Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/455c8854-671c-3868-b313-21afecc37885.roa
File:                     455c8854-671c-3868-b313-21afecc37885.roa (raw, json)
Hash identifier:          q3cDAD0liMHsCIi08eXHMQgqgaN2d4HpUTgXZ+jRjo4=
Subject key identifier:   8F:FF:92:BC:D9:97:D2:6A:CC:26:4D:CC:77:5C:C0:C1:E4:B8:D8:7A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA6698DCFDDE18B157700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/455c8854-671c-3868-b313-21afecc37885.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11426
IP address blocks:        96.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a6:69:8d:cf:dd:e1:8b:15:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=87ccb22c-c9e0-45dd-b109-88b02df1def1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:3c:ce:23:4d:cb:72:4b:28:3a:b6:b5:00:
                    5a:9b:17:52:ff:29:7a:c8:cc:3f:de:2f:92:43:68:
                    d5:e1:b3:28:5f:d1:49:04:74:69:3f:1c:d8:d4:39:
                    58:d2:26:9b:f2:67:b1:42:b2:33:64:e4:56:64:8a:
                    d6:7a:be:d4:7d:54:91:80:24:7a:7c:e6:dc:81:98:
                    13:68:eb:5f:20:4b:bc:fb:a6:fb:22:cb:5b:6e:18:
                    6a:9f:05:fd:88:d8:11:9d:7e:3f:4a:20:8f:52:67:
                    af:39:43:95:b4:38:8f:df:17:a0:11:ae:97:d1:2d:
                    78:11:b2:db:06:1d:a7:10:5c:fc:de:80:f2:08:25:
                    e3:9a:13:0b:f1:71:f7:79:43:40:de:c0:b7:82:4c:
                    d8:d0:b0:1b:99:b3:c4:94:f9:81:38:2f:7e:a2:e1:
                    f6:01:d2:a6:41:bb:b8:01:57:45:22:0f:f1:25:ec:
                    7c:9d:ae:87:85:af:05:67:b7:01:17:fe:4e:a2:b0:
                    22:ff:78:45:38:63:a1:de:5c:6b:6b:2b:c5:f3:96:
                    6d:1a:04:7c:71:21:9a:1b:f8:d3:24:a8:47:fc:b0:
                    cd:ae:f6:c2:ed:7a:92:7d:1e:ce:9a:5e:92:fc:46:
                    5c:5a:7a:3e:e1:70:a4:aa:53:bb:e3:a1:12:1a:9c:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:92:BC:D9:97:D2:6A:CC:26:4D:CC:77:5C:C0:C1:E4:B8:D8:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/455c8854-671c-3868-b313-21afecc37885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6a:ea:57:3c:a9:67:3d:af:64:4c:a8:87:8c:05:0b:9d:c0:
         f1:db:08:4a:82:b9:57:86:72:2b:80:b0:6c:a0:8f:bb:7f:ec:
         8d:d3:20:ca:33:b6:c5:fc:b2:e9:2a:fb:fc:c7:43:dc:22:95:
         6c:46:8f:0d:b0:c6:b8:d7:6b:74:73:e7:9d:ef:8a:ad:fc:3d:
         41:30:34:bb:ee:41:c7:81:68:e6:e1:df:af:11:3a:fb:d4:03:
         34:ab:91:c7:ce:69:76:39:b4:28:98:ac:7d:d3:4b:7f:db:9a:
         0d:73:07:20:37:5d:c5:f2:4d:8e:8b:86:42:1c:0c:f6:d8:7b:
         8b:ce:eb:c6:8b:eb:3c:85:74:0b:f1:86:76:ab:63:b1:b5:5c:
         f0:0d:74:90:ef:be:a4:29:24:3c:c4:02:ec:c9:45:d0:b6:09:
         69:75:db:fa:79:c0:69:97:19:af:aa:78:df:84:11:92:c5:3b:
         74:84:7c:c6:09:42:6a:74:70:44:6d:9f:53:21:b3:db:de:42:
         c1:84:3c:8b:c8:b9:68:de:12:46:a2:c3:7d:e1:9e:c3:ff:04:
         bb:eb:2b:13:12:2a:58:ec:47:5a:f5:9e:ce:c9:12:60:a2:69:
         90:ca:cd:72:4c:98:cb:00:f0:79:33:f4:ba:da:d9:91:11:a6:
         49:b8:97:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHaZpjc/d4YsVdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ODdjY2IyMmMtYzllMC00NWRkLWIxMDktODhiMDJkZjFkZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+I8ziNNy3JLKDq2tQBamxdS/yl6yMw/3i+S
Q2jV4bMoX9FJBHRpPxzY1DlY0iab8mexQrIzZORWZIrWer7UfVSRgCR6fObcgZgT
aOtfIEu8+6b7IstbbhhqnwX9iNgRnX4/SiCPUmevOUOVtDiP3xegEa6X0S14EbLb
Bh2nEFz83oDyCCXjmhML8XH3eUNA3sC3gkzY0LAbmbPElPmBOC9+ouH2AdKmQbu4
AVdFIg/xJex8na6Hha8FZ7cBF/5OorAi/3hFOGOh3lxrayvF85ZtGgR8cSGaG/jT
JKhH/LDNrvbC7XqSfR7Oml6S/EZcWno+4XCkqlO746ESGpyCsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI//krzZl9JqzCZNzHdcwMHkuNh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDU1Yzg4NTQtNjcxYy0z
ODY4LWIzMTMtMjFhZmVjYzM3ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYAowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg2rqVzypZz2vZEyoh4wFC53A8dsISoK5V4ZyK4CwbKCPu3/sjdMgyjO2
xfyy6Sr7/MdD3CKVbEaPDbDGuNdrdHPnne+Krfw9QTA0u+5Bx4Fo5uHfrxE6+9QD
NKuRx85pdjm0KJisfdNLf9uaDXMHIDddxfJNjouGQhwM9th7i87rxovrPIV0C/GG
dqtjsbVc8A10kO++pCkkPMQC7MlF0LYJaXXb+nnAaZcZr6p434QRksU7dIR8xglC
anRwRG2fUyGz295CwYQ8i8i5aN4SRqLDfeGew/8Eu+srExIqWOxHWvWezskSYKJp
kMrNckyYywDweTP0utrZkRGmSbiXXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:32 2025 by rpki-client