Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a097672-92e8-37ad-be46-24ab5a1f9aee.roa
File:                     8a097672-92e8-37ad-be46-24ab5a1f9aee.roa (raw, json)
Hash identifier:          vrjhTXUrsP0i7S5Cttw/EO3kEwGCNDy9Vjznpb84wVc=
Subject key identifier:   87:EB:2D:6C:76:3E:5A:04:12:37:DC:37:4F:39:1D:C4:A0:53:53:F9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE03AD45280E5B2B016E0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a097672-92e8-37ad-be46-24ab5a1f9aee.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.167.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e0:3a:d4:52:80:e5:b2:b0:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2af344d8-a391-459b-8ea5-7c6263a7e98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:ab:44:8e:62:46:d8:4a:b9:bd:5f:65:1b:
                    1f:8b:61:f3:09:d5:64:27:5e:2d:c9:51:4d:9f:c9:
                    90:2e:f7:5e:fd:0d:81:7d:ea:ea:05:39:01:2b:fb:
                    aa:a7:60:0c:53:b5:eb:48:78:2a:d5:61:1d:a0:5d:
                    a2:86:a2:85:9c:63:a3:35:3a:46:15:18:02:a0:12:
                    00:51:29:32:66:d9:dd:06:07:de:e2:b9:6e:0c:48:
                    f4:61:e0:ac:d7:8a:5b:72:71:34:34:d0:5e:a6:d5:
                    4d:43:ef:cd:6b:c8:42:42:b2:ff:f6:9a:5f:8c:b2:
                    dd:d3:b7:e3:85:03:ec:69:cb:2b:32:b5:d5:ea:f7:
                    82:e3:17:1f:af:05:5f:d6:a1:5d:68:7f:fb:0c:77:
                    ad:0e:ae:0d:d5:7a:1e:73:43:b0:1c:62:b3:17:1b:
                    78:a3:80:6c:d2:0f:a3:65:44:ea:10:fa:89:0c:ec:
                    40:87:cc:6d:e5:88:67:55:3b:06:ec:eb:17:9b:71:
                    ea:fd:d6:f7:f6:17:d2:54:e5:9b:a4:d7:a9:1e:57:
                    2f:7f:fa:04:3b:d1:9c:7b:f0:1e:e8:f9:cb:1f:d6:
                    66:65:b3:58:e8:fb:3a:ec:c0:a5:6e:e7:a0:2d:3e:
                    2b:85:b4:78:cd:bd:b9:bf:c1:05:4f:8d:70:fd:c3:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EB:2D:6C:76:3E:5A:04:12:37:DC:37:4F:39:1D:C4:A0:53:53:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a097672-92e8-37ad-be46-24ab5a1f9aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.167.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:c5:93:43:9c:1e:a5:85:24:48:8b:5a:b1:39:ad:97:98:
         6b:56:1e:eb:13:83:37:04:de:1b:48:56:d0:a7:33:39:6e:f7:
         aa:9b:ca:fb:5a:59:f4:16:b1:a4:5f:73:bd:a7:0e:9e:39:44:
         0b:cf:58:c1:1b:de:43:ba:9e:fa:08:cb:38:d1:97:d2:42:32:
         3c:63:d8:88:20:47:57:43:4b:50:2e:ea:18:22:db:2b:43:26:
         57:87:22:c5:60:41:a7:c0:e6:5a:c8:84:06:a9:a3:25:73:ec:
         39:f1:2e:c2:3a:23:52:23:4c:bc:57:86:0b:ac:7d:b3:f3:48:
         a7:57:9a:88:f7:66:6a:4b:a9:76:66:b2:53:39:09:dd:c7:d7:
         60:10:5c:c4:e4:6e:7e:86:23:67:6d:5c:a1:77:f7:e9:ec:4d:
         e3:ab:91:80:d9:f7:31:89:68:60:7d:42:07:35:a5:54:68:e4:
         b1:59:bf:67:d4:dd:3e:6f:86:a9:74:0f:1b:8c:e5:82:ee:2f:
         9a:27:ac:fe:f7:51:1e:82:69:c2:63:7e:0e:c8:b7:1e:92:72:
         16:59:36:67:0f:eb:e0:b2:ca:20:29:f4:40:9e:fc:de:26:08:
         a3:d5:af:e8:3b:92:85:46:23:09:d2:01:51:7c:d1:98:c4:62:
         9f:e1:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:21:09 2025 by rpki-client