Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8acf1ec1-9e0b-3920-9186-8d07c6c474de.roa
File:                     8acf1ec1-9e0b-3920-9186-8d07c6c474de.roa (raw, json)
Hash identifier:          Qp/LYvbCt77V5CSvU46Oad70v+3XHeqOHlIAwu7ShxA=
Subject key identifier:   E3:77:75:72:8B:67:BD:DD:A0:3D:19:31:A7:96:78:05:05:60:86:AB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA7515FF37C6D680072980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8acf1ec1-9e0b-3920-9186-8d07c6c474de.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        74.219.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:75:15:ff:37:c6:d6:80:07:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d793e2e9-051c-4630-b52f-efac3c31c398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:6a:0c:a8:35:df:16:00:cc:ca:8f:b2:33:
                    38:66:8e:b8:7d:d8:cd:e8:08:75:75:5a:63:49:a8:
                    74:61:b4:dc:d0:ed:89:b9:06:ed:d4:03:24:f4:43:
                    ad:d8:6d:06:76:bc:e8:a6:66:70:67:4c:f3:d1:db:
                    12:7a:e5:19:c4:7f:a1:3d:5f:2d:4b:d3:54:ff:96:
                    f7:2a:94:fb:d2:ca:0c:1d:55:fb:d0:a7:d5:e4:fc:
                    f7:86:48:d5:bb:b4:6c:eb:ed:7e:4c:ed:f0:b7:84:
                    b5:ee:3c:80:83:c6:6c:3e:24:d7:17:0f:e2:6d:e6:
                    15:c0:a7:5f:50:91:6e:5b:8e:3e:19:6e:39:29:0a:
                    85:3e:9f:d9:05:47:5e:0c:34:ad:d0:2e:db:e1:c8:
                    74:02:d4:ba:b4:61:6d:2d:df:08:51:b1:23:0d:e5:
                    2b:a4:1d:8f:f2:c0:6b:57:2b:04:6a:66:05:04:fc:
                    27:89:88:85:50:dc:4f:ea:2e:00:15:d1:77:1e:49:
                    44:8d:9d:f9:73:0b:3b:a1:42:d3:f0:25:eb:21:3c:
                    b9:a3:1f:02:14:7f:80:53:f3:78:19:ab:ab:c5:e2:
                    75:d9:67:c1:3f:9a:78:bd:bc:04:85:c6:9a:3b:16:
                    68:4d:03:57:a2:aa:b8:00:6f:61:44:16:16:b5:09:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:77:75:72:8B:67:BD:DD:A0:3D:19:31:A7:96:78:05:05:60:86:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8acf1ec1-9e0b-3920-9186-8d07c6c474de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:bb:1f:50:cd:90:91:c1:33:5f:aa:f0:da:5f:0d:a2:c8:
         00:b4:ea:fb:f6:29:37:1e:96:c6:74:1d:67:f0:14:36:67:a7:
         e1:8a:0d:c0:8f:4c:33:f3:a5:82:ab:e9:9d:76:c1:c6:1e:9a:
         dc:92:da:52:cf:1f:22:97:0b:f3:af:7c:90:09:cd:7b:d2:dd:
         d3:66:50:18:dc:9a:4f:fd:86:d8:55:b3:6a:73:67:46:f3:06:
         9f:29:fc:e6:d2:5c:f6:1c:aa:62:03:23:0c:0e:6d:4b:20:00:
         99:98:a2:eb:46:3f:85:8c:8f:07:38:a0:94:9e:c2:17:97:21:
         4d:86:c6:48:63:10:e6:f1:43:69:43:ae:8a:e4:67:f8:e6:f9:
         73:89:97:d2:66:d9:b1:7c:2e:c8:fc:fb:b3:b7:ee:01:d8:2d:
         a3:b9:4f:50:87:15:a4:b2:d9:20:47:67:ef:f1:db:38:e6:31:
         26:e4:24:f2:49:38:ef:e1:36:f3:df:66:63:2d:77:91:05:dd:
         a7:2f:58:19:57:8f:30:36:54:68:01:57:8e:94:f1:80:10:e8:
         8e:30:0b:f4:49:1e:7b:6d:4b:ec:01:e0:f5:42:a0:09:32:a1:
         b1:d0:8e:dd:06:92:4f:80:8c:17:f2:ae:98:83:12:0d:7a:46:
         3b:14:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:05 2026 by rpki-client