Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6859940f-2f03-3298-a7ee-f467f64223ee.roa
File:                     6859940f-2f03-3298-a7ee-f467f64223ee.roa (raw, json)
Hash identifier:          eNHo9GrSMk6YXKt2JdVZixOxEAWlqupnofjKOSj/bPc=
Subject key identifier:   C8:24:A3:F6:C6:08:58:12:B6:69:35:38:EF:6D:E3:98:91:01:08:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB2A4C4E85DE6E2E205800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6859940f-2f03-3298-a7ee-f467f64223ee.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11427
IP address blocks:        70.121.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:2a:4c:4e:85:de:6e:2e:20:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8062bbec-e9ee-4a3a-9407-0b4c1fb06ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:48:8d:35:f7:dc:20:d6:e8:d4:0b:88:de:
                    f7:c5:aa:34:e8:b9:ee:73:48:6c:6a:33:de:72:f4:
                    cf:fc:8c:65:8e:61:24:1c:4c:2a:4e:5d:57:7e:c7:
                    31:99:bd:83:0b:ee:d7:63:fa:91:3d:14:09:78:79:
                    67:d7:02:48:43:79:5f:79:a3:3a:18:50:c0:f3:9d:
                    06:62:06:ac:08:7e:bf:ed:44:ab:c6:90:d2:13:23:
                    7d:e6:6e:0d:fd:0e:45:4c:0a:f7:48:5c:90:14:c0:
                    c6:ae:6d:68:b1:2b:e4:b3:ac:48:d1:84:8c:f7:0d:
                    5e:27:e6:ba:eb:03:7b:d1:8e:43:42:0a:6c:7b:b5:
                    d5:45:11:e8:d5:ac:c4:f7:8d:a6:e8:c4:01:1c:ac:
                    e7:7c:3a:8d:60:ab:30:14:ad:ea:69:30:da:87:8a:
                    b0:30:94:a1:05:24:dd:92:b8:5d:87:f1:ef:89:7e:
                    39:d7:45:6d:6d:84:c0:5c:ae:fc:32:10:bb:68:d8:
                    69:a4:a6:5c:da:e4:71:4f:44:cf:91:7d:19:9f:33:
                    b4:36:3e:74:c4:79:5c:37:64:ae:97:12:f6:cf:95:
                    90:53:0d:e7:9f:43:3e:05:5a:87:5c:b5:ac:08:d2:
                    eb:0e:f4:29:bf:c1:38:13:09:f5:41:34:df:88:69:
                    da:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:24:A3:F6:C6:08:58:12:B6:69:35:38:EF:6D:E3:98:91:01:08:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6859940f-2f03-3298-a7ee-f467f64223ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.121.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:76:b6:74:58:40:5e:0b:2f:1a:fd:d0:2d:cf:72:97:57:57:
         08:b4:b8:e4:fd:fd:e0:30:b1:89:d1:5d:5f:75:05:2c:fe:20:
         a5:10:3c:14:e1:ba:43:53:d5:6b:11:88:d7:ef:e0:16:fb:af:
         d3:59:a5:93:40:fa:cf:ec:ed:26:9f:bb:09:69:9a:fd:0a:3c:
         60:87:eb:66:7c:0e:7d:94:8d:e5:3a:ed:78:39:b2:f5:b7:5f:
         1f:c2:a1:c6:59:df:08:97:f1:ea:52:f9:f0:0b:4c:b7:27:c7:
         5d:56:e7:b7:74:32:03:3e:de:6e:e4:15:6a:64:48:de:5d:b2:
         33:28:db:16:de:01:79:a5:64:64:99:07:5d:c7:60:ab:bd:2f:
         94:e1:89:a1:a1:e4:0a:21:90:23:9c:b4:84:10:71:6f:73:f2:
         1c:67:57:38:10:f0:ad:86:13:04:fd:31:5b:85:fb:57:99:ea:
         6b:93:d5:3c:4b:1a:88:e9:95:df:05:c6:f3:bc:5a:a0:28:56:
         89:14:49:43:dc:1b:25:4b:6a:60:c0:5f:d3:de:fd:d8:d4:fb:
         95:9b:78:52:01:22:46:04:4f:b0:d9:98:c4:07:e7:15:a3:26:
         7e:cf:7e:95:f8:33:7e:47:ed:b4:07:80:9d:08:58:f2:ac:79:
         c9:39:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:15:17 2026 by rpki-client