Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8899cfc7-59a0-302e-92ab-8aced32e5683.roa
File:                     8899cfc7-59a0-302e-92ab-8aced32e5683.roa (raw, json)
Hash identifier:          184Hsd22KZ+o3KAXnI2z06IDtGCCJN6+hMbV1rwEzMM=
Subject key identifier:   BD:EC:0E:1E:27:0A:03:86:C5:86:EC:C4:4D:F7:18:23:6D:90:54:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF081F5A99CB0AD255180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8899cfc7-59a0-302e-92ab-8aced32e5683.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        70.61.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f0:81:f5:a9:9c:b0:ad:25:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d9413e17-9afa-4e1a-9f2d-3c835a192419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:93:f4:92:50:ba:34:08:17:d1:d4:6c:f9:
                    77:21:66:27:1e:b2:ec:15:8a:28:14:e3:fb:7c:db:
                    ee:83:f4:a1:1c:e7:a7:68:d1:5f:5a:74:4f:b6:ad:
                    21:50:d1:4c:94:c3:55:aa:bf:c8:2d:68:15:03:76:
                    da:b2:d8:59:82:75:48:de:c4:44:01:ea:33:4b:61:
                    2e:eb:6b:cd:aa:62:78:ed:3d:a9:b7:21:57:f6:84:
                    52:b2:cb:63:3e:7a:4e:a0:55:d9:66:16:28:c3:1d:
                    a5:81:03:0f:c6:57:88:83:1b:8a:9b:19:44:2b:3a:
                    69:36:9e:46:7b:58:a2:6c:b9:88:8c:e5:6f:b6:ac:
                    5f:d2:08:00:18:65:2e:e6:c2:63:88:58:41:f8:4e:
                    d8:cd:d4:1b:65:d9:c0:c1:39:ab:cb:d4:45:e4:bb:
                    9c:a7:c9:9d:fd:ea:88:c8:2c:1c:cf:2f:17:a3:43:
                    78:e9:e8:85:e9:ba:db:d9:e8:8f:8a:ca:db:c4:64:
                    26:fd:fe:d7:1e:09:2f:38:a5:46:9f:a2:ef:53:a0:
                    c1:10:46:62:47:3e:8b:9e:0e:9d:1b:b4:d5:66:02:
                    49:b9:eb:66:29:4b:5c:5c:4b:42:92:20:01:80:0e:
                    4d:0b:b0:b2:af:b8:8d:b6:ed:50:be:ed:c4:21:f9:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EC:0E:1E:27:0A:03:86:C5:86:EC:C4:4D:F7:18:23:6D:90:54:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8899cfc7-59a0-302e-92ab-8aced32e5683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d7:92:2b:fc:41:c8:71:e1:85:f8:1a:7b:cb:64:c1:a4:e4:
         7f:5d:0c:d2:1b:44:01:c2:31:0e:60:2b:cc:0e:5f:20:ff:67:
         7d:46:7d:a4:51:e1:92:0b:50:a5:55:f7:19:8e:18:02:e7:79:
         58:be:cc:67:e7:ec:99:d6:b7:ed:f7:45:10:07:df:2f:5a:d2:
         2f:57:3e:d0:5a:0d:12:6b:55:71:4f:93:04:58:b6:2a:54:f7:
         d7:65:40:5f:17:51:b5:78:cd:1b:5e:9f:f1:c6:dd:ff:dd:06:
         af:e0:80:da:a1:fc:29:fb:3b:98:c6:4d:20:cf:d6:fe:a8:72:
         d1:60:36:f9:fd:6c:25:e8:d3:0f:de:74:47:f9:a3:ff:2e:93:
         8a:77:67:f6:3a:39:cb:5a:1d:23:ae:b8:12:7f:02:bc:ad:b2:
         8e:16:21:58:88:94:03:ac:64:a9:0d:ee:0c:b6:69:ab:d9:9b:
         e9:06:2d:64:6f:b5:07:ab:bb:56:57:e4:18:f1:42:e5:bc:82:
         aa:fa:2b:37:07:e1:8b:7f:0c:cb:91:46:d6:a5:79:e1:ce:9d:
         0d:a6:98:aa:9f:98:a3:86:0b:83:43:04:ec:56:67:f7:18:3f:
         18:ee:67:1f:36:d6:6b:2d:a3:4f:2e:7f:8a:4b:eb:d6:1e:b0:
         2d:7a:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:21 2025 by rpki-client