Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa
File:                     5655425e-c24a-3871-9a92-5483b0261bc4.roa (raw, json)
Hash identifier:          krfBkDgMSGGBaGUW4EdzitTBCk/MXGurviPbD5FSpHk=
Subject key identifier:   1E:F6:B6:FB:9D:86:06:A3:A1:A6:47:CE:82:6C:D4:16:34:35:9D:14
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D8FE22505B96134806E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.164.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:8f:e2:25:05:b9:61:34:80:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=44c150a8-69e4-4861-984d-92e2dfca8ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:2c:b3:13:96:64:01:5b:45:87:0f:27:01:
                    b6:ea:44:eb:51:b2:ec:cf:2d:74:e2:a5:a3:71:2c:
                    16:6f:fe:38:09:af:d2:54:d1:d8:74:35:24:ec:1f:
                    9f:0f:64:b0:ac:1a:b7:c1:29:2c:1c:31:fc:46:a2:
                    04:44:5d:18:21:e5:11:1e:c7:b5:f5:12:7d:b5:09:
                    ef:91:4b:3e:b7:fc:8d:4c:8f:5c:2b:da:06:f9:66:
                    ca:6d:93:92:c3:77:b9:aa:ea:22:55:4b:a9:d3:0e:
                    d2:fe:72:23:8f:41:0b:67:d8:a1:75:57:e6:06:d7:
                    eb:22:a9:4a:60:f3:75:60:bc:91:0b:0a:8e:8f:3b:
                    b1:d2:b4:62:10:e4:26:d3:7d:b2:53:04:25:19:1b:
                    be:8e:f2:ab:a8:b8:81:3f:47:d2:85:db:7f:a2:27:
                    f5:84:ef:49:e1:5c:e9:1e:04:5a:af:35:73:ed:8f:
                    6e:3a:14:8a:21:64:f0:76:a8:0e:e2:5f:a6:59:ca:
                    97:23:3e:ef:3b:d4:34:4e:07:24:94:39:5c:ce:fb:
                    36:0b:fb:6d:37:d3:32:c5:87:3d:2f:4a:ea:7e:46:
                    c2:df:06:4f:26:8b:3e:c3:54:a0:a6:36:4a:e9:18:
                    5a:67:a5:b6:0e:e1:6f:8f:2a:5d:aa:8c:99:5f:ae:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:B6:FB:9D:86:06:A3:A1:A6:47:CE:82:6C:D4:16:34:35:9D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.164.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:64:9d:6d:c6:dd:02:b6:05:1e:e1:4b:b3:ef:ca:27:ff:7d:
         d3:e7:29:09:c9:db:6d:53:a0:cc:b6:06:82:3a:db:33:a3:8b:
         28:0d:f6:f2:05:ad:ae:6c:8b:c7:90:14:25:fc:2c:d6:e0:d0:
         3c:cc:ef:73:30:e0:93:46:fc:cc:33:88:d6:f9:80:f6:a9:bd:
         98:4c:93:67:c8:1d:cb:cc:16:e7:cb:a6:e1:02:22:e9:d5:85:
         60:87:65:b9:56:64:99:23:d2:2d:23:2f:7b:4d:13:57:19:0a:
         bc:d3:10:a6:97:b4:10:b4:72:d3:43:e8:c3:77:1a:67:44:f6:
         2c:cc:69:4d:06:ab:84:00:4f:63:c2:90:e4:af:41:40:26:a6:
         bb:1f:ca:bb:f8:d4:c4:87:52:b6:13:6a:1a:b3:88:66:bd:a6:
         6c:a7:e5:ce:22:6d:59:0a:1e:15:6c:65:15:dd:cf:9b:76:88:
         8b:91:f1:e4:9c:59:2e:6f:08:e9:6c:fd:b5:7e:a6:ac:cc:21:
         f9:ed:53:66:bd:a5:38:cd:20:32:68:14:ed:7c:29:a4:ed:88:
         24:d0:af:0f:7c:6c:7e:8d:dd:34:06:22:65:e7:1a:61:25:d2:
         bb:40:0d:76:62:26:24:e2:e2:48:d4:3d:4d:1f:11:9f:64:ad:
         9e:49:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:43:02 2025 by rpki-client