Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa
File:                     89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa (raw, json)
Hash identifier:          ZuuAlImlgnVUt+G/edMGcjVTg8AaZkqrYO/PeO8WaJU=
Subject key identifier:   CD:4C:09:F6:DB:4A:2C:6D:97:32:63:1C:36:B8:E3:E1:07:CB:5A:CD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA7C02BA79CC80EE0D480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        66.68.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a7:c0:2b:a7:9c:c8:0e:e0:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ce353468-02fe-461f-a57a-5639cf50c8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:46:9c:9d:7a:27:e0:40:0b:cc:ad:d9:17:
                    e6:00:5d:4c:06:b5:7a:d2:28:e5:e5:e0:ce:07:14:
                    8d:f4:05:ce:07:e1:49:72:5a:d4:27:54:f0:d9:38:
                    61:c7:68:04:eb:82:43:67:0d:74:0a:9f:ac:3a:32:
                    17:7c:75:76:14:60:b4:74:09:13:86:ff:ea:bd:c3:
                    f2:58:da:9a:2a:6f:39:d7:92:06:4e:96:6c:e1:84:
                    c0:f6:4a:79:ea:06:e4:38:0e:54:f7:c4:b3:e9:e9:
                    be:39:89:8d:ca:57:f2:bc:b2:cb:1a:df:5e:1e:58:
                    58:0c:1e:a4:15:41:3e:fd:56:71:f6:4e:4f:39:35:
                    7e:43:26:48:05:34:f0:b3:4c:b7:97:86:20:7b:98:
                    dc:03:29:36:75:69:02:2a:49:77:74:79:49:35:9d:
                    7a:45:27:8d:d4:93:15:78:44:6e:1a:ad:20:00:bb:
                    42:5b:da:a8:af:b9:76:b1:59:b4:7f:0d:28:5d:83:
                    fd:db:4a:51:e4:7c:05:9f:34:9d:89:7f:5c:3a:11:
                    ec:02:09:84:51:48:56:e9:c3:aa:e6:56:56:a8:c5:
                    5f:67:33:30:0f:8b:3b:5e:a4:9a:c7:ff:4c:25:c9:
                    70:ce:c1:8f:3c:7d:4e:69:19:d6:55:e8:02:57:0a:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:09:F6:DB:4A:2C:6D:97:32:63:1C:36:B8:E3:E1:07:CB:5A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89538b38-2fe8-3ff2-a454-9da0a03ae9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.68.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:12:9f:9a:35:a0:ea:72:9f:ab:26:38:63:b8:f2:7e:05:
         21:e1:79:b3:97:8a:a0:43:61:81:8a:3a:1a:35:1c:1e:a2:1b:
         31:bd:1a:9b:6b:f7:47:f5:c2:59:42:3c:d5:66:09:16:da:2c:
         f4:63:71:79:7a:3e:3a:59:08:cc:e6:ea:a7:0a:ad:9e:57:95:
         df:15:41:02:a8:ab:a1:3f:c8:db:1b:d9:6a:4c:7d:f6:e7:af:
         33:d5:a6:49:71:a2:f0:df:a5:78:5e:2c:9e:b9:c1:da:49:60:
         bc:5b:a7:02:ca:4e:e5:19:a2:2e:19:0d:8a:7d:50:71:df:a1:
         9f:a9:60:80:31:69:a6:77:d0:b8:2d:25:eb:60:b6:fe:f7:3e:
         49:46:1d:e1:f7:2d:d6:91:06:1d:39:b3:a2:db:c0:a5:4a:b3:
         11:34:fe:9d:76:7d:8b:39:ee:c7:49:c9:05:8e:02:8e:3a:41:
         49:85:3a:fd:9d:05:1f:d2:39:b2:70:d3:c7:22:7b:f0:ec:21:
         89:ad:0e:8c:73:12:85:2f:14:38:08:4f:ac:a2:59:6d:d5:40:
         40:c9:c1:6f:9a:b3:16:82:c9:6e:0d:d1:5e:6a:16:50:16:d5:
         0d:f7:0d:1c:1c:e5:f6:88:6c:c4:06:bf:27:5a:3d:0a:1d:f9:
         fa:c7:d8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:49 2025 by rpki-client