Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa
File:                     58aa95c4-289f-3da8-af22-c505cd4dad19.roa (raw, json)
Hash identifier:          Lrhhsbo5IHIXLPYuB9b90F98NMiSkOxJyYYXMcp1lsg=
Subject key identifier:   CA:37:03:D4:D0:DE:6D:58:11:30:98:BC:0E:3C:B8:BC:B4:DA:9A:AD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA0A227F7C16A50ADB980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        208.125.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a0:a2:27:f7:c1:6a:50:ad:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e18d0ab2-67b5-40fc-821c-4a229cd09afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:24:08:13:70:ba:12:6e:d3:37:fc:d0:54:
                    da:6e:9a:f5:42:e1:b3:9f:e5:3f:df:7d:66:55:5e:
                    66:d9:4d:ff:78:9d:be:55:e0:3c:d9:dc:bf:12:26:
                    2c:02:f3:5a:c6:e0:b3:d7:eb:c7:7a:a6:aa:68:7c:
                    46:0e:4f:10:3e:67:d0:9a:8e:b9:28:ad:f8:a7:dc:
                    2e:7e:df:63:5a:8d:66:62:2e:6f:99:47:05:98:b1:
                    8d:1b:f7:58:f8:c3:4a:14:2c:b7:ff:bd:e3:cf:2d:
                    fc:3c:53:15:83:cd:26:3b:36:d1:a5:34:88:71:6a:
                    be:27:8a:92:14:66:f3:a6:70:c8:3f:5b:ac:47:74:
                    fe:ae:bc:62:5d:9d:5d:80:50:e8:fc:2e:42:fd:f5:
                    b6:d1:f5:dd:a4:2f:89:44:ab:99:3c:4e:c5:a5:71:
                    5c:bd:bd:b8:5e:53:ea:66:3c:cb:ad:52:6e:51:c4:
                    96:82:97:2e:f9:38:2a:3c:25:ee:0a:17:c7:43:e5:
                    de:e3:ea:5b:aa:fc:59:c4:f5:6b:bf:de:d0:67:d9:
                    9f:12:1b:f6:e1:03:9c:90:bc:60:79:d4:bb:57:ad:
                    72:1c:78:29:7d:4b:c4:e0:ba:5e:81:6b:59:5e:1a:
                    85:f8:a8:89:b6:05:07:99:ac:33:4b:d3:63:e4:cc:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:03:D4:D0:DE:6D:58:11:30:98:BC:0E:3C:B8:BC:B4:DA:9A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.125.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:7a:54:04:ba:43:ad:5f:b3:e9:98:2e:60:fc:3f:87:fc:
         40:91:68:8f:c8:cb:d9:41:dd:ab:20:06:d7:e2:ee:4f:89:44:
         4c:81:20:9f:cf:1c:4f:28:a5:b8:73:ac:8a:8e:4e:af:54:41:
         b0:57:27:aa:e8:df:57:a4:cd:87:e9:d2:76:34:d8:07:76:2b:
         f6:d0:5c:80:c7:3e:21:79:bb:95:34:87:54:ef:72:5c:a9:58:
         c2:90:ae:d0:18:14:55:52:38:85:34:45:5b:15:b9:98:ce:54:
         bc:1d:86:7d:87:96:0c:9b:4a:ff:17:dc:da:e2:f5:4a:09:5c:
         70:cc:9a:62:7d:ba:84:d3:c4:29:85:83:96:a9:ef:db:52:b6:
         ce:39:a0:24:4b:27:10:44:b8:75:4c:68:c9:dd:cc:6c:4a:bd:
         b1:5e:f4:e2:ff:1f:40:25:fc:e8:98:10:b8:e7:c9:32:71:34:
         97:bc:91:e0:39:3c:97:89:58:2f:f6:2f:58:d0:77:16:40:a2:
         ab:6d:c6:5a:b1:8a:e1:30:a3:3b:ee:0f:15:68:bf:e8:ae:0b:
         4a:8a:fa:cb:bb:0f:38:91:6c:5d:eb:59:cf:bb:49:1c:5d:25:
         61:e3:4c:19:8b:70:a8:e2:cf:b0:a4:a5:18:76:08:42:04:f8:
         70:88:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:04 2025 by rpki-client