Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa
File:                     4df121de-5f47-3793-9de8-91f282ca54c6.roa (raw, json)
Hash identifier:          jukmXhdihfsY3lSqEOlkXP7Q5+HX6jvpP04MFwhR6ek=
Subject key identifier:   D9:34:0A:B1:05:37:FC:18:F8:EE:D6:CB:C5:71:18:3A:A8:06:A7:CE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DB0102D06BD05FCF9EF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        24.94.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:b0:10:2d:06:bd:05:fc:f9:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=3657e36b-2616-44bc-9935-e8c6abcb87bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:2f:24:de:46:28:28:c8:84:1c:77:02:7c:
                    24:7d:14:89:79:3a:9c:71:66:95:66:3b:22:86:34:
                    35:6a:2d:6f:f4:db:8a:07:0e:39:e9:86:66:a1:b5:
                    f0:d7:1b:79:30:8e:1f:dd:66:04:09:15:e5:48:8c:
                    16:c4:e2:ad:96:ea:3f:fb:a0:bb:85:15:fb:35:80:
                    b9:c1:b2:11:84:96:b3:c8:98:37:d9:d5:95:5c:1d:
                    27:86:71:49:df:9c:c9:09:7f:16:96:7e:e2:4d:1e:
                    27:50:0f:d4:48:59:ec:39:1f:a7:63:a6:a4:78:1d:
                    ef:15:13:ae:75:c0:b3:d3:ba:00:38:b1:b7:7c:7c:
                    4e:0e:6b:e5:ba:00:63:68:bd:2d:9e:51:1d:a0:9c:
                    26:b8:19:60:a7:47:fe:a6:60:17:32:91:30:f6:1b:
                    2b:8f:33:bc:01:99:78:f5:fe:b1:bb:fc:31:00:dd:
                    41:db:92:ff:8f:9c:b6:0e:f5:8f:49:6a:cc:ff:e0:
                    06:dd:c7:16:d3:ff:0b:a9:59:7c:3c:d8:cb:35:7f:
                    fc:19:76:ca:1a:aa:b4:91:13:81:5f:ac:c4:54:69:
                    c2:c2:98:71:08:fc:76:ed:07:4c:a2:eb:00:1e:3e:
                    8c:c5:4a:b3:6b:93:0f:40:74:5c:99:65:a4:3a:9f:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:0A:B1:05:37:FC:18:F8:EE:D6:CB:C5:71:18:3A:A8:06:A7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4df121de-5f47-3793-9de8-91f282ca54c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:57:22:28:b7:07:d0:b2:af:d7:1a:f7:49:71:1c:fe:ea:18:
         10:4d:39:40:a7:cf:19:47:80:e9:4d:e9:18:88:fb:c8:0e:e2:
         27:33:c1:28:43:bd:a2:dc:ab:38:ca:86:e2:19:25:e6:a6:2e:
         96:52:3c:71:91:e6:82:89:1d:a5:40:c1:23:1b:6e:5b:da:46:
         1e:f2:b6:6f:df:e2:16:61:9d:b4:b5:c5:1b:67:87:eb:b1:f1:
         fc:0d:4d:14:34:b9:94:f8:65:31:1e:4d:34:bb:e4:9f:e3:2e:
         c8:15:30:5b:eb:2e:12:2f:c9:a6:dd:2e:a0:04:eb:78:36:70:
         c1:e0:e6:50:53:c1:4e:3f:05:ad:3b:2f:78:b6:09:f0:db:bf:
         07:68:36:f0:ad:88:2f:2a:c5:a7:8b:8d:45:09:52:ea:cc:1a:
         f3:cc:07:b3:13:ae:08:57:4b:da:11:23:d9:31:7b:d1:f3:8b:
         6f:2d:61:1f:3b:1c:5b:e0:48:df:71:db:ca:32:df:18:64:6e:
         49:5a:aa:49:d0:f7:92:ed:84:3e:05:00:d6:c0:c5:04:80:a1:
         bd:e8:fb:ac:00:cf:d7:53:93:ed:45:a4:92:a5:4e:0f:b0:f9:
         43:d7:75:0e:bd:82:46:9f:c1:e2:85:16:75:52:de:93:93:4a:
         15:04:ff:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXbAQLQa9Bfz57wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MzY1N2UzNmItMjYxNi00NGJjLTk5MzUtZThjNmFiY2I4N2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFEvJN5GKCjIhBx3AnwkfRSJeTqccWaVZjsi
hjQ1ai1v9NuKBw456YZmobXw1xt5MI4f3WYECRXlSIwWxOKtluo/+6C7hRX7NYC5
wbIRhJazyJg32dWVXB0nhnFJ35zJCX8Wln7iTR4nUA/USFnsOR+nY6akeB3vFROu
dcCz07oAOLG3fHxODmvlugBjaL0tnlEdoJwmuBlgp0f+pmAXMpEw9hsrjzO8AZl4
9f6xu/wxAN1B25L/j5y2DvWPSWrM/+AG3ccW0/8LqVl8PNjLNX/8GXbKGqq0kROB
X6zEVGnCwphxCPx27QdMousAHj6MxUqza5MPQHRcmWWkOp+kJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNk0CrEFN/wY+O7Wy8VxGDqoBqfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGRmMTIxZGUtNWY0Ny0z
NzkzLTlkZTgtOTFmMjgyY2E1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGF5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZXIii3B9Cyr9ca90lxHP7qGBBNOUCnzxlHgOlN6RiI+8gO4iczwShD
vaLcqzjKhuIZJeamLpZSPHGR5oKJHaVAwSMbblvaRh7ytm/f4hZhnbS1xRtnh+ux
8fwNTRQ0uZT4ZTEeTTS75J/jLsgVMFvrLhIvyabdLqAE63g2cMHg5lBTwU4/Ba07
L3i2CfDbvwdoNvCtiC8qxaeLjUUJUurMGvPMB7MTrghXS9oRI9kxe9Hzi28tYR87
HFvgSN9x28oy3xhkbklaqknQ95LthD4FANbAxQSAob3o+6wAz9dTk+1FpJKlTg+w
+UPXdQ69gkafweKFFnVS3pOTShUE/7o=
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:00 2026 by rpki-client