Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa
File:                     86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa (raw, json)
Hash identifier:          rLsZeaeV6Aziq8OOlWXTCqmO5PCxxRL6GNWEHR5fWnU=
Subject key identifier:   0D:D4:05:39:B0:93:B5:BB:4B:9E:11:C2:D9:DE:30:A6:8C:C7:9D:C4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0A8B1CC5AEEF09E45B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14065
IP address blocks:        68.168.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0a:8b:1c:c5:ae:ef:09:e4:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=dac14145-25e9-4919-be45-3432aa8f00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b7:86:52:4e:2b:3e:01:3b:60:3a:5f:83:32:
                    25:90:bf:ae:fa:8e:e8:13:f6:cc:5c:06:73:a0:6f:
                    07:42:1a:ab:16:c3:38:be:88:30:1b:36:a5:31:51:
                    b8:10:f2:69:bd:b2:f9:e1:dc:8a:25:80:fc:45:47:
                    0a:1c:db:69:9f:de:e3:9e:84:ed:0c:f2:0d:94:4d:
                    14:0b:cd:b0:dd:40:66:10:47:cb:8c:24:70:46:85:
                    91:41:ba:7c:97:73:58:74:1d:cf:0f:99:be:26:30:
                    1b:91:67:e4:39:7f:72:c1:ca:7e:69:6d:38:2a:c2:
                    e1:26:db:0e:9d:2b:57:a4:f9:a6:40:56:2c:e1:2c:
                    13:a1:a2:c6:75:49:bf:09:fa:ba:3a:60:18:80:68:
                    d6:39:de:3f:ea:18:ed:41:bb:c5:a3:49:70:72:c7:
                    d4:e0:41:19:fe:74:c6:d2:a0:a3:b1:86:0a:58:76:
                    21:80:f4:58:c7:bf:9d:69:1b:60:8b:0e:e4:7c:07:
                    ae:21:98:8b:c3:4e:8e:8a:80:96:15:78:51:88:0a:
                    9e:ca:82:ba:48:1c:92:b6:fd:81:9e:b3:84:8d:ae:
                    20:11:4d:24:ad:ed:ff:54:d1:4c:1a:ff:6c:ae:e0:
                    29:12:6b:3d:a7:11:17:32:64:49:f1:82:76:68:64:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D4:05:39:B0:93:B5:BB:4B:9E:11:C2:D9:DE:30:A6:8C:C7:9D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86811ef6-fd96-3b5a-8ecb-e3541203a10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:db:54:8d:b8:5a:f8:6e:50:4a:52:75:a5:79:1b:87:57:
         cf:d5:65:89:34:2d:10:1d:83:a0:51:1d:dc:08:30:c2:59:f4:
         6e:3e:84:b1:56:42:8d:ac:47:91:58:48:32:46:da:6e:74:ab:
         cf:38:ca:94:63:3d:d3:9f:74:31:94:7b:eb:0e:15:cf:7f:e4:
         ce:81:af:83:83:ee:e3:ff:a5:ce:e5:ed:59:bb:c3:24:61:37:
         f9:a9:6d:f1:1f:bc:91:3b:90:bd:24:78:9e:52:5f:f6:c6:59:
         3b:76:aa:db:6a:93:19:f8:69:5a:ce:ad:73:a7:bb:0f:7c:bd:
         43:3c:32:7b:8c:7d:01:b3:15:6f:28:2d:7f:6e:8a:a5:b4:ba:
         44:fa:d5:52:5d:5b:4e:4a:ab:2f:af:5a:25:f7:09:48:b7:18:
         47:70:fd:d4:c8:71:0b:85:f1:a3:cb:ee:73:5a:c0:73:57:c3:
         02:2b:e4:db:4a:26:36:4f:b4:2a:9e:8d:48:1a:81:a3:5f:83:
         1f:a7:1c:e3:41:3a:f6:60:01:5d:69:b5:73:a2:a6:05:d5:51:
         6f:59:98:9a:86:2d:53:f9:81:c0:7f:f1:41:76:1c:a4:e3:61:
         b7:4e:09:3e:29:a0:02:3e:a0:6b:c8:d0:34:8b:c3:e5:bf:d1:
         73:72:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:14 2025 by rpki-client