Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
File:                     4940253e-5c1f-3c42-8c4a-acf90d596176.roa (raw, json)
Hash identifier:          EzqJAz6gqMNCbk9WlSn6p+iIfbVuvyq6naRJ4uoLlv8=
Subject key identifier:   3A:28:F2:DC:4D:8B:A6:6C:64:45:24:D4:E8:CF:66:5F:1C:07:2D:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA72505BE4EA50A6E42794
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        70.60.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:72:50:5b:e4:ea:50:a6:e4:27:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=dfaa6c32-3773-477c-8af1-56f5978b90f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:09:68:aa:55:b7:0c:f9:a5:a3:ef:14:e3:
                    6b:b1:bd:a2:ab:b0:5f:0b:3d:11:39:24:ba:05:41:
                    0e:28:e6:9d:ce:b9:7e:98:20:ad:45:0e:32:63:6b:
                    87:52:fc:0a:94:1e:66:f4:ed:01:af:61:2e:9b:0c:
                    f6:b1:b8:6e:71:f8:ab:7d:3a:8c:42:a0:e1:8c:79:
                    8a:27:b4:c9:ee:f6:f9:77:00:57:c7:40:25:35:fe:
                    06:d9:90:9e:18:5b:01:21:48:e8:91:f7:48:7d:3d:
                    5b:92:52:8a:1f:93:ff:43:56:12:dc:66:59:95:f9:
                    8f:02:f4:37:c8:dd:3e:7a:07:9c:14:5e:b4:80:bb:
                    86:43:a7:b8:bf:d9:21:25:b7:ce:00:42:ce:49:fc:
                    e8:c8:b1:52:d1:ea:b0:89:38:e8:47:e5:cd:b1:6a:
                    36:7e:b3:03:79:4a:94:b1:0b:a0:37:24:db:6c:fd:
                    7d:8d:ba:b9:10:86:4c:b6:79:6e:c4:13:43:dd:58:
                    7c:a7:61:1d:23:58:da:ad:68:e6:32:f2:b8:c7:ce:
                    7f:1e:ad:7a:e5:90:8d:6a:e9:d9:47:10:b8:64:08:
                    ee:e1:f1:4f:b2:f9:16:79:0f:d4:76:3f:f5:6b:b4:
                    69:c7:65:33:64:51:ff:70:eb:6a:02:cd:60:1b:aa:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:F2:DC:4D:8B:A6:6C:64:45:24:D4:E8:CF:66:5F:1C:07:2D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:26:d1:92:64:8f:f6:3b:51:d6:be:1d:e4:98:b3:6c:0b:49:
         ee:82:b4:bb:4c:8b:7f:98:a4:ec:0e:75:c3:cc:c9:78:e1:7d:
         43:5a:45:5a:3d:40:d2:9d:c3:3a:18:42:a5:81:04:b7:fb:2f:
         2b:c2:41:c2:01:c2:90:43:07:61:cf:77:dd:d6:5e:7a:ca:03:
         16:bf:75:79:45:01:cc:de:92:2a:a4:4f:53:91:b2:50:1c:e2:
         01:14:51:7c:b6:1c:d9:5e:f8:f2:60:23:35:aa:f5:84:f2:60:
         2d:49:8e:2a:98:61:f2:56:5f:79:bb:ae:89:e2:64:d3:16:5e:
         74:0f:ca:b5:8f:fa:7a:d4:5c:ab:1e:9f:9a:df:66:58:c6:32:
         d3:8b:a2:05:27:29:ec:cf:1d:98:5b:a4:64:f4:49:da:4d:fe:
         93:e6:93:1c:91:8e:14:23:18:f8:d9:12:31:55:e2:70:d1:b1:
         8d:b1:b8:02:a1:0e:b9:23:be:a4:3a:fd:44:d1:fb:ef:c7:b1:
         08:1b:a6:24:8a:37:6b:e5:4a:b4:43:df:ea:fe:45:8c:dc:22:
         24:d2:48:82:f6:65:5c:06:9c:7e:5d:25:3f:5b:e9:5d:d5:b2:
         d1:d3:58:c2:ed:f0:e9:72:05:52:87:fb:29:e9:df:ab:70:cd:
         16:1f:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:00 2026 by rpki-client