Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa
File:                     96e4cd8a-4518-39f8-8f70-deaab990e083.roa (raw, json)
Hash identifier:          jb4+B8PMWfLdP67MQ0ufxnmHWY3XMrl0Rm+orsPcuTA=
Subject key identifier:   2F:58:4B:ED:B6:35:5B:06:FF:DA:A8:4A:A6:E0:6D:68:CC:D7:88:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA885C3448BF2D64632E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11955
IP address blocks:        69.23.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:88:5c:34:48:bf:2d:64:63:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=5be95ec9-7836-473f-a3e9-8c14cb365fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:8d:75:1a:7d:74:3a:ec:1b:7c:b7:80:e0:
                    0f:88:b5:d4:d2:01:01:e1:31:84:0f:64:93:ef:1e:
                    5e:c4:38:0f:1e:30:e3:74:ff:01:03:5c:45:f2:ae:
                    49:20:7d:7d:fc:c7:28:b5:b4:29:9a:fd:bc:68:c0:
                    54:be:07:03:19:89:56:3f:fd:66:64:86:b2:d3:1e:
                    0f:e2:ab:86:c2:d1:91:52:7e:de:97:40:17:54:0e:
                    f7:0c:47:d7:77:65:7e:8a:3b:9d:0a:81:e6:5e:91:
                    02:c5:1a:35:70:07:4f:5d:05:b1:b2:fe:1f:35:b0:
                    9a:de:3b:98:9b:6c:86:0d:f9:53:67:da:6c:07:78:
                    ac:48:cd:9a:47:a6:ab:42:79:c7:72:33:1f:1c:a5:
                    16:57:8f:a5:32:58:90:0e:82:49:16:3f:19:c7:1b:
                    d6:04:5a:78:32:f8:49:b4:b6:66:0d:d6:1e:1d:b2:
                    c3:f1:06:04:ac:76:db:23:bf:8c:fa:79:91:c6:5a:
                    9d:dc:c4:7b:0f:74:8c:14:e4:df:69:0d:15:ab:e6:
                    ea:41:35:2a:10:3d:38:6f:64:27:35:2c:e6:8e:c5:
                    5d:f4:29:48:67:6b:b4:db:40:92:9b:05:aa:de:ca:
                    41:e5:f8:fc:a0:3a:5a:33:d1:62:39:1f:3c:1c:61:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:4B:ED:B6:35:5B:06:FF:DA:A8:4A:A6:E0:6D:68:CC:D7:88:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96e4cd8a-4518-39f8-8f70-deaab990e083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.23.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:11:d9:6a:d3:2f:aa:8d:74:f6:df:e3:b8:e0:d9:82:18:2e:
         c8:d3:02:f0:55:f2:2f:52:a7:33:e0:89:fc:e5:0c:48:11:09:
         45:21:30:51:54:54:b5:f2:bc:05:c2:b3:a4:db:fa:13:2d:4e:
         d9:85:0a:64:5e:23:b9:61:33:88:84:f3:71:dd:84:74:42:10:
         04:30:01:fc:95:ac:77:22:d3:fa:32:9b:0a:34:7c:25:50:04:
         f7:f2:72:6b:43:92:10:96:d6:de:8c:11:1f:34:7e:9c:70:aa:
         e4:76:31:9a:a4:e6:06:73:f9:b0:1c:16:30:26:33:40:82:67:
         14:bb:f7:cc:8a:1c:0c:dc:44:dc:50:2d:65:47:5c:b7:6f:b9:
         ef:9b:3c:ee:b0:e7:16:58:29:35:a2:75:fa:13:d0:cc:31:b8:
         9d:c8:20:3d:91:3f:77:64:30:62:8e:e5:67:36:3b:fd:6d:ec:
         4f:d6:c0:6d:df:d3:ca:31:09:55:e1:d8:a6:e5:7c:a9:50:67:
         cf:8e:9f:0c:62:39:41:20:5e:6e:e9:b5:3e:90:5d:3a:f7:0d:
         92:e2:c1:41:d9:41:2e:53:f3:a4:38:9a:0c:44:10:93:d4:bf:
         0f:27:86:ef:86:cd:f8:90:15:fc:a1:f2:63:15:01:28:d0:6b:
         3a:a5:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:55 2026 by rpki-client