Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6408572a-8e7c-3230-9e7a-8e8d84d91abb.roa
File:                     6408572a-8e7c-3230-9e7a-8e8d84d91abb.roa (raw, json)
Hash identifier:          tyzKw4o/S2aAo9ecPsDqY5cX0ZFKkFGVfcEyMIIfpu4=
Subject key identifier:   37:7F:83:B1:3D:37:B7:75:1D:7D:4A:51:F6:27:C8:33:24:BC:EC:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA92FFBB723BF46DB0D580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6408572a-8e7c-3230-9e7a-8e8d84d91abb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        76.178.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:92:ff:bb:72:3b:f4:6d:b0:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=48a6b06b-97c9-419a-97f3-c933e745554a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:e5:40:e8:d8:87:cc:99:a4:7a:f3:0d:df:
                    27:2e:56:8d:ce:79:72:66:d4:58:58:91:ba:79:0f:
                    af:e2:f0:ab:ed:10:ce:b0:ef:db:db:b3:59:49:34:
                    84:ee:d9:1b:20:79:b6:6f:30:2f:45:07:3d:19:00:
                    3b:e7:ac:76:a5:2a:b7:70:42:4e:c2:f4:06:b6:35:
                    c6:df:88:6f:ce:63:40:4e:58:1f:6b:89:75:ed:0a:
                    5a:da:30:6e:66:3a:ea:e4:fe:11:18:91:54:ee:05:
                    2a:25:c7:63:ce:1d:7f:75:e8:88:95:ab:11:d0:59:
                    c8:f1:85:29:82:15:51:40:8b:54:1c:c7:c4:6c:38:
                    fa:2c:1a:ba:6b:6b:8e:ae:a4:74:84:a9:65:78:9f:
                    ca:df:d2:e1:9c:97:ca:12:df:b1:da:3c:99:b9:b5:
                    ff:51:5a:d1:fa:d4:9d:c7:63:1f:61:df:fe:55:eb:
                    cd:ee:7b:20:59:19:92:c9:b6:b1:56:a3:b9:29:6c:
                    83:70:2a:bb:2d:4b:aa:30:19:3b:18:0c:85:7a:8c:
                    27:c4:cb:24:bc:a1:d7:fb:dd:ad:d1:81:99:a2:b7:
                    6a:88:65:0b:bb:d7:fd:8a:0b:6d:77:4a:4a:7b:ef:
                    af:23:c4:cf:d7:41:7d:ab:61:57:2f:de:c6:05:5d:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:83:B1:3D:37:B7:75:1D:7D:4A:51:F6:27:C8:33:24:BC:EC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6408572a-8e7c-3230-9e7a-8e8d84d91abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:65:9f:81:6f:f1:56:4c:1d:be:8f:8a:00:c4:2c:30:08:
         b4:1b:bf:d8:61:17:b8:2a:30:24:03:2c:57:9f:d1:08:17:50:
         1d:2e:25:fa:fe:72:01:ac:7a:94:c5:3a:58:ca:a8:db:02:60:
         1a:11:78:57:18:d8:64:e6:1c:89:a4:1e:ca:b3:64:6d:0c:4c:
         af:29:aa:1b:c4:4d:8a:a6:53:93:05:eb:3c:44:5e:f8:c0:e5:
         3b:64:69:8c:03:32:38:68:78:98:79:14:2a:42:8c:32:80:61:
         e8:b9:ce:00:c4:c3:04:8b:51:7c:50:36:c1:ef:41:8d:5f:76:
         7d:9e:28:4d:37:9b:bf:fd:1d:49:c8:e7:52:30:d6:e8:b6:01:
         45:ea:d4:77:68:c4:a3:cb:9f:af:55:d5:ec:f6:cd:04:ff:28:
         2b:a7:35:4f:1e:e3:25:2a:96:df:10:54:4e:08:f0:10:22:f5:
         71:c5:0f:cf:d5:90:ad:6c:1f:ad:7a:16:8c:e5:bf:38:d6:3d:
         1a:27:55:96:b8:b2:fc:14:24:42:94:00:4e:6a:f4:c7:77:66:
         ed:f7:53:19:d2:ed:fa:85:22:70:2d:6e:0e:62:77:40:d0:e4:
         f8:b9:42:f4:39:06:76:28:6f:ae:6f:b4:08:ff:8b:53:69:5b:
         39:ee:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:59 2026 by rpki-client