Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/508dd2df-1de3-31ae-9564-7574737d29f7.roa
File:                     508dd2df-1de3-31ae-9564-7574737d29f7.roa (raw, json)
Hash identifier:          8sn9Y2x4jfqBI5yuVTvG11qEvfo5SBouC/tC/0f9cK4=
Subject key identifier:   6D:CB:EA:17:0A:36:B4:B6:59:31:7A:9F:BF:57:A9:66:A8:F9:7A:8B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CFFB641469D167C67BEC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/508dd2df-1de3-31ae-9564-7574737d29f7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        24.208.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ff:b6:41:46:9d:16:7c:67:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=aeb936fa-62d3-47d4-9245-ebcce1bf972e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:62:a5:78:93:78:fb:ef:79:d0:46:6a:f8:20:
                    a0:09:eb:53:d1:a9:de:c4:0c:7a:ab:5e:a0:db:5c:
                    73:97:a7:4a:a4:05:1c:02:d4:56:de:3d:93:ba:71:
                    f2:51:a8:60:32:58:b8:96:56:9b:3e:2c:e6:41:d7:
                    c6:d6:8f:74:6e:c6:1c:41:fb:0f:32:4c:c0:33:31:
                    2b:fe:6c:8a:cd:88:81:5f:e0:a1:8a:4a:e7:a9:e0:
                    56:c7:6e:e9:a0:93:95:4b:3c:2e:da:9f:f1:74:d9:
                    fd:1c:a4:e3:4a:ee:96:b3:ed:29:e9:2f:3d:91:ae:
                    4e:64:6f:29:d8:b3:f8:99:66:5b:43:93:5d:e5:80:
                    76:c3:01:e2:0e:22:ad:d8:ee:45:fc:07:b9:ee:0c:
                    f2:0e:53:6e:67:f6:0d:64:07:bb:bf:45:e0:8f:f4:
                    71:c5:21:05:65:3b:6b:e6:ea:04:1c:ca:a4:99:43:
                    0f:e6:35:b5:00:6b:fe:b5:7c:42:72:49:f3:bf:f3:
                    8b:f6:f5:4e:4e:bb:97:a1:e7:09:f2:30:0d:ff:6c:
                    37:ce:af:be:d3:e9:bf:3a:75:5c:54:9f:a0:13:d2:
                    81:82:1d:ed:ed:ee:69:4b:30:c0:9a:05:40:cb:8b:
                    f8:f8:09:3f:6e:4d:dd:ca:1c:17:7f:21:3a:64:02:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:EA:17:0A:36:B4:B6:59:31:7A:9F:BF:57:A9:66:A8:F9:7A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/508dd2df-1de3-31ae-9564-7574737d29f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.208.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:95:7d:c8:bf:13:cd:ae:bd:f8:1f:ec:30:f1:b6:8d:3c:
         e9:ef:5b:8e:a2:76:a8:d0:e3:19:f0:f4:e8:43:0b:4c:ff:bb:
         8a:01:e7:da:f5:e1:41:98:e5:15:48:02:f1:23:d2:ad:75:b4:
         c3:74:b7:a9:e4:4e:ad:95:5a:f9:bb:10:5b:19:0c:51:90:da:
         c1:07:f5:b7:de:ce:9f:5d:af:18:3e:8b:7e:7d:22:22:16:3c:
         82:e6:f6:f5:e7:90:a1:6e:d9:89:f9:13:7a:9c:4a:53:04:9c:
         df:1a:e4:29:e9:c3:3b:45:6e:b0:ef:ba:8c:ec:5d:02:fa:e8:
         1a:a6:d2:0b:5b:13:d3:93:3b:42:ef:9d:6c:4a:42:6d:d7:dd:
         c5:ab:90:c3:71:6c:7c:bb:6c:82:83:e1:2c:d4:c2:c3:dd:e1:
         34:26:80:f6:f3:52:0a:a9:ef:8a:34:fe:3c:11:eb:35:74:01:
         45:3e:49:de:1e:62:ee:8b:2b:1c:98:df:ba:f3:f0:20:03:ac:
         ac:86:9b:ae:e7:71:16:a9:5a:9c:0a:52:e8:82:16:51:6f:66:
         83:6f:dc:10:5d:94:12:5a:3f:be:c1:fb:52:e3:9b:df:2b:f9:
         2a:7d:37:b7:10:a0:0c:6f:93:45:c8:dd:c6:c9:d8:d9:a0:9f:
         8b:ee:a7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:28 2025 by rpki-client