Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd494fb-89f9-38c9-81de-7a630b560907.roa
File:                     4cd494fb-89f9-38c9-81de-7a630b560907.roa (raw, json)
Hash identifier:          4oLUj+6uHgWkXNoRiOwPXd/NxsfyVq5pVEsX7z86EZA=
Subject key identifier:   5C:81:2F:C5:6E:88:F9:3B:B2:C1:3D:26:41:55:16:9C:C3:45:28:0B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB3C6B106D3734DA803500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd494fb-89f9-38c9-81de-7a630b560907.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33363
IP address blocks:        65.35.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:3c:6b:10:6d:37:34:da:80:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=270ca73d-a46c-4071-ba4b-1c05fa9ef700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:f3:3f:a1:fa:94:61:bb:63:92:da:4d:97:
                    77:d1:28:8e:c4:20:f2:31:99:33:1a:3b:53:c3:e3:
                    30:29:17:7c:0f:f7:c2:18:ec:07:78:2a:ea:92:e0:
                    54:29:33:9d:20:a6:2e:c9:1d:de:a8:2e:3b:00:69:
                    11:a3:8e:fc:84:e3:d5:40:3b:d7:28:79:13:cc:63:
                    ef:db:da:c5:27:7c:7d:81:ef:82:aa:b0:dd:b8:38:
                    92:49:bf:4b:b3:d5:b3:07:da:d8:41:65:9f:93:e2:
                    21:26:59:dd:15:7b:d7:d4:5c:7a:01:6c:1a:71:7e:
                    ed:c1:1a:83:17:28:c4:a6:76:04:ae:cf:50:a0:9c:
                    a5:ae:57:d5:bc:45:f9:55:a1:1a:1a:54:50:46:cb:
                    f6:b6:ce:69:58:87:b7:60:68:e8:87:c5:94:d2:d0:
                    ef:98:a8:23:c1:c1:d4:b3:d2:fe:68:10:76:83:97:
                    2f:46:ef:27:9d:8b:25:09:2d:91:e6:5c:7d:a3:4c:
                    5d:d8:8f:f9:88:eb:92:74:9b:8c:49:45:d8:3c:03:
                    2e:34:8b:e5:21:f4:af:3d:c2:17:30:e7:05:e3:5f:
                    d0:cf:ad:7e:a6:39:48:d1:9e:7a:0b:dd:69:76:50:
                    42:da:4c:35:a1:2d:d3:ec:18:c5:59:a4:e5:8a:fd:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:81:2F:C5:6E:88:F9:3B:B2:C1:3D:26:41:55:16:9C:C3:45:28:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4cd494fb-89f9-38c9-81de-7a630b560907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:44:34:62:0f:99:82:c7:a6:41:87:3e:fc:ac:a3:a0:3a:
         e6:c2:a2:82:e6:85:d3:19:d7:3e:d2:8b:a6:ab:ac:af:13:f7:
         89:63:8d:a4:02:00:b6:42:fd:3a:12:64:3a:6d:73:de:58:0f:
         03:45:fe:a1:82:e6:ae:d0:6b:fd:c5:e6:94:66:68:a7:44:f6:
         10:80:ef:cd:ba:0f:48:37:e7:d3:0f:35:e0:b7:35:2d:6f:b2:
         dd:4d:5c:0c:bf:cf:49:a3:80:d6:00:29:9e:24:88:02:44:5f:
         8e:51:0b:e6:ff:dd:3c:87:49:92:11:30:7e:b0:6c:2d:7a:ed:
         66:07:52:b5:d1:b0:02:31:ab:ef:3d:86:db:4f:cc:b5:e9:88:
         af:76:f7:22:e7:d4:e4:bd:20:c1:66:f3:aa:58:fb:94:e1:7a:
         b5:14:07:1b:4e:b7:41:cb:cc:80:9d:07:ce:72:29:5a:e2:1a:
         4b:3a:8b:5e:15:7c:15:14:40:3e:40:c3:42:2f:98:50:9f:3d:
         b1:06:d4:44:60:90:dc:70:33:67:48:83:fd:22:d0:17:2d:ab:
         a7:b6:02:da:bd:6b:5f:14:3c:29:1e:dd:d6:e2:58:8f:f4:c1:
         db:07:9b:ed:3c:ef:e6:e1:54:1c:e4:20:1f:13:e4:d7:7f:56:
         83:83:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:02 2026 by rpki-client