Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ab0fee2-4163-3c69-9129-e13c4eca2fac.roa
File:                     6ab0fee2-4163-3c69-9129-e13c4eca2fac.roa (raw, json)
Hash identifier:          DM66JfBjc2fYYMPjLUkYWmiEFPZwBwjMb0OtvIPJ2wY=
Subject key identifier:   DB:09:B0:EB:5F:D8:8C:6D:8C:D4:6E:47:77:C5:E6:C6:B8:CD:28:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D992CD7449B5D58CB8D35
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ab0fee2-4163-3c69-9129-e13c4eca2fac.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        74.219.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:99:2c:d7:44:9b:5d:58:cb:8d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=73ba1283-8e6c-4daa-9cea-db86feccb8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:d5:4d:e9:b7:cd:a0:12:d8:95:57:31:63:
                    d0:06:03:17:bf:fd:9e:2b:6e:ce:85:ee:3d:da:49:
                    a2:98:e3:68:f6:fa:9c:76:db:3a:46:e0:f3:ed:1c:
                    3c:d0:24:51:5a:fc:02:7f:20:8f:6e:26:47:6b:6b:
                    bc:5b:7b:c2:1b:d5:3c:63:cb:9f:52:f9:bf:fc:fe:
                    de:1a:d8:8a:31:c9:37:4a:51:f1:28:16:62:26:a3:
                    9d:66:cc:31:fd:8b:59:71:e1:75:a8:6d:02:a6:93:
                    c0:aa:a5:65:30:fd:a0:69:21:0c:22:2e:69:1b:c0:
                    9b:59:5d:dd:4c:5b:90:7a:18:96:3f:14:18:52:02:
                    01:79:42:cc:a6:4d:f2:c4:c2:73:d5:ea:5c:fd:3b:
                    aa:b4:98:60:9c:2b:9e:f9:0e:4b:33:b0:77:a4:b8:
                    e5:57:f9:ff:a4:6e:b1:a1:f9:ef:18:53:e0:46:93:
                    01:8e:1f:e4:ed:85:49:65:f4:36:fc:9e:9b:70:b1:
                    56:eb:c2:c2:91:8a:f7:95:b7:51:46:b1:e2:23:32:
                    9b:81:44:16:7a:ab:8d:f2:f9:6c:c2:a8:4b:b4:10:
                    10:48:76:32:21:ac:2c:24:4f:b6:0c:f1:2e:4f:83:
                    80:92:12:41:04:3d:1e:8b:8f:96:e1:e0:9a:a8:05:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:B0:EB:5F:D8:8C:6D:8C:D4:6E:47:77:C5:E6:C6:B8:CD:28:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6ab0fee2-4163-3c69-9129-e13c4eca2fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:da:df:fa:e9:75:3e:de:46:16:bb:14:da:78:4f:3f:db:67:
         99:dd:c4:18:6e:a4:d5:01:88:16:16:23:8e:69:97:f5:f6:3d:
         ab:8c:a6:b9:40:e8:a0:af:5e:7b:74:83:9c:46:bd:86:30:e4:
         ba:6f:13:b3:68:0a:26:c5:2e:90:9a:9d:d8:b1:6c:3e:87:5d:
         c2:44:9c:8b:e9:ff:9a:13:b2:f1:e7:d9:c1:0d:28:21:94:4d:
         a8:5a:c8:35:83:64:1a:40:b1:8d:e2:26:a8:cf:fc:30:be:f3:
         d1:f8:0e:8c:c6:b9:ef:76:28:06:9d:14:1f:27:13:73:92:f4:
         e8:42:22:fa:18:d4:fd:8e:ba:32:d8:ac:c7:ce:b0:96:00:15:
         d3:36:55:76:2e:31:5d:5c:bc:f0:64:37:29:72:d0:d1:27:b5:
         25:1f:69:bc:c9:57:aa:24:c1:fe:6d:5f:d1:b7:17:46:23:0e:
         a3:e4:22:4f:19:4d:4e:24:b1:c4:5e:79:50:fd:4d:75:a3:03:
         3c:7a:1e:71:ca:37:c8:1d:68:a0:3c:fc:8a:b2:9d:83:44:4a:
         da:81:3b:ac:3f:76:15:9a:11:cd:7d:05:e7:51:06:cd:98:12:
         b9:ec:e9:e1:fc:2f:9b:0d:2b:93:cc:8b:6f:af:a7:6a:47:7f:
         2f:95:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:38 2025 by rpki-client