Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436fb3e3-bc85-325c-980a-45accccddd77.roa
File:                     436fb3e3-bc85-325c-980a-45accccddd77.roa (raw, json)
Hash identifier:          O/TRxkjWUPWrKTf9vh0R06wu/gCydk79fYTXFX7ICTI=
Subject key identifier:   3B:77:FB:AA:C3:9F:AB:DC:E6:B5:B8:1D:F9:2F:C3:61:7A:0D:5A:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CDD35D276618C01BAE400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436fb3e3-bc85-325c-980a-45accccddd77.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     7843
IP address blocks:        69.134.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:dd:35:d2:76:61:8c:01:ba:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=23b39278-5b4d-4fdc-be25-2c216b21bf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:15:69:aa:57:c6:23:20:94:cd:24:3d:6d:
                    92:aa:cf:14:99:df:88:d5:24:71:b6:41:5e:34:68:
                    ff:ce:36:80:63:8e:87:87:02:17:42:d9:70:65:0c:
                    90:81:c7:ea:b3:25:47:c1:d4:5c:b0:5d:6d:38:20:
                    73:fe:68:d3:99:da:d9:e7:03:77:c8:cd:66:6b:8f:
                    0f:5e:48:ea:9f:87:06:c6:59:3b:43:2f:2a:08:57:
                    70:f4:06:7d:ec:b9:b5:6c:45:35:d2:e5:91:1a:b1:
                    da:1d:c3:fc:a3:f1:18:e6:ae:df:95:81:02:78:7a:
                    dc:9d:5f:44:16:22:af:fc:c9:aa:9f:9b:75:f0:88:
                    5d:79:27:95:75:30:a8:36:79:81:fc:0e:79:93:af:
                    f9:ac:1c:ae:3a:a7:f2:84:36:01:b1:98:84:73:be:
                    5f:7a:31:ad:4f:8f:03:88:e8:ca:85:c4:e5:78:38:
                    e1:65:d3:d5:d6:9e:8a:0d:94:c3:93:53:e4:d0:87:
                    34:16:b2:5a:d6:a6:3e:d3:47:42:b4:b6:7b:7a:ea:
                    ac:6c:a8:5a:38:15:ba:bb:4b:f5:74:2f:06:c0:c4:
                    3e:88:7b:79:00:80:2d:66:9c:b4:47:23:89:5a:7d:
                    c5:6b:01:69:60:4f:76:9c:a4:a6:29:2a:4d:fa:1b:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:FB:AA:C3:9F:AB:DC:E6:B5:B8:1D:F9:2F:C3:61:7A:0D:5A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436fb3e3-bc85-325c-980a-45accccddd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.134.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:b1:f3:f8:76:9f:6f:31:8c:24:b3:e2:52:73:17:19:bb:
         cc:8e:9f:83:30:53:0f:2f:f2:a8:d8:08:32:ac:0b:2e:cd:80:
         a8:37:b3:84:95:fd:fd:7b:a2:38:ba:6f:c7:12:44:78:55:df:
         3e:46:52:62:6a:b3:07:d7:12:d9:97:9e:95:5d:a2:75:80:66:
         76:15:46:cc:50:59:05:d6:fc:e1:5c:7e:86:f8:b1:9e:13:a7:
         b6:d7:d9:b0:da:c0:0e:10:df:93:f9:f5:24:18:8f:79:22:a4:
         e5:58:2a:26:5d:41:0d:e9:0d:2d:86:23:42:48:51:c5:a9:ee:
         ec:6f:d5:99:9a:bc:99:97:41:59:2d:52:9e:e4:4d:53:91:cd:
         4d:74:62:63:d1:66:0e:5a:9f:d7:40:0e:d0:2a:c1:a0:69:7f:
         f5:62:6c:c8:8c:33:b2:35:2a:ac:09:bd:77:d3:6a:a9:c8:60:
         e9:85:e6:b0:d2:8b:f2:d9:fb:0b:64:76:0c:7f:cd:01:a6:b9:
         4d:fe:8a:2c:8c:23:57:d3:36:32:28:8a:b8:75:ed:0a:74:82:
         09:65:31:9e:c7:15:ec:80:fb:7d:c5:6f:6d:9d:b2:52:e8:0d:
         15:87:32:f4:1b:ac:1d:25:5c:59:81:dc:07:fe:d7:d2:07:41:
         e4:ba:db:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:19 2025 by rpki-client