Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
File:                     7f2d1f41-a628-3634-bde1-7eeda4689406.roa (raw, json)
Hash identifier:          HkwyAJAlhNI+rTNxllo/3J80ozoHoOGExdhRmM5LrCs=
Subject key identifier:   0F:10:4B:06:91:B0:DB:BF:20:0C:9C:EF:2C:A3:1B:53:30:24:BB:2F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F5768303455990D3286382780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        198.20.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:30:34:55:99:0d:32:86:38:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=6e336c20-b78c-4a4e-9b43-0f634ede1b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:03:e1:c0:5b:d5:d8:50:d0:c4:93:4d:bf:9b:
                    f7:af:c2:a5:45:b8:0e:f2:9f:b6:d5:7e:d3:de:c2:
                    94:7c:be:c8:52:d6:0d:e3:d5:f4:0c:c9:17:a2:83:
                    34:df:12:63:97:38:71:8a:db:84:1d:56:90:32:7c:
                    cf:20:e8:d9:a5:01:01:95:df:01:d6:5f:c1:40:cc:
                    23:48:42:3d:47:7f:6b:cc:16:93:14:e7:0f:74:d1:
                    c5:7a:e2:f6:e4:ac:d1:3c:2f:69:67:78:f1:67:3e:
                    e6:3c:81:9a:a5:45:47:93:05:7c:df:18:32:27:7a:
                    68:0e:8f:32:af:fa:5a:8b:59:fc:1b:fc:8f:a1:cf:
                    21:4b:77:9e:24:26:0d:9a:1b:53:9c:0c:f7:2e:29:
                    d2:92:ad:af:be:d0:e8:e9:ef:81:10:36:a6:f1:34:
                    94:c2:61:ea:c0:e4:70:d3:fe:5a:05:1e:4d:44:5e:
                    66:a7:d3:e1:96:70:94:00:f5:0f:4f:14:1b:6f:96:
                    2d:c2:af:83:1d:d7:a3:d1:41:76:5a:3f:92:40:1f:
                    18:95:8c:2a:3e:8b:a2:a4:62:0e:28:5d:30:ec:75:
                    e1:32:7c:99:4e:96:88:08:1f:6b:d0:4d:eb:be:44:
                    07:74:21:09:6d:fe:25:83:76:e1:15:52:3f:b9:ad:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:4B:06:91:B0:DB:BF:20:0C:9C:EF:2C:A3:1B:53:30:24:BB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:76:28:3d:f6:e8:43:55:69:b1:6d:1c:a8:a7:c3:bb:77:be:
         c9:9b:37:03:21:20:e4:aa:74:14:90:5a:40:3d:20:c5:f0:3b:
         9c:23:e0:14:43:44:b3:d5:5f:58:4a:19:d2:89:cc:c7:00:52:
         a8:06:40:d7:53:2f:3c:63:ee:23:ca:2e:5f:64:c6:5d:2e:09:
         41:07:d9:d7:12:7b:b7:ab:fc:c7:d0:60:ed:c7:e8:28:4a:39:
         aa:47:5c:91:84:2d:28:c7:f6:30:7b:08:2a:9a:a6:3f:69:2c:
         f6:da:17:66:c4:36:bc:fe:45:bc:1c:8f:4b:8c:74:62:dd:14:
         6a:9a:7b:bc:52:d8:82:e2:ed:d5:31:b6:0d:af:7f:55:b9:38:
         bf:79:1a:2f:5c:6a:cc:ae:df:92:06:64:34:79:67:b6:9f:36:
         48:ec:74:0a:ca:a7:ea:2f:1d:4a:d3:c6:e3:0d:67:d1:e8:34:
         85:1b:0c:81:93:25:a4:69:04:b1:a0:d5:bc:e9:66:9c:60:72:
         22:b5:4e:ed:52:41:be:f3:78:02:05:b3:ee:cc:64:b0:4d:56:
         19:39:50:77:cf:f2:14:8d:00:c6:2b:2a:a9:90:f9:73:bb:ed:
         05:dd:f0:fa:ff:11:87:66:29:c1:7f:50:40:df:ad:95:17:f4:
         ed:07:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:51:10 2026 by rpki-client