Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/937cf034-c00a-39e4-9695-19f29b3af2a5.roa
File:                     937cf034-c00a-39e4-9695-19f29b3af2a5.roa (raw, json)
Hash identifier:          QrSEfp9I3tUYLtmi1GKZCkuxNXIQv0igc2Qjwn7xI44=
Subject key identifier:   5A:62:B1:DF:4A:8E:65:AD:E5:3A:12:20:5C:91:A0:04:BD:D8:78:EB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA9FF67C332927E0380800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/937cf034-c00a-39e4-9695-19f29b3af2a5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33363
IP address blocks:        24.123.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:9f:f6:7c:33:29:27:e0:38:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=cc80f14a-aeee-47ae-ad5d-8aecfc536aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:65:5a:d4:cd:e8:b5:50:36:27:c1:6d:1e:
                    8c:e0:bb:93:bb:2a:b3:42:78:24:54:c1:e0:4e:2e:
                    61:cb:6b:87:11:31:73:54:b7:f6:09:c5:ff:b2:04:
                    ff:5c:31:0b:5a:e9:df:a8:0c:08:d2:2d:47:35:b8:
                    5e:02:26:96:7a:cb:ce:07:a3:cd:0c:40:75:c9:3d:
                    55:b1:3a:aa:35:e2:cf:85:f8:4d:e9:0b:7c:e8:ad:
                    88:ed:68:6f:66:5b:5a:df:82:f5:f7:9a:55:34:40:
                    79:b2:c5:8d:f7:a0:f9:b7:0e:6e:52:bd:fc:24:7b:
                    ed:45:66:7c:68:ce:5d:ca:2a:29:c2:7e:a1:58:d2:
                    a7:3e:72:be:11:ab:75:b4:49:00:7c:49:67:0e:ae:
                    a3:5e:05:8e:82:b9:f6:0b:ef:3c:ba:31:b0:9b:b3:
                    0c:ba:40:c6:4e:c3:84:c5:5e:28:c7:cd:1f:17:51:
                    80:9b:88:e9:db:a3:12:a5:69:c6:57:07:b7:d9:69:
                    55:3a:b3:52:67:dd:fd:4c:36:6e:31:ff:5c:e5:8d:
                    1c:d2:7e:43:cd:7a:5d:5c:f9:95:d9:e6:92:da:e0:
                    58:5e:b3:61:14:d0:33:09:51:ed:45:2f:98:da:40:
                    20:86:6a:4f:47:bb:3e:fe:ee:64:60:94:ec:61:db:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:B1:DF:4A:8E:65:AD:E5:3A:12:20:5C:91:A0:04:BD:D8:78:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/937cf034-c00a-39e4-9695-19f29b3af2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:7f:2f:18:20:dd:c7:d2:01:0d:dc:a3:ff:fd:1e:ef:79:
         f7:6b:46:5b:e5:59:82:35:12:82:01:29:37:1d:9c:4c:25:f3:
         cd:72:c4:5d:e1:15:5d:2c:6a:cc:34:8d:ed:78:e3:58:1a:f1:
         63:42:70:f8:b3:aa:89:48:0f:2f:77:0c:dc:cf:21:e5:fc:63:
         15:5c:cb:01:67:c2:71:02:56:b9:10:b8:42:0f:07:79:dd:c7:
         a3:56:bb:5c:d4:45:bd:c4:63:66:e4:0e:76:64:58:71:ec:76:
         46:8b:28:df:51:66:b9:37:e1:2b:0a:6a:b2:45:f9:7c:7b:ea:
         30:45:d9:86:8e:ca:d1:72:6f:c7:44:01:36:e3:9d:ee:10:5e:
         a7:8e:5a:10:b7:05:2a:c6:cd:63:e5:ec:aa:70:cf:4f:34:a9:
         2a:2b:2f:11:74:c6:47:55:ab:33:64:9a:b7:b5:15:90:d1:12:
         d0:5e:4c:b9:1e:96:50:e3:91:37:a2:71:39:76:1b:72:d3:97:
         e7:9a:4b:b4:6d:0e:ab:ff:d9:1f:ff:6b:f5:df:22:b3:1d:88:
         75:12:c6:0c:6a:11:96:25:24:03:ff:46:4a:68:79:f5:99:c2:
         11:15:32:13:7d:8e:21:7a:ba:be:0d:bd:d4:5e:36:1d:78:83:
         8b:56:25:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayp/2fDMpJ+A4CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
Y2M4MGYxNGEtYWVlZS00N2FlLWFkNWQtOGFlY2ZjNTM2YWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWJlWtTN6LVQNifBbR6M4LuTuyqzQngkVMHg
Ti5hy2uHETFzVLf2CcX/sgT/XDELWunfqAwI0i1HNbheAiaWesvOB6PNDEB1yT1V
sTqqNeLPhfhN6Qt86K2I7WhvZlta34L195pVNEB5ssWN96D5tw5uUr38JHvtRWZ8
aM5dyiopwn6hWNKnPnK+Eat1tEkAfElnDq6jXgWOgrn2C+88ujGwm7MMukDGTsOE
xV4ox80fF1GAm4jp26MSpWnGVwe32WlVOrNSZ939TDZuMf9c5Y0c0n5DzXpdXPmV
2eaS2uBYXrNhFNAzCVHtRS+Y2kAghmpPR7s+/u5kYJTsYdt5RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpisd9KjmWt5ToSIFyRoAS92HjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTM3Y2YwMzQtYzAwYS0z
OWU0LTk2OTUtMTlmMjliM2FmMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHvTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLMfy8YIN3H0gEN3KP//R7vefdrRlvlWYI1EoIBKTcdnEwl881yxF3h
FV0sasw0je1441ga8WNCcPizqolIDy93DNzPIeX8YxVcywFnwnECVrkQuEIPB3nd
x6NWu1zURb3EY2bkDnZkWHHsdkaLKN9RZrk34SsKarJF+Xx76jBF2YaOytFyb8dE
ATbjne4QXqeOWhC3BSrGzWPl7Kpwz080qSorLxF0xkdVqzNkmre1FZDREtBeTLke
llDjkTeicTl2G3LTl+eaS7RtDqv/2R//a/XfIrMdiHUSxgxqEZYlJAP/RkpoefWZ
whEVMhN9jiF6ur4NvdReNh14g4tWJeI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:32 2026 by rpki-client