Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa
File:                     83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa (raw, json)
Hash identifier:          3L/dbuC8rYsFqfuk1q7/2Q4Qz6VHAULvohpQDd0+WNo=
Subject key identifier:   5F:C1:7B:77:91:67:2C:4B:EC:E9:99:68:B0:32:B2:02:D5:09:6B:05
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE9BC567981D77710B380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.123.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e9:bc:56:79:81:d7:77:10:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2a2b9d0b-7a68-4212-9d02-46369004fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:0c:e0:29:1a:33:6a:98:29:8a:de:26:ef:
                    68:9a:61:ba:d2:d6:8e:63:2d:e2:5e:09:47:db:bc:
                    7c:4b:97:b4:bb:36:cf:43:b2:45:51:71:4c:3a:f2:
                    86:bd:ef:d8:92:b8:f4:70:f5:b1:57:85:41:ed:3f:
                    8d:94:06:b6:fb:eb:b3:4c:e7:d2:4c:70:17:f6:4b:
                    1b:60:d0:3f:d1:62:e7:c9:81:7c:36:d0:02:f6:5a:
                    b1:4e:a4:ad:47:1f:d3:30:31:e2:56:28:62:e6:e6:
                    22:9e:c0:7d:66:e0:a1:54:08:da:4f:e8:c3:9a:0e:
                    fb:91:a8:3b:3f:39:26:24:af:18:44:e5:92:d0:7f:
                    58:22:c3:1a:e7:d2:96:fd:d0:12:12:e6:be:75:f7:
                    bd:90:d0:a8:de:62:8c:c8:0c:8f:4a:82:80:51:fe:
                    32:59:7c:2e:78:1e:34:b2:47:29:f1:41:b7:83:b3:
                    29:25:ba:63:e1:60:e7:e6:70:9e:85:f7:3e:34:56:
                    53:c6:9a:1a:1d:a9:46:9e:bc:78:fb:bf:19:d1:cb:
                    dd:52:9d:49:71:c5:a0:f5:4a:83:c9:50:d9:d3:75:
                    c5:56:00:b1:95:eb:93:ee:5d:94:52:48:f2:a0:2d:
                    51:8d:b6:29:e2:f4:2f:9c:7e:c8:eb:f5:ee:f3:28:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:7B:77:91:67:2C:4B:EC:E9:99:68:B0:32:B2:02:D5:09:6B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83d4eea2-7f05-3ac4-9b33-522e8f0c63a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:81:fa:e8:6c:e0:32:06:50:81:83:29:57:04:5a:52:49:
         ce:f1:cf:52:41:92:4f:fc:2b:60:7d:f9:5e:6d:33:e4:37:79:
         a5:c0:f0:43:e5:c5:97:17:ab:19:84:3e:a3:d2:b2:e3:4e:ae:
         80:b4:ba:49:8d:f4:ac:f6:dd:0d:e1:11:68:55:2a:88:2a:e1:
         ec:c8:e4:e8:46:dc:bd:b7:84:e3:aa:5a:fb:bb:36:fe:f3:4f:
         ea:a8:56:ee:07:27:94:7e:6c:ab:b5:01:06:02:d8:b3:f6:c2:
         f4:f2:e8:e9:4f:38:4a:7f:37:c4:2f:6c:87:1c:d5:26:a1:ca:
         61:28:35:3f:00:80:e7:68:5e:d1:14:96:dc:08:4f:b5:b0:ad:
         78:95:73:b0:63:4e:1f:9c:8d:3a:73:e4:35:57:76:46:17:b4:
         46:1a:fe:95:65:5d:a4:29:2e:3f:c7:05:16:ea:ee:41:ed:4a:
         4f:fd:72:0e:0e:b3:25:e9:da:1f:4d:45:6a:9d:f8:e2:73:e1:
         e9:95:cd:ef:4e:3e:ce:d0:a4:4b:7a:de:cf:83:db:bd:5b:1c:
         81:ff:1a:19:9c:ad:e0:25:40:85:3b:cc:ab:d1:41:68:de:4c:
         34:8b:0f:cc:70:f4:80:6c:d8:c1:0f:c4:07:64:d7:3e:e0:2b:
         92:14:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:31 2025 by rpki-client