Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93e91a2f-c077-3101-b24d-91a582d321cc.roa
File:                     93e91a2f-c077-3101-b24d-91a582d321cc.roa (raw, json)
Hash identifier:          0B9/Ly8OKRp9XuWTCE5P17YhIexrsGcQPuL2j9zGZ2c=
Subject key identifier:   EC:AE:F1:08:B5:52:E4:2E:02:B1:A7:DA:99:A3:D1:15:DB:74:E3:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA6516675D4F5A80B2C4A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93e91a2f-c077-3101-b24d-91a582d321cc.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        24.208.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:65:16:67:5d:4f:5a:80:b2:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d99409c5-91bc-41f5-a142-ea99d457e4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:c8:2a:ac:94:6f:04:75:1a:87:8f:9a:b6:
                    6c:18:51:98:76:d9:16:ef:4b:94:94:5d:8e:c5:70:
                    7e:77:4d:5c:e4:04:4a:44:e4:ff:6c:04:9d:d5:a0:
                    bc:70:b9:19:02:57:ac:d3:c1:2b:b0:1f:66:01:51:
                    31:75:38:7e:de:e6:60:ba:01:88:50:04:db:85:4d:
                    35:0b:d2:b9:b0:29:5c:08:1c:de:a1:84:2f:c6:1d:
                    a6:2f:65:4c:ba:7d:25:05:79:ce:0f:c4:36:9d:81:
                    22:0e:08:ce:51:84:13:7f:fc:6a:06:05:c0:03:14:
                    58:28:68:f9:2b:08:1a:59:f1:db:1e:a7:3f:a1:8b:
                    b0:04:c6:ae:f8:a3:55:77:ca:d0:a1:51:1b:59:6e:
                    b8:15:f9:29:5e:8e:b3:47:56:9c:26:12:6b:57:28:
                    8e:1c:6d:14:dd:30:9a:77:12:b1:19:ad:1a:7d:24:
                    49:9f:24:82:1d:0b:fb:eb:29:02:81:b4:31:1e:dd:
                    6f:b5:01:42:16:53:9b:4a:d1:c3:3b:0f:fe:59:7d:
                    37:43:75:44:ab:f2:8f:31:ed:00:f6:3b:f4:fc:2e:
                    e4:a7:d9:72:29:bc:09:da:08:41:f6:d1:de:7c:4c:
                    15:5e:ea:d9:21:65:14:1c:ac:22:f1:05:95:2c:84:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:F1:08:B5:52:E4:2E:02:B1:A7:DA:99:A3:D1:15:DB:74:E3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93e91a2f-c077-3101-b24d-91a582d321cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.208.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:6b:dd:c5:c0:be:a1:1c:ee:0b:94:85:61:80:24:47:8a:
         42:38:6e:5f:ad:1b:3c:1d:9a:6e:7c:dc:fd:09:8a:bf:2b:bb:
         4b:49:40:66:8f:22:61:d9:03:67:3c:7c:3a:aa:1a:0e:c7:99:
         cf:46:25:9c:30:ff:0c:76:40:4b:e9:22:10:74:26:2b:0f:b7:
         89:59:d6:97:1a:ac:39:e1:d1:2a:8a:26:e5:20:c0:96:f8:f8:
         10:3e:bd:b0:f8:c2:a1:90:da:c0:08:a2:69:84:c4:4c:71:98:
         5c:bb:9b:09:06:f6:dd:09:5b:6a:88:67:2e:47:e0:be:37:18:
         ab:57:ef:fb:42:9b:35:32:2d:88:6b:75:44:c8:e4:d5:c0:c4:
         ba:5a:2d:eb:0c:a8:2a:0c:d3:d8:25:49:e4:61:87:da:3e:a4:
         ba:59:2e:97:45:55:83:74:1a:c3:90:b8:b4:f8:ad:e8:fb:3e:
         3a:8f:f5:2b:24:0b:57:9b:f9:61:d4:78:1b:b0:62:b8:06:1e:
         ba:8e:52:f7:0c:d0:b1:52:f2:b1:6d:09:89:4b:fe:e7:73:66:
         10:52:57:95:8b:2f:3c:8e:85:ff:ea:13:2e:df:50:cf:c5:7e:
         c9:7c:39:31:0d:c5:08:05:e2:21:01:b2:8d:e6:ec:c9:59:3c:
         5a:c2:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:11 2026 by rpki-client