Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b491383-8465-32ba-b364-982a36266b45.roa
File:                     4b491383-8465-32ba-b364-982a36266b45.roa (raw, json)
Hash identifier:          yzZDjK+zC3ISUEL22nGStOwoeKygQALZMMWCqTVE+Sk=
Subject key identifier:   56:7E:92:D9:8D:D3:AB:BC:7C:3B:D4:F7:33:75:D8:71:4F:03:CC:F3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA05D51201FF8EEC46C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b491383-8465-32ba-b364-982a36266b45.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        208.125.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a0:5d:51:20:1f:f8:ee:c4:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=9479e47a-fa74-4c5f-b608-37f5428e99c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:76:38:4c:df:18:24:01:82:3d:c3:0a:ec:
                    c0:c4:39:fe:70:fc:01:8d:f0:24:dd:a0:af:16:d0:
                    c4:5f:64:f6:9e:bc:44:d2:1d:a9:61:26:ca:32:e9:
                    7c:c0:13:ab:a0:91:d5:2f:14:a5:f1:58:39:f3:d8:
                    ff:55:d8:f9:50:74:56:6b:77:38:1a:5d:26:e5:d2:
                    30:6d:6f:d5:b4:6c:52:21:96:1a:d4:d3:81:18:ea:
                    81:29:13:17:5a:41:af:40:a9:90:99:54:9c:b8:ab:
                    32:82:cc:cf:60:29:57:69:b9:92:0d:20:3f:51:17:
                    76:7d:c1:74:8d:f6:6e:e0:ac:7f:ba:0d:bc:7e:b8:
                    64:dc:a6:50:9b:7a:a9:4d:96:2b:95:50:c1:14:ad:
                    0a:2c:67:95:9b:87:ed:e7:9d:41:87:07:4f:c9:0a:
                    10:82:52:ac:7b:52:55:50:63:0b:83:8c:3b:8a:14:
                    e8:97:ce:16:e2:32:b5:db:e3:0d:08:27:ce:60:ae:
                    cb:ce:44:64:89:d4:22:dd:39:c4:0b:2b:9f:c4:35:
                    14:0f:ab:3c:5f:aa:be:9c:02:67:0f:68:24:c1:01:
                    24:e8:59:e6:44:97:fa:2f:bf:db:74:64:7c:c2:2f:
                    0a:bb:4d:cb:07:24:3d:da:9d:2f:2b:48:2f:de:ff:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:92:D9:8D:D3:AB:BC:7C:3B:D4:F7:33:75:D8:71:4F:03:CC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b491383-8465-32ba-b364-982a36266b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.125.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:37:9e:75:e3:2b:68:78:18:b7:37:40:4e:75:e6:bf:8d:67:
         b2:0e:d5:14:02:29:6e:54:16:3c:75:12:43:a9:1f:00:b7:cf:
         2f:4b:ce:77:a4:64:d4:31:9b:18:1d:cd:03:5c:3b:e9:e9:bf:
         30:30:68:4b:63:53:f9:14:a7:73:e8:59:1f:7f:e3:9d:b5:0e:
         57:0e:12:48:87:d6:c9:7d:f2:94:6d:85:66:8d:c8:1e:69:eb:
         2d:0e:59:0e:f8:2e:95:4c:9d:2d:b1:50:47:32:86:6e:44:d7:
         3c:b8:1e:87:91:92:dd:10:47:ff:e3:7c:dc:aa:c2:65:df:23:
         3e:ca:c7:e9:da:ee:51:83:bf:a8:2b:c6:89:18:d9:fa:9d:32:
         af:a2:c9:fa:86:6a:94:8f:92:69:48:9e:74:67:b5:37:30:bb:
         2c:66:dc:18:5d:29:25:f2:16:3d:87:2b:85:9a:1a:20:e4:fa:
         e8:0e:27:e7:33:3e:88:0c:d5:e2:4d:85:0f:54:8c:99:56:43:
         86:1f:39:0d:ec:29:f4:02:5d:fb:29:41:56:a5:22:1e:1c:57:
         77:33:be:72:f2:c4:f4:18:0f:08:21:6c:50:c8:d2:cb:b2:e3:
         1c:9e:20:56:87:09:b0:0a:bc:90:95:69:19:a1:79:be:07:e9:
         8c:7b:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:45 2025 by rpki-client