e:fc:5f:ea:cc:52:ac:06:ae:
         da:7a:e9:18:6a:fb:fd:f0:2f:f9:17:f9:a2:a2:8b:fe:0a:4d:
         9e:56:2c:ea:71:02:9f:41:42:70:85:f6:aa:62:4d:08:6b:51:
         4f:98:f5:73:c3:a5:93:8a:42:c1:ff:7f:f3:a3:f5:54:58:75:
         e3:aa:2f:63:f6:94:19:27:1c:91:df:f9:93:94:6e:ac:b7:2f:
         2e:da:70:0b:58:64:e3:a7:61:eb:a2:cf:b7:4f:7b:8f:69:c1:
         9c:ae:44:0e:34:6c:be:46:36:d6:be:71:c9:e6:a1:38:fe:e5:
         67:be:9c:82:c6:3f:da:bc:e1:ba:22:25:0b:14:13:de:3a:74:
         88:af:db:74:c7:24:b6:da:1e:2d:40:86:e8:43:56:c1:e4:96:
         6c:e3:06:a8:ba:01:a1:46:86:e0:cb:40:5f:ee:25:4a:f7:ab:
         3d:e5:8f:11:3d:09:68:bd:88:8d:cc:23:cc:73:b7:7a:7b:5c:
         4f:fc:ec:cb:44:f7:55:30:07:f4:96:e7:66:57:ef:f9:f5:19:
         26:93:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:31 2025 by rpki-client