Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/56fd247f-5b69-3a08-9664-8c93708c3264.roa
File:                     56fd247f-5b69-3a08-9664-8c93708c3264.roa (raw, json)
Hash identifier:          NGgXxIEwH84SEmUFpYycXtoSa/hPa3pkR87pfM5q824=
Subject key identifier:   A6:CB:CE:7A:79:BF:D7:8E:65:C8:4F:6D:5A:34:64:2D:AB:65:A4:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB2B544D1494B5A74582C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/56fd247f-5b69-3a08-9664-8c93708c3264.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        24.169.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:2b:54:4d:14:94:b5:a7:45:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=65559bbf-2907-455c-8ce1-5c725c95d0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:0a:18:ad:ea:56:a8:b1:08:c8:16:49:81:
                    d2:35:45:a6:88:fa:f2:46:51:c6:19:f8:54:af:97:
                    a9:84:ed:58:ba:e9:ae:ac:58:84:c2:c4:96:30:f0:
                    a5:71:09:3e:3c:5b:e1:70:ce:99:3e:ef:4e:3e:1c:
                    8c:45:c4:9d:ef:63:81:b8:3d:5e:ca:d9:0f:bc:73:
                    a7:53:8a:a5:3a:30:b2:20:e8:c1:e4:15:f8:d7:9f:
                    11:fc:11:d8:2d:29:24:8e:37:ad:23:97:ec:4a:f8:
                    d3:c2:5d:e1:87:75:28:21:08:bd:10:da:7a:2a:54:
                    a9:a0:ee:7c:2c:8f:04:80:87:fe:31:be:59:86:17:
                    e4:64:7b:f9:b5:f5:52:b9:4b:9b:f6:ec:42:bc:8f:
                    f4:16:4a:3f:f4:68:91:6d:7e:89:76:da:25:62:23:
                    43:e8:eb:16:ce:a2:39:c9:55:97:31:31:d4:f4:64:
                    cb:70:ba:a6:63:52:ea:50:6f:72:7e:b1:7f:8c:d6:
                    23:70:77:50:d1:bc:5c:6b:73:81:86:eb:ee:9f:29:
                    b8:ab:eb:68:71:20:92:1d:69:98:ec:4e:9a:92:9b:
                    d6:43:e2:6e:ca:51:b9:d6:b4:08:b1:4f:9c:b1:54:
                    23:c4:9d:44:04:f9:ed:93:94:15:15:de:1a:48:0b:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:CE:7A:79:BF:D7:8E:65:C8:4F:6D:5A:34:64:2D:AB:65:A4:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/56fd247f-5b69-3a08-9664-8c93708c3264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.169.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:a4:25:16:b0:6d:62:d7:a4:19:f8:02:55:9e:96:c5:50:
         6d:a4:d8:80:10:81:a3:7b:16:64:4d:5a:bd:32:f2:f0:82:92:
         cc:a6:fe:24:d4:b2:b7:f5:ad:1f:ce:ad:46:03:7c:c2:91:9f:
         94:c6:f3:2b:0d:ad:f9:66:26:f7:77:08:af:35:f0:36:37:aa:
         a6:13:ab:ec:da:ec:93:2d:61:49:d6:b8:66:c5:07:82:31:ee:
         3e:1e:51:bb:b0:26:3d:8e:13:57:6f:59:b0:3c:5d:ed:60:51:
         c3:2f:f5:ef:a2:68:98:53:da:01:2c:19:e1:42:94:c9:d7:b3:
         06:91:c7:66:34:e3:41:ce:4a:72:8c:2b:ea:5e:c1:9f:28:b1:
         80:9b:af:5a:f0:6c:8f:0a:db:d8:a4:21:93:a9:e2:b2:fc:5e:
         b5:96:bd:bc:5c:0c:2c:83:eb:df:d3:14:4a:6f:29:9d:58:38:
         4d:19:c6:a2:9d:85:73:4d:b1:9f:f8:d3:88:4e:dc:fd:28:45:
         8c:f5:b4:5d:38:d4:4a:e0:7d:ce:a8:69:f9:17:6b:b6:d3:81:
         d5:0b:93:85:dd:f8:ee:a5:dd:b7:81:a5:73:a7:27:2c:54:d9:
         8b:91:39:b6:4b:c6:a4:92:2f:d3:ef:0b:a9:7b:05:e0:18:8a:
         ab:88:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:01 2026 by rpki-client