Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7161eba0-1f55-3a21-94ee-c6f6af2349e5.roa
File:                     7161eba0-1f55-3a21-94ee-c6f6af2349e5.roa (raw, json)
Hash identifier:          9cGL7gKcEnJP2yNYTUj/AfKb+ujdlNx47LJCRsg9w7w=
Subject key identifier:   37:53:BB:0C:11:89:BF:EB:50:94:95:11:F2:15:4C:32:44:F5:2E:DF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF3974854667E06660A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7161eba0-1f55-3a21-94ee-c6f6af2349e5.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        76.89.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f3:97:48:54:66:7e:06:66:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0404d62c-72bb-4273-ab8d-623e5d175c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:a3:b8:aa:0a:0e:a2:89:d8:05:30:5c:b1:
                    22:50:2b:75:20:22:95:f9:49:d7:0d:77:51:86:26:
                    e4:9a:13:d6:8e:4f:80:f5:92:c7:14:fd:7e:b7:c0:
                    fb:98:50:e2:d3:c4:63:36:0f:0f:a7:ff:ec:57:9b:
                    3c:c6:40:7e:96:21:74:bc:73:ad:86:51:91:0b:3f:
                    56:fe:1c:84:55:57:b3:67:7a:8b:0f:22:75:c5:1d:
                    b3:0f:40:c1:90:1c:00:1e:cd:9f:3c:8b:bd:be:8d:
                    14:0a:9c:91:10:e7:87:6f:de:b6:18:86:91:77:c7:
                    a0:90:79:41:df:26:5d:ae:44:80:67:4e:8e:93:77:
                    2d:c7:a9:1c:a7:04:13:2c:d0:79:f2:09:f6:4f:1b:
                    e8:98:c0:15:ae:98:0a:6c:9c:8b:a7:95:a4:5b:7f:
                    78:65:4f:5c:ea:c3:0d:b4:15:28:9a:0d:52:bd:59:
                    f2:15:e3:e8:3f:3a:5d:56:6c:10:d2:a1:bb:69:e9:
                    57:1e:bf:09:b8:a0:8e:22:71:cb:32:41:2b:4e:44:
                    19:f5:1f:9f:52:d5:ff:97:55:ec:2b:8a:a5:70:4d:
                    a3:76:1a:d4:1f:a9:10:96:bf:63:80:4b:dd:cb:23:
                    cf:68:cb:b7:3e:d9:f0:99:2a:81:fd:ee:fd:03:0b:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:BB:0C:11:89:BF:EB:50:94:95:11:F2:15:4C:32:44:F5:2E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7161eba0-1f55-3a21-94ee-c6f6af2349e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:da:fc:6a:9b:ab:d3:20:03:7a:f9:c1:f1:df:6c:08:2e:
         56:32:62:91:fe:51:3a:5a:6a:91:5f:7e:c7:55:3b:fa:3d:36:
         49:d3:ff:cb:91:bf:3f:13:7e:d0:85:e7:57:6b:40:f4:80:7e:
         c2:da:42:62:c5:c8:dc:dd:6e:29:80:f1:26:37:ae:6d:45:76:
         48:6d:93:8a:3d:80:92:64:77:f0:c6:d2:7d:e7:84:5d:25:df:
         a3:9a:49:dc:08:7e:a8:56:9a:cf:c0:1c:4e:b1:7b:a4:45:cf:
         2d:7c:6d:93:42:24:da:02:51:e4:84:86:f1:3c:63:25:3a:6f:
         73:d6:d1:b1:f7:34:99:0d:d7:78:39:f5:ab:08:2e:ef:24:f2:
         c6:9a:33:e0:d3:54:8e:22:fe:d4:cb:cc:94:ad:5c:a7:62:20:
         c0:10:df:3e:d5:df:ef:75:1d:d6:92:cb:06:2d:3c:fe:4b:86:
         b3:60:1a:31:13:35:f8:3a:32:8f:66:61:3c:1f:ce:31:41:74:
         de:6a:61:ab:88:07:3a:00:1f:1c:47:23:52:21:a1:8b:b3:c6:
         9a:41:fb:0e:03:28:78:4b:cf:b3:50:60:1e:17:d0:36:d3:71:
         c5:41:6a:14:36:6c:25:bd:0a:4c:ab:7f:f9:58:14:20:7c:9d:
         db:e8:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:24 2025 by rpki-client