Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dad47be-46ff-3b6b-a391-112b9abd1da1.roa
File:                     5dad47be-46ff-3b6b-a391-112b9abd1da1.roa (raw, json)
Hash identifier:          6yQxT1vA/IzEQ0W72CQZBxg5gXSyOefWGuZ4qNDWbcY=
Subject key identifier:   B7:E1:BE:F3:F2:E6:D8:D9:EE:3F:CE:D2:EB:AB:A7:64:3A:95:29:22
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE8B93832367F47983B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dad47be-46ff-3b6b-a391-112b9abd1da1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.56.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e8:b9:38:32:36:7f:47:98:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=18e56c92-ffd5-4199-b7bc-be5cf7cc4f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:70:81:12:95:51:ce:10:b9:fa:72:4d:00:2f:
                    cb:44:40:5e:f7:e1:06:42:47:80:82:93:9a:2a:ed:
                    3f:65:63:d9:66:5e:fb:5f:bf:44:ce:5f:b9:4a:3b:
                    8b:68:0e:b9:89:21:c1:94:4b:83:20:ec:00:60:04:
                    3e:6e:85:17:37:78:42:ea:05:1b:e1:39:bd:97:9f:
                    5e:65:d8:84:49:21:7e:27:cd:cb:71:93:1c:0c:a0:
                    3b:09:5a:4e:54:4e:e2:ba:47:9d:86:0f:d7:50:4f:
                    8c:ca:03:07:63:12:bd:1c:68:ef:4f:40:5e:2e:b4:
                    b0:6e:f7:48:42:ba:b1:91:f0:c6:bf:8e:e3:1e:99:
                    ef:c1:36:17:4a:49:0e:15:95:fb:be:b7:48:ec:0b:
                    26:b4:e4:5e:d5:1a:d1:b7:2f:c5:cf:41:b8:fd:de:
                    aa:d8:a2:3d:d6:a8:a5:31:7d:4f:88:91:7f:f7:5e:
                    91:3c:12:13:a1:ab:2d:41:c8:fc:10:3b:31:0c:43:
                    82:f7:13:6a:72:bf:b9:0d:a5:38:b0:93:22:a0:52:
                    14:d8:04:67:23:22:b4:98:46:62:25:de:04:4d:21:
                    c9:6a:2d:da:0b:1d:88:2a:c4:25:b6:0d:72:29:96:
                    10:be:b0:c1:5e:9d:9a:41:28:f8:00:60:41:f7:e6:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E1:BE:F3:F2:E6:D8:D9:EE:3F:CE:D2:EB:AB:A7:64:3A:95:29:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dad47be-46ff-3b6b-a391-112b9abd1da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:1b:b6:6a:3a:83:db:eb:dd:13:e1:4a:24:e8:d3:28:31:
         3d:e5:30:68:11:65:ac:f1:7a:ab:63:4a:c1:bc:3d:74:56:ac:
         f4:40:93:79:f3:f0:e1:b5:d4:07:05:09:d0:60:e7:79:0e:ba:
         5f:ae:53:d4:07:39:ff:d3:f7:ac:ee:d6:d3:05:64:e8:9a:9c:
         22:5b:fb:fd:75:d0:de:07:3e:97:94:db:d3:73:a5:29:f2:aa:
         6b:8f:83:81:5b:33:17:34:75:93:5c:5f:43:3e:d8:c8:49:0b:
         49:ac:4c:c6:43:ef:f8:b3:3b:87:ad:1c:87:86:83:0c:ec:0a:
         e1:72:d5:f2:3b:46:83:9c:09:53:1f:3d:ea:b0:50:2b:5d:fe:
         32:c9:9a:88:a8:8c:79:68:ea:d0:ab:54:fb:05:72:b3:2e:84:
         b3:b4:80:e2:4f:50:a9:aa:d3:41:2f:0b:8c:75:58:58:80:71:
         a1:52:c7:d6:0e:54:d9:61:fc:36:a4:05:ed:a9:50:06:17:de:
         91:5c:93:38:a0:b9:19:04:1b:ee:62:b8:1c:af:1e:9d:bc:c6:
         c5:09:5c:5b:40:d1:f9:e1:d9:ca:f9:40:9b:a4:81:81:ad:be:
         7a:bd:6a:ba:f5:bf:24:70:95:6e:6e:d2:4e:73:47:a0:bc:8a:
         45:72:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:38 2025 by rpki-client