Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa
File:                     96f91885-2a18-364d-bf54-700086bc68e4.roa (raw, json)
Hash identifier:          7bcvQxzUfnzmXHIjZOKD6hG76NP3nU+b97PyrJOxVcM=
Subject key identifier:   63:0A:76:A0:94:81:5C:34:B6:7B:9A:7C:EA:75:70:9C:DA:46:23:66
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D225B8E1DD11ECC8A6DB0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     46847
IP address blocks:        71.67.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:22:5b:8e:1d:d1:1e:cc:8a:6d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b7438a40-b2e1-48e8-8a70-66ca0fe845db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:d1:75:2a:99:44:07:56:08:7e:6d:d3:d9:
                    ad:a0:31:b5:c8:a9:6a:8d:20:d2:01:91:04:33:5a:
                    9a:7e:21:68:dc:ce:f4:62:d0:39:ac:01:fe:d7:0d:
                    dc:c9:a6:81:23:85:46:5b:fb:c3:1b:83:2b:6c:dc:
                    6c:3b:05:4c:13:55:13:c1:f2:b3:a4:e8:03:69:be:
                    ff:6b:3b:f5:81:2d:c2:b4:66:5a:5d:b4:3b:f8:18:
                    ae:cd:f5:16:ab:80:3b:e6:13:a4:a3:5d:c3:a8:6c:
                    98:54:e1:43:e0:0b:23:46:02:84:ee:27:0b:4d:41:
                    57:58:64:bb:28:cd:e5:37:fd:65:4b:3e:76:0d:07:
                    06:d6:52:fe:9c:ff:27:f1:9f:07:bb:4d:84:d5:c5:
                    9d:43:6f:21:e6:fe:a9:98:f7:0c:e8:88:50:a0:6c:
                    cf:57:16:f6:ae:87:b7:cb:ff:71:9d:cb:e4:cc:4f:
                    30:6d:69:f7:6b:cf:d1:e5:06:d9:0e:36:69:81:4f:
                    c1:b1:fc:1e:7e:e1:1c:1f:cb:ea:40:cc:90:d2:1e:
                    e9:2a:e0:bf:ca:dc:1e:97:42:02:01:dd:a5:16:01:
                    3f:4d:b0:88:64:79:07:4c:29:7b:b4:65:25:1e:60:
                    13:7a:3f:65:1b:22:f0:15:d8:86:7a:a0:1e:b0:51:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0A:76:A0:94:81:5C:34:B6:7B:9A:7C:EA:75:70:9C:DA:46:23:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/96f91885-2a18-364d-bf54-700086bc68e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.67.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:03:7e:1a:cc:89:c4:88:e0:b8:2e:19:da:85:27:aa:06:30:
         ab:0f:94:cf:3d:8b:0a:2b:2f:33:fa:e5:5f:b7:10:35:a1:34:
         ba:d1:8f:eb:eb:bf:74:b2:92:99:35:15:c0:c3:6b:f3:4d:cb:
         73:7d:17:11:92:71:4f:e4:f1:34:e1:83:bf:f2:40:ff:bf:1a:
         37:05:a9:1d:fd:21:3a:9c:c9:f5:c0:80:5e:a0:ed:b5:79:46:
         ac:e9:d6:89:d1:ed:8f:c6:fb:76:fe:40:c1:04:89:db:db:9b:
         c2:14:2e:31:d8:3e:1b:6e:88:49:a8:49:ba:e2:59:89:c6:1e:
         1e:1b:db:19:5e:5d:28:1b:c8:9e:a1:e5:b6:ca:7a:83:9a:13:
         27:f0:e3:f0:36:10:69:39:60:f7:82:ab:76:74:e7:d5:31:2a:
         27:8d:72:ed:11:d9:bb:c5:73:a4:58:2f:71:01:c6:5d:da:f2:
         1c:6d:a4:72:68:83:6c:8c:c0:e6:5c:b8:22:e9:56:22:71:4a:
         57:9d:39:85:66:28:27:d6:03:a7:8a:6e:3f:0f:41:47:c1:b6:
         3d:2f:66:28:03:44:d3:14:46:96:ba:28:a2:8b:08:7b:2a:8a:
         61:65:d3:0e:f6:1b:33:7b:70:60:bb:96:90:cf:b1:81:0a:0a:
         2a:92:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:37:37 2025 by rpki-client