Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e34d7d3-73b6-3e28-a222-c5260ddcbfac.roa
File:                     8e34d7d3-73b6-3e28-a222-c5260ddcbfac.roa (raw, json)
Hash identifier:          +nibhAMsjJgP9KkCQJU357lP1xcSwgx9tqRC5XXh5TE=
Subject key identifier:   D0:C4:DB:14:61:23:DC:C6:95:D8:43:6C:E4:95:D8:2F:D7:3D:32:29
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F49746974FC54707F3F739500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e34d7d3-73b6-3e28-a222-c5260ddcbfac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        24.102.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:69:74:fc:54:70:7f:3f:73:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b01eb82-f555-4bdf-b0f0-84002ab35cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:9f:d4:40:b2:e3:9d:56:bd:8d:a9:d8:36:
                    f9:fb:7e:d5:de:46:a7:be:71:75:1c:b8:5a:dc:a8:
                    64:3f:89:52:03:06:3c:ec:e3:21:ba:6b:84:17:96:
                    c9:40:71:6c:72:38:07:51:f7:f3:5a:cc:36:bb:84:
                    29:81:5d:ae:48:57:01:fb:55:44:24:b6:8c:ee:be:
                    db:ac:4a:17:bd:17:d4:1f:78:15:85:08:ce:6b:ba:
                    bf:d5:54:ec:9c:df:b7:2d:71:f5:ec:94:b0:14:ab:
                    74:e0:14:1b:51:e1:05:1d:e4:e5:01:df:9a:c7:80:
                    9e:3a:4a:ef:dd:a6:da:5d:46:e7:2e:41:5d:1c:fc:
                    8d:c6:02:7f:2d:3b:5a:a4:8b:41:7d:71:6f:23:70:
                    0f:a4:7a:03:22:44:bc:df:56:53:1f:ae:34:a1:51:
                    68:c2:57:3c:da:1b:7e:44:f2:1b:5e:97:ab:16:b8:
                    b6:65:6c:1d:89:86:2a:e5:3d:91:7d:73:fd:95:0f:
                    8b:95:7f:11:22:53:7a:34:3e:66:cc:02:e9:fa:6f:
                    97:66:ef:8b:81:35:d4:b2:8d:ad:11:39:6c:f8:b2:
                    1b:d4:e7:97:48:a8:a4:4f:13:20:cc:f7:38:cf:e2:
                    da:ae:b6:09:a2:1e:74:91:96:ca:49:5b:d7:36:bf:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C4:DB:14:61:23:DC:C6:95:D8:43:6C:E4:95:D8:2F:D7:3D:32:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8e34d7d3-73b6-3e28-a222-c5260ddcbfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.102.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:9a:91:03:2f:bd:02:f2:a9:7b:e6:71:c5:3e:9d:a1:ed:
         98:11:91:cb:78:34:cf:8c:a8:da:14:34:00:07:b1:61:d4:e4:
         f4:2d:db:12:61:b0:75:b7:ca:8f:df:40:30:58:55:bf:c5:1f:
         78:1b:21:05:f2:8a:34:bd:1b:ce:7f:14:23:08:14:e7:67:8d:
         64:95:63:34:51:80:c6:e0:9d:0f:43:98:cf:08:6a:60:1e:2e:
         45:bb:17:4e:d5:33:de:d0:44:73:7a:d9:40:86:2c:ee:08:e6:
         a7:c3:34:64:a4:0b:8d:79:3e:fa:1e:de:a6:77:fe:bf:f0:30:
         c8:9c:62:d5:4c:3b:cd:51:1b:8b:1f:b4:39:c6:99:a3:b2:b0:
         00:e0:e4:f5:9e:b1:d3:66:e5:65:e0:49:56:7e:61:65:7a:6a:
         39:3b:f1:10:10:05:a1:8b:0d:e2:d1:9b:96:1b:1b:10:9b:b1:
         86:c0:c4:13:11:d2:7c:bf:5a:75:3d:c1:dd:bd:cd:42:b3:7a:
         e0:b6:d4:2e:b3:79:e3:fe:f1:16:70:37:f0:bf:f8:0b:1f:11:
         ff:39:f1:56:0f:66:92:ce:41:75:71:23:28:6b:6c:9b:fa:44:
         ee:9c:d6:b3:3b:85:1d:e7:bc:92:5c:41:7e:95:42:cd:43:d8:
         53:13:ac:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGl0/FRwfz9zlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2IwMWViODItZjU1NS00YmRmLWIwZjAtODQwMDJhYjM1Y2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbif1ECy451WvY2p2Db5+37V3kanvnF1HLha
3KhkP4lSAwY87OMhumuEF5bJQHFscjgHUffzWsw2u4QpgV2uSFcB+1VEJLaM7r7b
rEoXvRfUH3gVhQjOa7q/1VTsnN+3LXH17JSwFKt04BQbUeEFHeTlAd+ax4CeOkrv
3abaXUbnLkFdHPyNxgJ/LTtapItBfXFvI3APpHoDIkS831ZTH640oVFowlc82ht+
RPIbXperFri2ZWwdiYYq5T2RfXP9lQ+LlX8RIlN6ND5mzALp+m+XZu+LgTXUso2t
ETls+LIb1OeXSKikTxMgzPc4z+LarrYJoh50kZbKSVvXNr+YGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDE2xRhI9zGldhDbOSV2C/XPTIpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGUzNGQ3ZDMtNzNiNi0z
ZTI4LWEyMjItYzUyNjBkZGNiZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGGZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+LmpEDL70C8ql75nHFPp2h7ZgRkct4NM+MqNoUNAAHsWHU5PQt2xJh
sHW3yo/fQDBYVb/FH3gbIQXyijS9G85/FCMIFOdnjWSVYzRRgMbgnQ9DmM8IamAe
LkW7F07VM97QRHN62UCGLO4I5qfDNGSkC415Pvoe3qZ3/r/wMMicYtVMO81RG4sf
tDnGmaOysADg5PWesdNm5WXgSVZ+YWV6ajk78RAQBaGLDeLRm5YbGxCbsYbAxBMR
0ny/WnU9wd29zUKzeuC21C6zeeP+8RZwN/C/+AsfEf858VYPZpLOQXVxIyhrbJv6
RO6c1rM7hR3nvJJcQX6VQs1D2FMTrAA=
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:53:35 2026 by rpki-client