Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97dc0b99-acc0-31e3-aeb3-289d1830f1fd.roa
File:                     97dc0b99-acc0-31e3-aeb3-289d1830f1fd.roa (raw, json)
Hash identifier:          tyTi52/8KE6hi4U+vkXuFglY60YQ2LoEw4QVRxMBle4=
Subject key identifier:   01:CE:99:22:B2:F4:24:C1:9A:25:7E:59:AC:36:F0:48:81:74:3E:51
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB12BD7276778C4E899680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97dc0b99-acc0-31e3-aeb3-289d1830f1fd.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        24.209.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:12:bd:72:76:77:8c:4e:89:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3adee179-b5a9-444d-8a69-65af38c7f5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:42:1d:ca:4a:2a:77:96:a4:84:97:ae:8d:
                    86:98:21:fd:8f:00:ac:20:71:1a:5c:43:88:c8:f6:
                    22:1c:ed:24:c4:b0:53:75:a6:3e:0e:26:4d:4d:59:
                    f7:d8:40:4e:62:de:97:eb:ed:2c:33:d0:c2:fc:1f:
                    3a:96:20:9f:5e:2a:cc:60:fe:8d:8e:39:1e:13:cb:
                    3d:40:76:1e:e5:9d:db:7b:10:2f:c9:f5:69:52:59:
                    2c:d6:63:ac:1a:8a:8e:be:fb:fd:2e:2d:98:52:70:
                    c6:95:69:27:25:5b:fd:9c:2c:b0:12:ba:7a:0a:da:
                    29:00:74:0c:1d:7c:ed:06:6b:27:93:20:6f:08:d3:
                    9b:85:3a:54:1e:a0:c3:6e:10:99:9c:cd:70:2c:13:
                    d2:04:22:f5:75:29:01:c5:a9:8f:1f:ce:a6:0e:44:
                    96:fc:ae:c9:94:92:b8:05:29:69:9d:ab:da:82:98:
                    0e:86:ae:bb:83:f5:3f:33:0f:c4:e0:33:8d:de:93:
                    59:b2:2b:8a:ca:f1:83:a3:db:6b:ea:60:32:cf:0b:
                    80:f9:5d:01:04:c0:52:23:82:99:80:ba:aa:04:fc:
                    72:f7:a8:7a:40:11:15:2e:0e:51:2a:61:8a:76:27:
                    5e:66:64:fa:0d:6d:8e:da:3b:94:5d:dd:07:85:c4:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CE:99:22:B2:F4:24:C1:9A:25:7E:59:AC:36:F0:48:81:74:3E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97dc0b99-acc0-31e3-aeb3-289d1830f1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.209.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:7c:82:29:43:a8:e4:9f:3d:ee:63:e8:12:a4:36:9a:25:
         0b:4e:ce:5f:34:d5:88:74:c7:76:74:1e:1d:f0:79:03:b7:f4:
         13:ca:b4:8c:35:50:cd:d3:37:77:64:7c:f0:ea:b7:43:c2:98:
         06:e3:6a:d5:74:76:00:89:90:23:42:09:34:9f:95:e6:5a:fd:
         c1:51:61:bf:8b:73:1f:ae:25:08:11:6f:95:d0:83:56:5c:9e:
         3c:0d:e3:77:6c:5f:3e:a3:37:27:8c:ae:d5:d8:ad:79:97:85:
         17:83:de:4f:28:c0:77:93:c2:8c:7f:c7:2a:99:7f:12:72:9a:
         90:23:0b:98:f7:1b:a5:b3:47:88:2e:1c:ee:04:f6:31:e9:c3:
         5f:85:29:c6:4c:6d:b2:74:88:20:a1:19:ce:f6:8f:57:01:0c:
         3d:a4:1b:bb:12:a1:c9:6c:89:1e:a3:c9:29:85:06:6f:2b:27:
         b5:2d:90:6f:01:a0:5a:93:47:32:2a:84:99:2f:3c:ea:46:05:
         d1:be:15:5e:71:c6:25:24:40:79:1e:0e:12:b9:04:ae:2d:97:
         0a:be:92:40:f6:19:e0:0a:9f:a6:a8:a8:ed:56:f5:82:d4:97:
         13:de:7d:57:f3:a0:34:3e:5b:d9:56:54:b3:bf:17:ff:49:d4:
         68:2f:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:07 2026 by rpki-client