Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fd78b68-84fe-3fa8-9712-95b8fb3cf402.roa
File:                     5fd78b68-84fe-3fa8-9712-95b8fb3cf402.roa (raw, json)
Hash identifier:          oRwbfzWRVjSwDP0POU/q1WB/MFdEGSZY6KbOD2d7iDI=
Subject key identifier:   61:BC:5A:E0:07:2B:AC:FC:67:CD:EA:67:F1:24:49:E6:BB:85:45:D2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB0788504431532FDA9C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fd78b68-84fe-3fa8-9712-95b8fb3cf402.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     12271
IP address blocks:        72.231.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b0:78:85:04:43:15:32:fd:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=40defa65-1a47-419b-bcf9-3f4775141ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:5b:5c:c2:e0:fb:46:d4:41:3c:28:41:98:
                    fd:ef:fb:2f:2d:8d:25:5f:a4:f8:88:ea:12:a8:11:
                    f0:44:f5:17:aa:ea:be:ae:43:29:5a:55:00:5e:a9:
                    17:ca:98:8a:25:f0:6f:12:1e:31:2c:dd:66:8a:81:
                    e5:07:74:4d:07:e7:6b:de:36:cf:12:8d:83:cf:a0:
                    14:b4:c4:e6:f6:21:0f:21:fb:39:fe:2e:a8:a8:0d:
                    72:51:f6:08:bb:ad:ff:df:d4:b3:f1:47:92:d6:09:
                    06:49:94:1b:1f:0f:19:35:02:46:36:54:dc:f7:45:
                    85:f6:01:b8:8c:c7:f9:10:bf:43:ff:36:dc:7a:30:
                    0a:30:cc:97:86:23:31:e8:6d:4d:0e:90:ef:62:48:
                    5e:ab:7e:aa:92:ea:73:98:dd:a9:a8:69:a9:9f:60:
                    e0:f2:11:bc:2b:b4:e3:8c:00:6a:97:78:c2:b0:a9:
                    dc:87:71:a5:03:66:a0:ea:f9:dd:96:c3:42:e7:e2:
                    64:f1:e7:b9:bf:6b:be:7f:7f:9b:6d:f4:cc:82:13:
                    c2:b0:27:74:50:ce:06:19:7f:e1:ad:93:1e:d0:72:
                    09:7f:ec:12:95:53:94:bc:fe:50:fc:64:54:f7:7a:
                    aa:9e:a3:6d:7e:9e:7b:de:98:80:c6:90:4c:58:1b:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BC:5A:E0:07:2B:AC:FC:67:CD:EA:67:F1:24:49:E6:BB:85:45:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5fd78b68-84fe-3fa8-9712-95b8fb3cf402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.231.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:56:ea:4c:6d:f0:37:3c:ff:25:ba:e9:1c:0a:53:1c:52:
         1d:56:ae:5a:8f:b4:1f:1a:da:d1:97:5a:9f:0d:04:fe:a8:8f:
         22:0e:9c:39:31:fe:07:31:5f:cb:0f:32:aa:31:61:e7:25:c9:
         e4:0b:71:6c:2d:c8:67:df:d6:c6:a5:ed:1a:3f:1d:b8:f6:11:
         6b:89:80:b1:b7:93:4d:41:bb:5b:11:bf:03:f2:b8:cf:78:73:
         67:46:11:99:6e:ab:07:80:c0:19:5a:49:51:bf:80:c2:04:f8:
         a4:20:b2:9e:7f:3f:57:3c:ce:01:85:f5:88:4d:6c:8f:92:bd:
         cb:4c:db:e1:c3:ee:bb:ee:14:ba:b7:61:04:53:96:13:b7:30:
         3d:6a:4f:da:8a:47:f6:f7:29:06:2c:ab:43:ed:ba:85:47:b7:
         56:3e:9a:71:cc:8b:fb:7b:cc:f1:9f:d1:30:3d:67:ca:3a:ec:
         b7:55:a3:36:a1:f8:52:0c:7f:e3:66:a3:92:ea:54:4d:20:8c:
         57:03:b4:bf:55:a1:7e:39:1a:29:26:41:98:3b:fc:bd:6a:4a:
         de:26:da:47:3a:a1:1a:ed:3f:92:bd:f0:bd:1a:ff:9b:6f:1d:
         bb:d8:6e:0d:10:b6:0e:43:50:7c:5d:10:f7:2a:18:ae:75:83:
         fe:81:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:24 2025 by rpki-client