Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70418446-b5d3-39b8-8c31-744219d6717d.roa
File:                     70418446-b5d3-39b8-8c31-744219d6717d.roa (raw, json)
Hash identifier:          DuFCQY9MD1zzoEJzg1MN5y52fYvxBNqbyoW8LgJXu/U=
Subject key identifier:   CA:3B:88:0C:49:2D:9D:8C:6F:A1:98:1E:C9:FC:09:6C:E5:00:64:62
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DBF043828089CAE5EA900
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70418446-b5d3-39b8-8c31-744219d6717d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        24.173.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:bf:04:38:28:08:9c:ae:5e:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d62bb9b7-b0a3-439e-a7f8-0fc4fb50c74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:1d:47:fb:69:22:c0:2e:4e:05:72:07:6b:
                    ba:c4:7d:46:dd:81:c6:4a:7d:1c:6f:95:e5:a0:85:
                    d8:50:91:ce:c0:da:f7:a3:2b:e9:82:55:4f:e0:57:
                    70:66:3e:21:4d:c5:3e:7f:6f:93:34:fb:5c:61:28:
                    b7:f1:ed:b9:71:5b:70:9b:e3:b0:73:9e:d2:53:51:
                    a6:b2:e5:39:06:34:96:e3:f0:06:a7:49:81:14:8c:
                    11:af:2b:bd:dc:5c:ca:eb:e6:a4:61:3d:71:0e:ff:
                    29:9b:f4:c7:be:9e:57:3b:79:2f:25:74:14:50:ae:
                    42:43:8a:9a:4d:22:89:b4:d7:13:56:cf:90:f2:f7:
                    8b:bc:d4:88:2c:d2:86:27:ac:67:ba:6f:6e:c7:ac:
                    14:fb:7a:68:8f:a2:81:e1:78:b1:43:1a:ec:ca:94:
                    1a:d7:ea:0a:a4:92:df:69:2e:cd:df:e9:be:2b:97:
                    7d:24:f4:4a:53:e6:67:17:38:ae:24:1b:6d:fb:53:
                    1b:4f:2e:4b:87:00:62:ee:21:f2:a5:44:c4:f1:f0:
                    a1:76:fc:71:7c:26:ba:6f:69:8c:cd:2a:25:89:a0:
                    49:07:c3:99:4b:1a:05:f4:f6:ec:86:4d:9c:9a:f1:
                    68:64:df:28:e1:4f:9a:fe:b4:2f:5e:92:0b:92:55:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3B:88:0C:49:2D:9D:8C:6F:A1:98:1E:C9:FC:09:6C:E5:00:64:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/70418446-b5d3-39b8-8c31-744219d6717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:7d:74:b1:f1:ad:82:0a:8d:f4:2c:c7:bd:bc:4a:a8:a5:
         f1:a9:8b:3f:9f:0c:7d:f0:2f:9f:b8:2a:5d:44:61:9f:15:0b:
         ea:2d:50:9b:d3:49:2e:4e:9b:18:4f:f4:bf:3d:c1:40:f8:c0:
         71:2d:00:a4:73:b7:70:b5:38:2a:d8:41:90:fb:99:54:81:81:
         85:16:ab:45:3a:7d:eb:a1:b4:7e:65:a8:69:c8:a8:e3:24:52:
         bd:15:b2:be:fb:f8:b4:ec:89:ba:48:6e:44:48:46:13:46:3f:
         80:2b:ac:70:24:4f:ed:d2:72:99:c6:0c:08:3a:0a:52:60:88:
         cd:45:02:d3:ea:0f:29:db:77:ce:ed:ee:ae:14:62:96:19:d6:
         ee:00:49:21:cb:39:be:ac:97:08:b8:d5:e2:bf:fc:2c:6f:ee:
         d3:9f:5f:56:e4:98:69:c9:54:23:a4:26:f9:b5:e5:23:91:65:
         b9:dc:e7:f7:dc:81:37:ac:88:5c:4e:d2:ab:56:c7:ed:59:51:
         71:e0:01:39:ea:9b:d9:a7:bc:ea:e3:75:46:46:73:fc:50:97:
         03:01:d9:7a:1e:6c:02:5d:22:ec:e1:e5:01:3d:49:bf:2b:fb:
         5c:79:b4:53:7e:f1:63:8b:b6:1d:2f:26:bc:b9:fa:72:2b:f9:
         fc:89:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:24 2025 by rpki-client