Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/488b4652-b589-3773-91b2-5945a0dd6c1b.roa
File:                     488b4652-b589-3773-91b2-5945a0dd6c1b.roa (raw, json)
Hash identifier:          gNb/lTeZx21CH3212RULTAMrZhVKd+yyv93fPBoPs4o=
Subject key identifier:   50:DB:5B:B9:FC:CC:B2:4B:8D:C2:BA:B3:42:AC:95:F1:69:3D:B2:12
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA3362B827D9C4F855800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/488b4652-b589-3773-91b2-5945a0dd6c1b.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     12271
IP address blocks:        67.254.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a3:36:2b:82:7d:9c:4f:85:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=5487edba-bec8-45e3-b22e-3c63ea94ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:64:f2:55:b5:ab:cb:44:d4:78:ec:4b:bb:
                    85:29:90:9a:e7:f4:a5:e2:08:55:c7:f7:aa:d2:a9:
                    c7:e5:6d:01:46:b1:de:8b:69:ac:c0:c5:d9:1a:4b:
                    58:a0:0d:10:6c:bd:49:79:b4:c1:91:c5:11:67:07:
                    35:6a:fd:dc:5c:36:e2:c3:03:90:a6:8c:1b:9b:08:
                    2b:bc:b7:d0:1e:2c:11:b3:e5:2b:5f:e8:8a:85:6d:
                    42:e6:eb:22:2f:ff:63:20:b7:02:c8:8c:5b:62:f3:
                    b0:7d:b9:96:5e:40:15:fc:6c:86:2a:09:81:21:bb:
                    08:3a:3e:fe:eb:ab:34:2a:9a:bb:e0:2e:2b:a0:3f:
                    71:5f:77:f8:78:2b:99:1b:9a:7d:9e:fd:de:f4:a5:
                    79:49:6a:9f:d0:20:8f:45:fb:cf:24:71:a0:f4:44:
                    b5:b1:1d:5c:2f:90:b1:58:b4:c1:37:a4:d2:e8:fb:
                    a7:8d:90:c6:b1:f4:6a:ed:8d:dc:62:ab:3e:23:ed:
                    9f:d0:20:53:3a:32:83:03:b1:36:b5:5b:eb:9d:51:
                    2f:15:34:54:9b:70:ab:7f:97:4b:74:ac:24:53:49:
                    59:6e:11:3b:f3:99:5d:cb:ac:ad:f0:d6:c3:11:43:
                    90:c8:f9:f2:02:ff:7c:82:77:35:f7:b4:5b:15:8b:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:5B:B9:FC:CC:B2:4B:8D:C2:BA:B3:42:AC:95:F1:69:3D:B2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/488b4652-b589-3773-91b2-5945a0dd6c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8e:b5:89:c6:e7:a6:cb:ce:82:45:bd:b4:3f:71:d3:3b:9d:
         67:30:8f:b7:21:cb:ea:cd:e1:48:40:32:15:45:67:fc:58:3a:
         59:6f:56:42:d6:ce:a8:6d:29:23:40:12:c3:18:50:27:7e:4b:
         a0:80:de:aa:2c:5f:7b:84:87:b2:1d:62:80:bd:25:51:20:cb:
         b9:f9:1c:d6:6c:93:86:69:d3:c4:77:ae:dd:51:ec:d5:04:9b:
         34:cb:a9:54:a8:62:91:b1:05:9b:52:0c:56:b6:2b:43:d3:af:
         6e:3c:23:25:0e:05:26:77:21:38:3d:f4:82:59:6b:e4:f7:d7:
         e3:df:a2:27:58:6a:35:d8:41:65:22:1a:84:ca:93:4a:e2:ef:
         b6:30:e1:b1:a4:4f:07:2d:4b:df:8f:a0:de:59:60:e9:ed:44:
         c7:a0:8d:11:71:0e:24:5e:b8:02:4b:3a:92:89:13:cd:b5:1d:
         6d:f2:ff:f1:62:1d:91:2b:38:7c:6d:28:bb:c7:10:e4:d3:78:
         88:48:6a:06:82:2a:6c:ca:12:8b:a6:10:0c:fe:a8:2e:26:e0:
         a1:89:3d:f9:37:4d:1c:c4:d3:a4:f9:5b:c0:50:25:57:0b:bb:
         4a:85:3e:37:37:7f:e5:a0:8d:ba:5c:37:5e:59:cc:b6:33:4a:
         8e:c1:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:44 2026 by rpki-client