Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93c9f864-5887-3396-80e1-62d2ec4d188a.roa
File:                     93c9f864-5887-3396-80e1-62d2ec4d188a.roa (raw, json)
Hash identifier:          uCaFYeNNM9oDCpUw8JzOkOdBkXAtgz2bYaDsdN+epNA=
Subject key identifier:   60:F8:C7:DA:D5:45:49:BF:52:81:E2:20:98:63:B2:A0:55:A0:18:36
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB40A85A4798BC35E16680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93c9f864-5887-3396-80e1-62d2ec4d188a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33363
IP address blocks:        97.76.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:40:a8:5a:47:98:bc:35:e1:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=208a6e55-e092-440c-bbd1-5f3cee60096a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:3f:a2:e3:56:d1:83:dd:e9:12:01:6c:9c:
                    d1:9e:21:9c:c2:54:40:cd:a5:0a:30:af:ef:14:9d:
                    61:15:fb:81:9c:dd:a2:d0:6e:7a:9f:17:a9:99:e5:
                    b3:95:7e:1b:72:63:6b:35:25:5b:cb:fc:ba:4c:87:
                    e4:b4:27:ea:77:63:b8:ee:8e:40:50:76:64:8b:ed:
                    38:06:c8:7b:2f:74:eb:60:45:7b:3e:38:59:8d:eb:
                    8c:b1:fb:ba:1e:f6:60:3a:2f:09:da:b5:d6:6d:01:
                    8c:d9:ad:ee:6e:4a:3c:b0:53:17:2a:f5:c2:f1:c4:
                    9f:b1:e7:f7:35:2e:06:05:eb:43:d7:07:ff:4a:8f:
                    29:b2:6f:c6:27:10:53:57:c5:f7:11:f1:cd:b2:57:
                    19:f6:8c:ef:7e:b6:ee:1d:84:6f:7b:90:c5:9a:ea:
                    9d:46:5f:ae:bb:44:88:38:dc:4d:db:7b:7e:16:b5:
                    37:2e:31:0e:06:a3:02:b9:de:72:bd:65:76:e4:ed:
                    bb:0e:53:04:2d:41:48:07:ca:90:f5:97:2d:b8:f7:
                    ab:5d:bb:d5:a8:1a:27:5a:b3:d2:df:df:cb:76:55:
                    d9:37:bd:0b:d9:21:49:bd:dc:f2:e6:65:c4:59:ef:
                    d1:ec:00:f7:2c:83:fb:dc:b0:65:90:db:a0:87:d6:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:C7:DA:D5:45:49:BF:52:81:E2:20:98:63:B2:A0:55:A0:18:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93c9f864-5887-3396-80e1-62d2ec4d188a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.76.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:7d:d8:72:11:3f:b6:c2:51:d6:3c:86:3d:ec:10:b1:55:
         37:8c:f5:91:0f:48:18:6e:19:25:b3:dd:5e:da:bf:f1:ab:52:
         d7:10:8d:67:fd:40:c5:84:e6:7f:d9:c2:46:88:02:20:f9:de:
         4d:72:2b:5f:bd:a3:38:e8:e9:34:4f:05:8f:cf:31:02:99:c0:
         dd:fc:84:a3:14:ab:c8:ed:09:50:71:fd:3f:3f:b2:d5:50:a4:
         84:ad:5d:24:d8:f9:26:b4:f2:fc:7d:23:32:f6:e3:00:dd:d3:
         12:75:a7:7d:9b:87:62:5a:0a:8d:ee:e8:f2:7b:46:c8:87:bb:
         6f:fd:4c:99:07:32:c4:37:3e:57:0e:c4:76:43:1a:25:55:83:
         46:28:2b:e0:1f:6e:a4:30:9a:2b:1d:8f:a7:3f:cc:30:86:13:
         e4:8f:2a:d4:a4:37:f7:f1:5e:ad:ad:fa:72:fa:d9:ce:7a:42:
         41:30:38:0f:40:18:a3:3b:c2:42:8e:4d:6b:aa:b0:2f:4e:b9:
         80:42:13:3c:20:4f:96:95:d5:df:05:bf:fa:b4:eb:53:50:c7:
         7c:38:6a:9b:7c:5e:79:59:ba:89:80:a8:63:c1:5a:eb:b2:76:
         27:4a:5b:f3:01:15:84:e2:77:aa:9e:03:11:db:b3:1d:81:2b:
         07:71:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:30 2026 by rpki-client