Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c1d47ca-9134-3a59-9665-8ffd1489cca3.roa
File:                     4c1d47ca-9134-3a59-9665-8ffd1489cca3.roa (raw, json)
Hash identifier:          PgDN0oaHMrtwET7TbfCmKQ5s4VtVRVjG1GF9KHAnJzw=
Subject key identifier:   0F:CF:8C:A6:13:4E:B7:F0:A8:FE:21:10:02:F6:4F:B5:F8:4D:35:D7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D026D4210C16D502B9700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c1d47ca-9134-3a59-9665-8ffd1489cca3.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        70.125.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:02:6d:42:10:c1:6d:50:2b:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7ce7c8de-a97e-4a35-b6b6-04230f5ac03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:56:b6:3b:d0:2d:e9:99:c9:9a:84:ff:5b:18:
                    34:8c:65:e1:6c:74:00:1c:a0:96:20:1d:22:2d:78:
                    09:db:bb:18:04:b7:d6:c7:aa:08:f7:a2:56:92:f9:
                    73:e6:89:d3:9e:7b:c8:32:e2:57:ec:d7:77:38:f8:
                    14:4b:43:58:3d:09:19:f8:55:c7:67:25:88:c6:e2:
                    95:45:ba:60:b9:78:00:99:88:2e:eb:d2:38:d4:88:
                    36:92:f9:8f:7d:25:aa:52:12:4c:d4:65:ec:95:12:
                    a7:5d:46:d7:45:d6:79:f4:a9:b4:6d:71:5b:f2:e2:
                    c4:0f:34:33:3c:0e:24:25:8a:e9:b4:b5:c6:20:d3:
                    21:33:50:cf:7d:af:1a:eb:f5:18:de:23:db:0b:de:
                    27:42:7e:85:d9:c2:ea:b7:4f:66:20:06:8c:c5:d5:
                    bd:d6:33:6e:bf:48:92:b9:06:cf:d5:29:51:6a:e1:
                    1e:26:63:9e:9d:82:c3:4c:74:b1:a4:96:69:56:a8:
                    5f:de:35:29:09:25:c5:0d:78:f2:5c:45:6a:46:b6:
                    37:b7:61:b2:0a:b9:05:f1:04:0f:09:9a:35:cb:f7:
                    78:47:ee:60:f9:17:fe:79:da:7c:77:2a:14:7b:36:
                    9d:c0:6c:48:4b:50:ad:e3:93:a2:24:95:04:dc:cc:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CF:8C:A6:13:4E:B7:F0:A8:FE:21:10:02:F6:4F:B5:F8:4D:35:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c1d47ca-9134-3a59-9665-8ffd1489cca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.125.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:5e:ba:41:b8:11:4c:bc:b4:33:d0:8b:68:f3:c0:14:25:
         f6:5b:0a:ea:79:0a:8e:db:73:2b:d0:3c:6a:12:e8:81:b1:89:
         26:01:52:b3:da:83:3f:3d:db:a0:31:bd:85:ac:d5:9c:ee:d6:
         a3:e9:81:e4:84:11:23:eb:af:14:f8:b0:66:65:48:f2:d8:83:
         85:a7:25:df:2d:89:eb:67:b6:83:21:68:2c:b4:3c:3c:a5:1d:
         01:f0:0b:15:b9:36:8c:0e:fe:8a:0b:0e:5f:5f:53:8b:eb:59:
         27:ff:8d:2a:86:b7:7a:c2:b5:d4:d9:aa:91:ed:21:16:29:3b:
         2e:ee:11:5a:d4:1f:79:de:82:2f:4c:48:1a:63:c5:6c:21:48:
         ab:d6:4b:a9:5b:a8:22:ea:99:38:7e:b7:f1:f5:e9:ad:20:6d:
         ed:f8:15:e9:fd:a4:40:7c:70:22:4a:fe:4c:7f:cd:a0:66:43:
         bb:58:7f:7f:37:7d:09:b7:49:fb:04:95:6b:0d:89:7c:27:61:
         ca:8c:3b:1d:02:5b:cf:c6:b9:ca:36:5e:05:a9:ad:8d:17:c3:
         bd:14:b1:e6:25:5f:50:fd:d7:06:1b:20:27:c3:0a:65:99:ef:
         32:46:a2:51:6b:b8:b7:e1:e5:d5:31:ac:28:b1:e6:39:63:84:
         e8:3f:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:30 2025 by rpki-client