Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
File:                     5580679c-fe47-36a2-af08-7e277e246b50.roa (raw, json)
Hash identifier:          bxinSpcE8ZSt3nmnZMIkDfil9xKT/CNMHjXt6Tc9QAg=
Subject key identifier:   35:21:01:86:33:8D:5C:D3:EB:1D:1C:67:2C:FA:F2:DC:27:9E:61:4B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CFA2962EC53316E4E5E7D
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        2600:6000:f5d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:fa:29:62:ec:53:31:6e:4e:5e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=76626ca7-6c54-49bf-89ef-fc630c24b173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:ac:fc:ec:63:e3:ed:b5:d3:e3:7b:e7:ae:
                    d6:01:da:9d:7a:e9:e2:07:ba:cc:98:3b:98:17:23:
                    9c:15:4b:ba:10:4e:23:1e:29:02:d6:cd:0b:3b:d7:
                    47:e2:21:9e:38:6e:f6:59:3c:d4:eb:d9:d2:ce:bb:
                    e0:bf:3c:7e:6b:62:5f:6b:fe:a5:0d:a0:9f:26:d8:
                    92:e8:80:d8:82:85:35:3c:08:cf:37:7d:3e:68:63:
                    3d:9a:88:2a:00:e9:90:43:64:03:70:18:77:03:35:
                    06:6b:29:85:57:dc:11:5e:b4:ed:72:b4:af:ed:9d:
                    dd:56:5a:a0:ff:04:e4:65:45:82:a0:db:de:14:3a:
                    64:14:8a:dd:17:a9:b0:36:a0:2e:4d:fb:5f:0a:bc:
                    c3:b8:b4:9c:0e:ce:a8:b9:b8:d7:93:4b:1f:b6:2c:
                    55:1b:46:c4:dc:87:8f:c8:08:d4:33:3d:03:37:47:
                    a8:0f:13:a6:38:a4:cb:83:59:86:8f:76:c4:d0:6b:
                    da:1f:e0:b7:12:5a:fb:2f:13:bb:8b:93:0c:1b:52:
                    7f:7b:fa:48:a7:f5:4d:f9:5f:0d:f8:89:2f:07:86:
                    98:24:08:d9:15:3b:c0:24:f0:ee:df:65:82:32:74:
                    d2:dd:a6:37:71:da:4f:3d:53:3f:5c:4e:b9:36:8a:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:01:86:33:8D:5C:D3:EB:1D:1C:67:2C:FA:F2:DC:27:9E:61:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:f5d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:93:82:20:62:3c:fe:55:af:5a:bd:0d:b7:48:ba:cf:00:8f:
         a8:7c:e4:53:2b:c2:4c:2f:47:b1:25:93:4d:3f:e6:9e:86:3f:
         64:02:a5:34:72:03:fa:1c:8b:cb:6a:52:2e:20:fa:93:b6:23:
         5f:ef:e4:6f:bb:de:32:1f:a6:13:07:f5:e6:5d:23:86:47:68:
         fd:64:e2:52:98:66:a5:cc:dc:fb:48:8b:6d:91:33:c8:04:55:
         54:4c:c7:52:1a:b3:2f:94:63:79:42:9f:34:fa:95:ae:d5:90:
         f1:b7:64:d0:68:34:44:41:36:6d:f2:41:4c:6c:2d:66:4f:df:
         e4:be:32:25:bf:44:00:18:53:87:02:e4:b8:b1:83:02:e3:7a:
         4a:cb:3d:3e:6f:04:86:e5:0c:84:1b:37:14:db:14:3e:37:9f:
         31:46:9b:78:da:9c:15:97:2b:0c:b4:d3:c0:e1:d3:7e:fc:95:
         da:dc:2c:6e:ea:34:0d:7f:9f:e9:bb:f5:32:a4:2d:f5:d8:62:
         c4:54:39:05:dc:2e:e3:85:17:1d:8b:61:1f:51:b6:f7:d7:06:
         39:5b:23:6d:0d:0b:3f:92:51:81:30:8e:c9:e4:79:c7:49:f9:
         c0:1c:f2:cf:4d:53:88:1d:2d:94:f5:e6:6f:68:da:10:82:db:
         30:73:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:39 2025 by rpki-client